last executing test programs: 6m45.353730126s ago: executing program 4 (id=26): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000e00)='./file1\x00', 0x2040c0, &(0x7f00000015c0)=ANY=[], 0x6, 0xc46, &(0x7f00000021c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) open(0x0, 0x2100, 0x50) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 6m42.405003293s ago: executing program 4 (id=32): getpid() setns(0xffffffffffffffff, 0x24020000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000002b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}}, 0x0) umount2(&(0x7f0000000000)='./file0/file0/..\x00', 0x1) pivot_root(0x0, &(0x7f0000000180)='.\x00') syz_open_dev$evdev(0x0, 0x0, 0x822b01) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$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") truncate(&(0x7f0000000280)='./file2\x00', 0x1bf4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 6m32.182826217s ago: executing program 4 (id=46): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) setpriority(0x0, 0x1, 0xa7a8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710446000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000580)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0x2cf7) r1 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r1, 0x0, 0x0, 0x24000010, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r3, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) 6m29.162849858s ago: executing program 4 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f00000003c0)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000011c0)=ANY=[@ANYRES8=r1, @ANYBLOB="2c67726f80705f69643d46c7dd199395038d8ab386dbe2cb891ca7bf41aaf730c5fbac7f15a2bd86ca667ec611f0defb996ce90ac2e5c38b160a66c4efa7897193576cff193c6a394a9ad909872dbdaa7ceeb4cc88909bbb", @ANYRESOCT=0x0, @ANYRES8=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x40384708, &(0x7f00000000c0)={0x8, 0x1, 0x80, 0x3f, 0xe, "3e2a7ac84775d72417cc0200"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 6m27.709743719s ago: executing program 4 (id=52): munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x11) fanotify_init(0x200, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa0020, &(0x7f0000000100)={[{@bsdgroups}, {@barrier}, {@noquota}, {@block_validity}, {@nodioread_nolock}, {@errors_remount}, {@nodioread_nolock}, {@resuid}, {@dax}, {@nogrpid}, {@nombcache}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000000480)=""/244, 0xf4) 6m24.741822664s ago: executing program 4 (id=56): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f", 0x17}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 6m9.08515055s ago: executing program 32 (id=56): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f", 0x17}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 6m8.924479444s ago: executing program 0 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400040000000000100000008000000020000000000012"], 0x24, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$UHID_CREATE2(r4, 0x0, 0x1118) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0xa4}}, 0x84) r5 = memfd_secret(0x80000) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f00000003c0)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@bsdgroups}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) r7 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@orlov}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r7) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 6m4.522241596s ago: executing program 0 (id=91): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x26, 0x2, @thr={&(0x7f0000000000)="ace7094d464944707113a1d3207d73d8151ff80d786678506ededc91130f722860c5bccf95f3b652c6b4f23cd654526e6d9e599243c7", 0x0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) lseek(r0, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r5, &(0x7f0000000580)=""/174, 0xff56) 6m2.472546726s ago: executing program 0 (id=94): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0x7, 0x0, 0x1, 0x7fd, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0x3, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e640000000034000280050001"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000e000000000000aa505082520b00f7d0d3251d3a35a17d9010f2c69e448df825d0b8ca81962d68124c3622c832749de736f84490292d89e7408980e0fd9456473c99f9cbc151d2a8e2b12015fa63fe7d0300412b0ad411"], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 5m52.692793512s ago: executing program 0 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_clone(0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000000) socket$netlink(0x10, 0x3, 0xc) 5m48.994401851s ago: executing program 0 (id=106): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x2, 0x1, 0x7, 0xe, 0x3e, 0x8f, 0x6, 0x6, 0xffffffff, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x6, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x6, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xa, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x6, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x6, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x5, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) msgget$private(0x0, 0x1f3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3801009, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 5m45.985827421s ago: executing program 0 (id=109): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x62}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r4, 0x4, 0x0) getdents64(r4, &(0x7f0000000200)=""/176, 0xb0) 5m30.589223792s ago: executing program 33 (id=109): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x62}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r4, 0x4, 0x0) getdents64(r4, &(0x7f0000000200)=""/176, 0xb0) 4m12.757488924s ago: executing program 1 (id=222): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200), 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001080)='./file3\x00', 0xc1c0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) linkat(r3, &(0x7f00000004c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x400) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4m10.434870537s ago: executing program 1 (id=224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000400)='logfs\x00', 0x20000, &(0x7f0000000440)='net/ipv6_route\x00') move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[0x0, 0x0], 0x4) r1 = getpgrp(0x0) ioprio_get$pid(0x207e1e73da1d2d72, r1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x844041, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r2, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) open(&(0x7f00000002c0)='./file0/file0\x00', 0x151a42, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 4m6.993336173s ago: executing program 1 (id=230): socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m0.446451378s ago: executing program 1 (id=239): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000180)="aa131fd2222953972e434ed7973ec947e2fca463eb38b0c57a5375640607fa79f65b1e90817ec2266f90b20bb6e4f554720d3197bde013a6e2fa812879e35e29bf5285e6289ba537591bcbf3534e3f60833687e40c49cf53fb26a3cd59fe5529ee321f84746ab316bb0eec0c6c3c4ae4c4c4df42fc056b02aea0f4244276d356c56e795eaa9a45f91f9296", 0x8b, 0x4000000, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 3m57.941719932s ago: executing program 1 (id=244): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x1) socket(0x25, 0x801, 0x7) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) readv(r3, 0x0, 0x0) 3m53.99079395s ago: executing program 1 (id=247): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0xb}, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) clock_nanosleep(0x5, 0x0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3m38.873031527s ago: executing program 34 (id=247): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0xb}, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) clock_nanosleep(0x5, 0x0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 7.665510502s ago: executing program 6 (id=615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffffffffffd97, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 7.349829686s ago: executing program 6 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40014) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x19, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x8080, 0x800, 0x0, 0x440000, 0x0, 0x0, 0x400000, 0x0, 0xfffffffd, 0x20000, 0x0, 0x7}}) connect$inet(r9, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x24000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0xfffffbff, 0xfffffffd, 0x22, 0x5, 0x1101, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000500000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000100000d03"], 0x0, 0x65}, 0x28) 5.485111175s ago: executing program 3 (id=623): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r0 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x0) 5.368417683s ago: executing program 5 (id=624): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000480)={0x0, 0x4, 0x29, {0x29, 0x21, "c263138526792c3cbdeacecbc50fb4d5e1b74237cc6e446c4e88e78881ce2a52973661d67a0cfd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.985864903s ago: executing program 3 (id=625): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x20200, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) close(0x3) 4.457177153s ago: executing program 3 (id=627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}}, 0x40080) 4.230221848s ago: executing program 3 (id=629): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xa31, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x962, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0x7d, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x28, {0x28, 0x8, "83efb930f01842562348d180df821558d30a126018b02b8c1f86f11e99ff7ff0478fa22a61a5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.831803678s ago: executing program 6 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.88366013s ago: executing program 5 (id=634): syz_usb_connect$cdc_ncm(0x6, 0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902740002010420040904000001020d00000524060001052400000200060008"], 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 2.794176214s ago: executing program 6 (id=635): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01a8344a9d0000000000020000000900020073797a3200000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.526526679s ago: executing program 6 (id=637): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.994605762s ago: executing program 2 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 1.790996961s ago: executing program 8 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.732890367s ago: executing program 6 (id=642): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "0335"}, @global=@item_4={0x3, 0x1, 0x3, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x4, "5d8c3dda"}]}}, 0x0}, 0x0) 1.683935261s ago: executing program 2 (id=643): unshare(0x40400) r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) 1.549715113s ago: executing program 7 (id=644): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) unshare(0x6020400) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) 1.52164082s ago: executing program 2 (id=645): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb4", 0xd0}], 0x1}, 0x18084) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x63, 0x0, &(0x7f0000000640)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.519534032s ago: executing program 8 (id=646): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 1.436866057s ago: executing program 3 (id=647): unshare(0x22020400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) 1.281484724s ago: executing program 7 (id=648): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="2928a5d94b2b4b529f953c4161cf33189efb662e1c3739828b8639eec855809e75fd59521fdbe05272cb90d0015a1fa8a58601ec9e55c4095a0e40a9da85a6748c81924309b837003749191c719fb9ac4b71f29e90c4013f7d3a8df84c6858b3000237ca8bf9decc7196c0a70396603e32bc9d75f245d34f885a0cc7dc889dffeb8c28e16c985e2139bb125a7ea77e33cd748e05f858bfa200a9cbc2f7beae65e90962cddbd00a9945138c4bbd20575eab000ad31d65aee9d49e21ae65895973bdd9518c62fc1418d889a0b6c66bf540aef70b61cc8f17043f0f5a4b793e93542fc446c610f96cf62ae1bda419e2ab53c03f036c08c5cd6e3199bdb97066f4a5dc8129c2940955fc825b4b83e821c4cd38154f7271c036e59ae789e7f22e4944cd3b3ec459af08e2d4766dc9f522f1890be02815cc9981a8f775b39dc8d7830bfe4cacf6c92b54b9275815c7be2d6dd34aa68566209597f3b5233ca223ccce888ce77d43c4ddf7b5b11217c0cec5fea6f5d28f4d1c33037e6dad1b56bd00f423639f678005104fdeb332e6b0cf9d4585fcb24732ffb94c115347b0ae6d78bc3d8169f714f375f04bfc7d85e7e108c201ab9601dea9affc0c55695aa30bc892143f4ec33a9920d6c4d32b0e9946f2c7f7a76d305f725b6e40e1792d3432a0424212f73bab550373147cf56a15cb0bf9763c157ac0b5c2a98aaeff975a4e5f822bc17b5162531d2c8a657edf9f5a3816c87e8a33d0cba877de25ce0084447d4c70ce8a6c7da3f6c2a7f29ccd84ca3ed713a5931d3612065d6606b8e137856598d1cdae91d158b0148ce128ac5d101776b5ba61c99e730db8e7eca5e8ff908d4197fbf07fd1926be83788f2659e7157e56c83f216997afd60823bea00e0164f6473a34e24ae29fc857549fe7e1db1dca99aa9658b05d5ca1aa9edf3dcc0357612d2078ef651eb37ba845b6d63224d262407af730888d9f5b46e858976d2503abcc204e2618dd7887b6ea316105d3a6b06c4d0dcc4b5806d6f5f1edff3eb21e3f1b283cf4f9df7d17da8fcf3d3abdcb0d410b7a1fc330414a674be47b862d47a71e3809ee25591bf5bee9e3b4a557aa6be2d2ccc4e6ec801060029862d4429b3acd3a2d01696cddfc14f67c584c6ef39bdfa67daeb390dbafb01b64de747c35d9307d7ec592d2f7efd8747c45cfb1a30b95911d01b9997251e46259fe21cc304bc5237e4235da8c9093b433828d020555b7aad4b62f192c851821e12da57ccbb9bb2a7c2b76f4983e034f8a8b4f60208d86f54cc63f147aba57cebfd9b46f434e7a8e6565b55312a84410202ba9aeea3495c788df516e7832b70a7970f87ef1bafb1ef2cb6cc66d0aa66809d4a45984ee0b19493307ec0da07e91bbf6cce5e2e8f6a63375dcac5cf4b22910590c3886769ed65cb024f5744e2d0efada2402499ee5579aeb6f0a8f45fa3f2432f996a977b1c79817d8c058eccb157f9de551d0cbafe7cef06e88e9ec6da2c37207337f1ab5341d22f89f13b20a2c995fab667327cd0f1a386403d81ce77f72163b252bcd4cf1c51ad0eefd809ab87de1fab5a9c5c7bd462336eb6c3b083c5053e3c55d9cd3bdd6bb5ee061fa72e0a43bc6d4e6dc5290419c905e7546f441fec97a496a4ce4146c5f8c975a6e9e6eddae03a5b9bd9a61ee59dbca15c3786a5975bac5d6aeaa209b0f5cf62e91171e6ea014b282f3b454cf75e8882cfbab4620c3680ded48732a305c531c9c653e550817d6094fcc28300b842597b465051e89adc1daa08c839cfef3d3394e07938166ec5c6399b39707c5b1dee8711c83d3d53cfef6749a09dc881378fe55d62e52d68167fd4265980ffda0e551581fc70c7685718c123d18bdb40a58755fdfde5ba1f22425728a42f239070275a6ee31d969c41d6673c423371eed68a55e3f58cbfaf83382dc4a0546effa73fce4ac7a8e6d134995219ca884723d0fb70bdc4d90af24a68f001ad700bf40182cec86f0ef48e0aaca70b682d03f053d7bfe256259107335a0229aba62e9ff22847722e30ab49d5fa6a15f4ea763a7f35e2c0a25d2587b41fb119bc22862d0d9d986c2455a90fbb22a084a9e891afe9f151d452d9c63d64033c7a872ff45a740eb5a9fb4c8e05777f686d6c174f64a98a0420c33b4e83e0d05292b0af8f2b446e5d19217b3bd009b36983f7b2fd72720571b2816fd54cdabe0a16fa90c97f4d9d6090c3e38277adaeceb4d8ed132f58cf2f1d6b182f3336b647508d34c3390a6b56a1208fea4ae3aba9c01609fb26e0c76b3d3fd3ca38dd65705592bce227df7f7eb486e7d0ee49edcfa9e11ad6ec8cadcd9bfb1ea1c52751a60d1746784e0c5e9a3698f0112b6681599c54ee433b7ef3bdef6a38a4ee4572df24db5ad08a3190588e5a4d46f4ba8617d6f9c8f8dbaee100501eb50fcaf53097c790c94caaa836f89244676364c409f97f549a8d3b1c14bc3f9b2e98667d098f66adae025ab4d045c01871c55ee1faa70abbcdf4ed23eab59e90e8266e3fd31a42138bfced204be63ca668d2aa303e3a3c34ba5f85faa7586f8a07663d1c32e3a4c944aa5cfaf5d52c66e47c0ccdb99392489d958fb01764b3751464ffd742ab9038d8a65688d416806e53b20c50e0be0f895d23006c9f4bd0da36fdaf101c46e3309264191567d8337b7c269a2744ae11f25b3d1ab6c4dde19ab450e66e1d142829e0f5e541a12fca0bc287f9dee8757798f3871dd5625c971b5210336dbdaafdcb787fb362d861a10d00d5e5c5adae21584c48a71486744e1b19fcca2de74ab72b68c79f1b7c2cc7f805864364474a614fd8ed1ca618f3bc6c4f5aadccb40aa6ef608e8fbeebdc2b4e90bda3132515f893b19e553174b39be6aa78f9b8e42353b0e96de6156b5de3cf3b32fc68aae90f2d8ac57c22020b8999cbf086c9e158f75ebbe76d2293137dc533172160bdb68d8d5bf3934e4cc928052d21e00f0a331ac23df80a9e65c05fff0319dc7f40af17a7883c50e08df4d9bbbdd793dca2726fbf1988686fcab86c4b1607076379a03e952e05d71e861a5aa351c90059325ba8a1bcda8bb81755a0c51c2bfe953cd2ec163d0f4eb471be9ae23bf5bdaf253903ac5b2c91882c037c27059cf3df167dc007c69e607acd16a074d839b24b360340de3a742826933bfb36eb0746b8fc902bd20154534de91727e69acaad950a5462a8c726f97b404f8bad7d7ac12f26505f95329b0c827cda4764f37f0315f249f052643bd0e68a020ee92d9f327fd0bb1c1ba8c51bc816bb7b98df05272dff717ad87a356eb21b954ff1fc30b490c260ac91ecf70482dfd2afab5d9a942bf023633c8fb5a864930ce299cb8b03dab614eee8b72b1bf453045147267159af9982c3a2a4755c9bc7c99a428d6707d117dfa7291e9e830fc83a4274b1532439471e6a83408b00ccf4b3803f1f5d97baecc5a446364c8aa31ccacab5291c034040cd0ac5bc939722caf12ded9447469e6e35c260d05c9830d3fcdeb325b5ac1026faae536be0b3c75200921d9a7260f7f947f69b1c542bed0375d5af86d27664cc24b90bc7e695f57cb323ea6e93a8960a82ed552fe4fc5bd7d86addbeb1e77fd9241cd715e5fde5e41de84839d844b1c314a13d9b0b50565ad91e27e6f7cc19ca88e684e348e098f4deb4801e236a6f7761c152c597db87a5d8019f4baafc699a694f0d207bb5ef5e0a213f6900adb940e8b715dbe5e71c182ff38c12c544e8fe09c5d8559e41865136d48c7922da0398a8af4d6820985ea7506266321430e9290e3e63118cc1162345ff768bd3b3e1efd4acc577d3d94c951cb9ad61006ca1ed0787e23e41eaf0647bcacdcf059c43f0577592010c732516a4aceac42823e911ddf4dce939cc63e93f48f4bb2c1826b16590dd5842fe3ae1ada4e4e79bcc9352a2e8b276a70c4242a43af2da8568b336b93bf61b159b06b416965ee02b43cecf0e2f4881c16d295e54ff6f7ab290fefd9a2be376755fcafc8591c081eb247ab404f2dcb1c332e391550f0a2f2cafc8aaf65ae8d93696cab01cc54f4bccb875c4d9098979bf121bd631867e190dd923bafafe82a82cfe31caa66e14be6d169f03313a1b51abcc721f2619202b454514a31b256e9d70665742cdceb392a150d97512812982d6d3b4f4f7415f96e7a4f34ad6a02a5a150ea0e9d3f15d111fffa30453113b7b1f376d5978b6853964db23b6dcef3f0d59353df5b5c2f03f28b536c6b3fa1a085da83aeeb0e63a51ccf93bc8b907137b6c49949d2cb3fa47df6560451be8d068590ef3ee62edc4417e55b958f6e81ffe014a290d0c59640fddc5a880407ef789b23766f7e2042ba526cab103926e00a41af240263c08242427c2b7f9abed96c32a3cb2cb8ea22c33e2e31ec2aaa00e31dcb03658670496dda5917ced630221ce6e2c127ed30633e3f463c3f8b12f386e761ae9f3400f4430008cb347d6d21367a511e24eb2eea7ed031ed9b3a56ed627a101264b3d4dff18f75f109c8aa008b77e095b35f74eedd6fc10c73b366547c15e5d788cf5968d0993513f5c9ae3c0a60f056dab0a125a5ebed9408cbb68ec21623b4f9d4c04c84a7d4dd92d7cb444dd4ee08773c9423c131a2c4ddf7601623aa1bc4f8b5117194e82b52349071c199f3c826cd99da33fcefbc05535f1e05fa442a5a40fa7104ec4ae2043c0e0d82760e8f1afa4d7da2969ab21b500f6d37f04fdd74d0aa4ccc853c90fdb8ef76f5739717ddb806e31c3513d4e741c898946d9c2651e6070728ac7ff7535c0aa5c16b63e1ff3da9259df1b4558c73528591d366975e1291431e65f26c233d127fab0f9db9f793ef3af8af6c0ff8a4d72ba4888c7700d68e0726f93117ed3dea68120995984937c5a477c2cc8c00906f672793f4d48b977fa4699b98f72d5a144bfde06d37a33aa1273af9ae2b60b395b1c8ceda441cf13191fd1c8745edd71c7d7ba97edd55b75b66d300e9091f1f452ea52b543a62255427dd4dd63f4a260609f83380e55b046ccb0ae01f375fff9ea32762eaedc6b40cafab45fcd9fc5a8462d5b7fdbaffe1dc52c49b3a0d1d71fb01fe6819626e76467c81a511fe1e768fb10dbddac38c6fef1de1e944c04d895950beac382051b08346978a2b69d938f045af19fe8b553814d34b4091db8cd2ca9ca5b1701672cff34f669bde0eed908b420e3cf6dd06cc32d3fd70d29d7c5c53f289fcbeb1bc5b64618d4b1b977f8363a097d73c5793c9c0b0ca5517630407d7eb4b2fd4a8fddfa81f12522be44ad6d081741e76b60c68c7e2d298d1d526a86d07d2e5421bd6e74b957a3b02796fee20b6e8331fe87908101c10dd4e74e1182e09dfe5b98142099c3b685276ea02e7c945ba1d0bf9fdc19a32f54d1ed2b2fd9c5a860e29686e1a6dc5ab9415233d199ddabd886331b877652255873380e2b8111324fbebb2b4c4b218e77c6007aff53d4f5fc35611e9ab0a6a3db347e6dc05d695d4b7c9afcc317150a2ca04a6f4edfb1aeab2646efdeb8ab733774630cd2857064fe34448dc5fb919bf963296079ae05d02a4409b00b03da5d6014df96eed0db3424e1a7bbda108ff693a01d0566bd3597621048c79c34e7096912ff2e9482bf80e240d8e4d9ac0f95d4a5c7acf0ebda956bf01c3d6a6f54600c6a7b857ad5c6254eab5c4d89dbbe658d4f4f50239281817609f49afb6124434e64afb2e3709d54f74aa20cef70f371551f53ba2cb803013658e02b907be140e34ee877a624ee0e9aee197816d7603ce9e343c3cc7399a4ae34", @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000002"], 0x0) 1.281129536s ago: executing program 8 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.219053319s ago: executing program 3 (id=650): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.212964794s ago: executing program 2 (id=651): ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x0, @loopback}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xf8) 1.106582321s ago: executing program 8 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8117}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 970.758432ms ago: executing program 7 (id=653): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 882.392568ms ago: executing program 7 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000001ac0)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="14ce582a1516", @remote, @multicast, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c) 879.807173ms ago: executing program 5 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="02004c060a000200aaaaaaaaaa1200000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 746.655211ms ago: executing program 8 (id=656): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 744.924695ms ago: executing program 5 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@supported_rates, @gcr_ga={0xbd, 0x6, @broadcast}, @preq={0x82, 0x20, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x97, 0x2, 0x1, @device_b, 0x1, @value, 0xcb, 0xfffff49c}}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040000) 535.856672ms ago: executing program 5 (id=658): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="675bdee1c1767e7eb2060f796a611cd31897bd238874f0af484c8962e4125ba4949dcebde58b33eea0dced6e47dc841bbe12987cb53d7f37ec72436001"], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPbxxzsww4Uki8ceD05Ab+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6e3Br8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020) 532.918426ms ago: executing program 7 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd30, 0x25dfdbfc, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x8000, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004009c) 429.209375ms ago: executing program 2 (id=660): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr210d+CaU8+gACBRHxSJq0QA9cQCD1goQEh3IMaVqVpg1qgkSriKYIlSPqXwAckfgLOMEFAScQV7gjpArlQuCAFq29mxrHDnYS1wn+fKSNZ/bhma93x56dsRNAzxrO/yQR+yLip4gYjIi++h2Gqw/LSwtTfywtTCWRZa/9luSHxe9LC1PlrknxuLfIjKQR6QdJHG5Q7tyVqxcmZ2amLxf5sfmLb4/NXbn69PmLk+emz01fmjh58sTx8eeenXhmU+IcyOt66L3ZIwdPvXHzlanTN9/89vO8vvuK7bVxVA1tuMzhGF55Teo9tuFn31oGatLJji5WhLakEZGfrv5K+x+Mvrh98gbj5fe7Wjmgo7Isy3atWrvSA1jMgP+wJLpdA6A7yg/6/P63XO5g96Prbr1QvQHK414uluqWHZV7oyjujQY6VP5wRJxe/PPjfImG4xAAAJvry7z/81Sj/l8a99bs9/9ibmgoIu6KiP0RcXdEHIiIeyIq+94XEfe3Wf5wXX51/+eH3esKrEV5/+/5Ym7rn/2/svcXQ31FbqASf39y9vzM9LHiNRmJ/l15fnyNMr566cePmm2r7f/ly3J/TJV9waIev+6oG6A7Mzk/uZGYa926XhkDvLY6/mRlJiCJiIMRcWgdz59fL+ef+OxIs+2r4l9aqIt/DZswz5R9GvF49fwvRl38pWTt+cmx/8XM9LGx8qpY7bvvb7zarPwNxb8J8vO/p+H1vxL/UFI7XzvXfhk3fv6w6T3Nv8ff+PrfmbxeSe8s1r07OT9/eTxiZ7K4ev3E7WPLfLl/Hv/I0cbtf3/EX58Uxx2OiPwifiAiHoyIh4q6PxwRj0TE0TXi/+bFR99af/ydlcd/pq3z336i78LXXzQrv7Xzf6KSGinWtPL+12oFN/LaAQAAwHaRVr4Dn6SjK+k0HR2tfof/QOxJZ2bn5p88O/vOpTPV78oPRX9ajnQN1oyHjhdjfWV+oi5/vDJunGVZtruSH52anenUnDrQmr1N2n/ul75u1w7ouLbm0Zr9og3YlvxeE3qX9g+9S/uH3qX9Q+9q1P6vRSyvedD1jlUHuIN8/kPv0v6hd2n/0Lu0f+hJG/ld/1qJ/ada27n8B4QdqsY2SPRtjWq0nYh0S1RjfYl0a1SjmtgVEa3ufO2OtZQuvzEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABskr8DAAD//7yV6PA=") 189.919748ms ago: executing program 5 (id=661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) 94.293248ms ago: executing program 7 (id=662): unshare(0x2000400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) 94.071315ms ago: executing program 2 (id=663): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}], 0x1, 0x20000044) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) 0s ago: executing program 8 (id=664): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1414c1, 0x14a) fallocate(r0, 0x8, 0x1ffc, 0x8000) kernel console output (not intermixed with test programs): W filter on device eth9 [ 300.527390][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.547842][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.581248][ T7433] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 300.603238][ T7030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.105093][ T7030] hsr_slave_0: entered promiscuous mode [ 301.111646][ T4936] Bluetooth: hci3: command tx timeout [ 301.119966][ T7030] hsr_slave_1: entered promiscuous mode [ 301.126433][ T7030] debugfs: 'hsr0' already exists in 'hsr' [ 301.138105][ T7433] EXT4-fs (loop3): Remounting filesystem read-only [ 301.144800][ T7030] Cannot create hsr debugfs directory [ 301.152793][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.171974][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.295346][ T57] team0 (unregistering): Port device team_slave_1 removed [ 301.374440][ T57] team0 (unregistering): Port device team_slave_0 removed [ 301.680251][ T7451] loop2: detected capacity change from 0 to 32768 [ 301.709168][ T7451] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.772552][ T7451] XFS (loop2): Ending clean mount [ 301.787371][ T7451] XFS (loop2): Quotacheck needed: Please wait. [ 301.938922][ T7451] XFS (loop2): Quotacheck: Done. [ 302.886925][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.166239][ T7448] syz.5.263 (7448): drop_caches: 2 [ 303.230501][ T4936] Bluetooth: hci3: command tx timeout [ 304.220134][ T7466] loop3: detected capacity change from 0 to 131072 [ 304.231735][ T7466] F2FS-fs (loop3): invalid crc value [ 304.322211][ T7466] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 304.343457][ T7466] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 304.540824][ T7470] loop5: detected capacity change from 0 to 131072 [ 304.551605][ T7470] F2FS-fs (loop5): invalid crc value [ 304.651340][ T7470] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 304.665550][ T7470] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 305.669241][ T4936] Bluetooth: hci4: unexpected event for opcode 0x0003 [ 305.676219][ T4936] Bluetooth: hci3: command tx timeout [ 305.835333][ T7481] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 305.858330][ T7485] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 306.533698][ T5624] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 306.601820][ T4936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.623553][ T4936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.634109][ T4936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.648509][ T4936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.660576][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.194983][ T7516] hub 8-0:1.0: USB hub found [ 308.202787][ T7516] hub 8-0:1.0: 1 port detected [ 308.755571][ T5622] Bluetooth: hci0: command tx timeout [ 309.582446][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 310.227811][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.577853][ T7538] Bluetooth: MGMT ver 1.23 [ 310.666771][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.676159][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.686645][ T7227] bridge_slave_0: entered allmulticast mode [ 310.706001][ T7227] bridge_slave_0: entered promiscuous mode [ 310.744059][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.793783][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.802521][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.809905][ T7227] bridge_slave_1: entered allmulticast mode [ 310.818771][ T7227] bridge_slave_1: entered promiscuous mode [ 310.843134][ T5622] Bluetooth: hci0: command tx timeout [ 310.891831][ T988] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 311.801757][ T988] usb 3-1: not running at top speed; connect to a high speed hub [ 311.813010][ T988] usb 3-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 311.824000][ T988] usb 3-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.837394][ T988] usb 3-1: config 1 interface 0 has no altsetting 0 [ 311.841556][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.847404][ T988] usb 3-1: language id specifier not provided by device, defaulting to English [ 311.869321][ T988] usb 3-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 311.886123][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.908467][ T988] usb 3-1: Manufacturer: ј [ 311.926405][ T7227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.937155][ T988] usb 3-1: SerialNumber: 馚퀋怘̓⸩ㅻ髿୬è±ïµëŠ™äžŸæ¯¤ìŽ²è•¼æ¶å«¬ì哖鳘놆젖蚢å¹Å®Íœížâ•ƒè´°áƒ»éŒïš—ê⃧뤓åºíœ»ì³¡æŽà¥•ä¼¼ç­°ìŽ³î½¦é†¾â´§ã¡šå¥§è­«ì™­êµ‹áŠºï©¸â¡’ï¾ã¦¤êƒ›í„¸Ã„솩쟠⠀ꙙㇽₕĤ白芵㜔ꚗ퇳ူ迣릷哭á™á‘‡à¾ˆë©¼èŽŒåºâ©æ›¶â®¬ä“⾜ኴ놗å è†¬å›ê£Œç™›ì••ë…¿î‹Ÿïœ†à¿¼à°¥ã¿½ì”©í˜¿ëµë©å¼ž [ 311.984860][ T7227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.244011][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.314751][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.339410][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.367251][ T7400] bridge_slave_0: entered allmulticast mode [ 312.402653][ T7400] bridge_slave_0: entered promiscuous mode [ 312.759602][ T7575] loop5: detected capacity change from 0 to 40427 [ 312.786288][ T7575] F2FS-fs (loop5): invalid crc value [ 312.878543][ T5622] Bluetooth: hci0: command tx timeout [ 312.883768][ T7575] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 312.902079][ T7575] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 312.909680][ T7575] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 312.920658][ T7575] F2FS-fs (loop5): Start checkpoint disabled! [ 312.934519][ T7575] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 312.942562][ T7575] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 313.149482][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.177098][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.212594][ T7400] bridge_slave_1: entered allmulticast mode [ 313.244051][ T7400] bridge_slave_1: entered promiscuous mode [ 313.262096][ T5987] kworker/u8:13: attempt to access beyond end of device [ 313.262096][ T5987] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 313.285772][ T7227] team0: Port device team_slave_0 added [ 313.334149][ T7227] team0: Port device team_slave_1 added [ 313.376444][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 313.376475][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 313.376490][ T5987] Workqueue: writeback wb_workfn (flush-7:5) [ 313.376522][ T5987] Call Trace: [ 313.376531][ T5987] [ 313.376545][ T5987] dump_stack_lvl+0xe8/0x150 [ 313.376583][ T5987] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 313.376619][ T5987] f2fs_write_end_io+0x124b/0x1710 [ 313.376680][ T5987] __submit_merged_bio+0x258/0x6a0 [ 313.376707][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.376734][ T5987] ? rcu_is_watching+0x15/0xb0 [ 313.376780][ T5987] __submit_merged_write_cond+0x3c9/0x4e0 [ 313.376825][ T5987] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 313.376869][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.376911][ T5987] f2fs_write_data_pages+0x2a27/0x36f0 [ 313.376998][ T5987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 313.377054][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377083][ T5987] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 313.377164][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377223][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377251][ T5987] ? __lock_acquire+0x683/0x2cf0 [ 313.377308][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377337][ T5987] ? lock_acquire+0x106/0x350 [ 313.377377][ T5987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 313.377414][ T5987] do_writepages+0x338/0x560 [ 313.377466][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377495][ T5987] ? reacquire_held_locks+0x104/0x190 [ 313.377536][ T5987] ? writeback_sb_inodes+0x450/0x1b00 [ 313.377578][ T5987] __writeback_single_inode+0x12e/0xf90 [ 313.377624][ T5987] writeback_sb_inodes+0x9de/0x1b00 [ 313.377655][ T5987] ? __lock_acquire+0x683/0x2cf0 [ 313.377710][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377751][ T5987] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 313.377843][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377872][ T5987] ? rcu_is_watching+0x15/0xb0 [ 313.377910][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.377940][ T5987] ? queue_io+0x2d3/0x470 [ 313.377978][ T5987] wb_writeback+0x41c/0xad0 [ 313.378014][ T5987] ? queue_io+0x281/0x470 [ 313.378054][ T5987] ? __pfx_wb_writeback+0x10/0x10 [ 313.378083][ T5987] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.378135][ T5987] wb_workfn+0x431/0x10f0 [ 313.378188][ T5987] ? __pfx_wb_workfn+0x10/0x10 [ 313.378213][ T5987] ? rcu_is_watching+0x15/0xb0 [ 313.378252][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.378281][ T5987] ? trace_hrtimer_start+0x82/0x200 [ 313.378322][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.378350][ T5987] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.378384][ T5987] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 313.378422][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.378456][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.378496][ T5987] ? rcu_is_watching+0x15/0xb0 [ 313.378534][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.378567][ T5987] ? process_scheduled_works+0xa20/0x14e0 [ 313.378596][ T5987] process_scheduled_works+0xa8e/0x14e0 [ 313.378667][ T5987] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.378704][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.378733][ T5987] ? assign_work+0x3cf/0x5d0 [ 313.378767][ T5987] worker_thread+0xa47/0xfb0 [ 313.378837][ T5987] kthread+0x388/0x470 [ 313.378872][ T5987] ? __pfx_worker_thread+0x10/0x10 [ 313.378899][ T5987] ? __pfx_kthread+0x10/0x10 [ 313.378936][ T5987] ret_from_fork+0x514/0xb70 [ 313.378979][ T5987] ? __pfx_ret_from_fork+0x10/0x10 [ 313.379010][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 313.379038][ T5987] ? __switch_to+0xc89/0x1420 [ 313.379073][ T5987] ? __pfx_kthread+0x10/0x10 [ 313.379112][ T5987] ret_from_fork_asm+0x1a/0x30 [ 313.379159][ T5987] [ 313.751228][ T5987] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 313.859391][ T7588] tipc: Failed to remove unknown binding: 66,0,0/0:2071554412/2071554413 [ 313.874004][ T988] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 313.899869][ T988] usb 3-1: USB disconnect, device number 3 [ 314.048191][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.081717][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.130580][ T802] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 314.139907][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.149925][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.177866][ T7227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.253772][ T7227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.261681][ T7227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.288259][ T7227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.299292][ T802] usb 4-1: Using ep0 maxpacket: 16 [ 314.307225][ T802] usb 4-1: config index 0 descriptor too short (expected 526, got 367) [ 314.315841][ T802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.331218][ T7591] netlink: 'syz.5.278': attribute type 1 has an invalid length. [ 314.339005][ T7591] netlink: 224 bytes leftover after parsing attributes in process `syz.5.278'. [ 314.343264][ T7400] team0: Port device team_slave_0 added [ 314.348517][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 314.366572][ T7400] team0: Port device team_slave_1 added [ 314.382323][ T802] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 314.394666][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.424762][ T802] usb 4-1: Product: syz [ 314.444021][ T802] usb 4-1: Manufacturer: syz [ 314.454907][ T802] usb 4-1: SerialNumber: syz [ 314.497743][ T802] usb 4-1: config 0 descriptor?? [ 314.592725][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.608086][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.668425][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.784469][ T5739] usb 4-1: USB disconnect, device number 4 [ 314.878128][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.886388][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.915621][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.951668][ T5622] Bluetooth: hci0: command tx timeout [ 315.200322][ T7227] hsr_slave_0: entered promiscuous mode [ 315.215223][ T7227] hsr_slave_1: entered promiscuous mode [ 315.236211][ T7227] debugfs: 'hsr0' already exists in 'hsr' [ 315.272244][ T7227] Cannot create hsr debugfs directory [ 316.312618][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.318979][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.604659][ T57] bridge_slave_1: left allmulticast mode [ 316.617497][ T57] bridge_slave_1: left promiscuous mode [ 316.783655][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.284626][ T57] bridge_slave_0: left allmulticast mode [ 317.327925][ T57] bridge_slave_0: left promiscuous mode [ 317.364358][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.812218][ T7635] Bluetooth: MGMT ver 1.23 [ 319.751336][ T7645] loop2: detected capacity change from 0 to 40427 [ 319.769588][ T7645] F2FS-fs (loop2): invalid crc value [ 319.881969][ T7645] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 319.893698][ T7645] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 319.901359][ T7645] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 319.912259][ T7645] F2FS-fs (loop2): Start checkpoint disabled! [ 319.925625][ T7645] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 319.933780][ T7645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 320.009913][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.287'. [ 320.021218][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.043120][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.069085][ T57] bond0 (unregistering): Released all slaves [ 320.196812][ T7400] hsr_slave_0: entered promiscuous mode [ 320.247301][ T7400] hsr_slave_1: entered promiscuous mode [ 320.274776][ T7400] debugfs: 'hsr0' already exists in 'hsr' [ 320.282528][ T7400] Cannot create hsr debugfs directory [ 320.851926][ T5622] block nbd0: Wrong magic (0x0) [ 320.902826][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 320.929116][ T6402] kworker/u8:24: attempt to access beyond end of device [ 320.929116][ T6402] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.976506][ T6402] CPU: 0 UID: 0 PID: 6402 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 320.976539][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 320.976555][ T6402] Workqueue: writeback wb_workfn (flush-7:2) [ 320.976591][ T6402] Call Trace: [ 320.976601][ T6402] [ 320.976611][ T6402] dump_stack_lvl+0xe8/0x150 [ 320.976651][ T6402] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 320.976692][ T6402] f2fs_write_end_io+0x124b/0x1710 [ 320.976757][ T6402] __submit_merged_bio+0x258/0x6a0 [ 320.976785][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.976815][ T6402] ? rcu_is_watching+0x15/0xb0 [ 320.976862][ T6402] __submit_merged_write_cond+0x3c9/0x4e0 [ 320.976906][ T6402] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 320.976956][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.976997][ T6402] f2fs_write_data_pages+0x2a27/0x36f0 [ 320.977084][ T6402] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 320.977183][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.977213][ T6402] ? lock_acquire+0x106/0x350 [ 320.977251][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.977298][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.977327][ T6402] ? unwind_next_frame+0x1baf/0x2550 [ 320.977360][ T6402] ? ret_from_fork_asm+0x1a/0x30 [ 320.977407][ T6402] ? ret_from_fork_asm+0x1a/0x30 [ 320.977444][ T6402] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 320.977482][ T6402] do_writepages+0x338/0x560 [ 320.977527][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.977556][ T6402] ? reacquire_held_locks+0x104/0x190 [ 320.977598][ T6402] ? writeback_sb_inodes+0x450/0x1b00 [ 320.977640][ T6402] __writeback_single_inode+0x12e/0xf90 [ 320.977687][ T6402] writeback_sb_inodes+0x9de/0x1b00 [ 320.977718][ T6402] ? __lock_acquire+0x683/0x2cf0 [ 320.977773][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.977819][ T6402] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 320.977912][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.977941][ T6402] ? rcu_is_watching+0x15/0xb0 [ 320.977979][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978009][ T6402] ? queue_io+0x2d3/0x470 [ 320.978047][ T6402] wb_writeback+0x41c/0xad0 [ 320.978084][ T6402] ? queue_io+0x281/0x470 [ 320.978125][ T6402] ? __pfx_wb_writeback+0x10/0x10 [ 320.978154][ T6402] ? do_raw_spin_lock+0x12b/0x2f0 [ 320.978206][ T6402] wb_workfn+0x431/0x10f0 [ 320.978260][ T6402] ? __pfx_wb_workfn+0x10/0x10 [ 320.978291][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978332][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978360][ T6402] ? do_raw_spin_lock+0x12b/0x2f0 [ 320.978392][ T6402] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.978432][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978466][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978506][ T6402] ? rcu_is_watching+0x15/0xb0 [ 320.978544][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978576][ T6402] ? process_scheduled_works+0xa20/0x14e0 [ 320.978606][ T6402] process_scheduled_works+0xa8e/0x14e0 [ 320.978676][ T6402] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.978714][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978743][ T6402] ? assign_work+0x3cf/0x5d0 [ 320.978780][ T6402] worker_thread+0xa47/0xfb0 [ 320.978812][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978856][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.978885][ T6402] ? __kthread_parkme+0x71/0x1f0 [ 320.978933][ T6402] kthread+0x388/0x470 [ 320.978969][ T6402] ? __pfx_worker_thread+0x10/0x10 [ 320.978996][ T6402] ? __pfx_kthread+0x10/0x10 [ 320.979035][ T6402] ret_from_fork+0x514/0xb70 [ 320.979076][ T6402] ? __pfx_ret_from_fork+0x10/0x10 [ 320.979112][ T6402] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.979140][ T6402] ? __switch_to+0xc89/0x1420 [ 320.979176][ T6402] ? __pfx_kthread+0x10/0x10 [ 320.979216][ T6402] ret_from_fork_asm+0x1a/0x30 [ 320.979264][ T6402] [ 321.410395][ T6402] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 321.679219][ T57] tipc: Left network mode [ 321.716042][ T7661] loop5: detected capacity change from 0 to 512 [ 322.376266][ T7661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.451174][ T7661] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.792895][ T7673] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 322.901848][ T7673] netlink: 224 bytes leftover after parsing attributes in process `syz.3.291'. [ 322.998158][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 323.109107][ T7672] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters [ 323.650240][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.706442][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.721876][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.738487][ T7684] loop2: detected capacity change from 0 to 256 [ 323.782485][ T7487] bridge_slave_0: entered allmulticast mode [ 323.819690][ T7487] bridge_slave_0: entered promiscuous mode [ 326.038480][ T5800] libceph: connect (1)[c::]:6789 error -22 [ 326.805864][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.822090][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.848926][ T5800] libceph: mon0 (1)[c::]:6789 connect error [ 326.856382][ T7487] bridge_slave_1: entered allmulticast mode [ 326.903499][ T7487] bridge_slave_1: entered promiscuous mode [ 326.984776][ T7688] ceph: No mds server is up or the cluster is laggy [ 327.105092][ T7712] loop3: detected capacity change from 0 to 512 [ 327.112580][ T7227] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.131035][ T7227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.343961][ T4936] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.364477][ T4936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 328.377966][ T4936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 328.397205][ T4936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 328.985912][ T4936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.242887][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.808362][ T988] IPVS: starting estimator thread 0... [ 329.971303][ T7727] IPVS: using max 26 ests per chain, 62400 per kthread [ 330.242338][ T5864] IPVS: starting estimator thread 0... [ 330.264670][ T7736] loop2: detected capacity change from 0 to 1024 [ 330.561596][ T7735] IPVS: using max 24 ests per chain, 57600 per kthread [ 330.955007][ T7736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 330.956228][ T57] hsr_slave_0: left promiscuous mode [ 330.993657][ T57] hsr_slave_1: left promiscuous mode [ 331.012319][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.040561][ T4936] Bluetooth: hci6: command tx timeout [ 331.043791][ T7736] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.079224][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.154248][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.188856][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.229815][ T57] veth1_macvtap: left promiscuous mode [ 332.201201][ T57] veth0_macvtap: left promiscuous mode [ 332.208309][ T57] veth1_vlan: left promiscuous mode [ 332.300592][ T57] veth0_vlan: left promiscuous mode [ 332.631161][ T7739] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 332.755049][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 332.783865][ T7752] netlink: 'syz.5.302': attribute type 1 has an invalid length. [ 332.834668][ T7752] netlink: 224 bytes leftover after parsing attributes in process `syz.5.302'. [ 332.964332][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.302'. [ 333.117395][ T4936] Bluetooth: hci6: command tx timeout [ 334.503873][ T57] team0 (unregistering): Port device team_slave_1 removed [ 334.533932][ T57] team0 (unregistering): Port device team_slave_0 removed [ 334.734048][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.785892][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 335.200803][ T4936] Bluetooth: hci6: command tx timeout [ 335.814579][ T7487] team0: Port device team_slave_0 added [ 335.868859][ T7487] team0: Port device team_slave_1 added [ 336.048497][ T7770] loop2: detected capacity change from 0 to 4096 [ 336.175035][ T7770] ntfs3(loop2): ino=3, Correct links count -> 2. [ 336.322195][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.524776][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.348887][ T4936] Bluetooth: hci6: command tx timeout [ 337.474038][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.558104][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.597450][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.697361][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.886347][ T7795] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 338.944358][ T7795] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 339.533715][ T7400] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 339.616631][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.703600][ T7487] hsr_slave_0: entered promiscuous mode [ 339.728453][ T7487] hsr_slave_1: entered promiscuous mode [ 339.749308][ T7400] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 339.782510][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.887440][ T7400] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 339.916883][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.960510][ T5800] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 340.066700][ T7400] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 340.095509][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.174134][ T7802] loop3: detected capacity change from 0 to 512 [ 340.208928][ T7802] ext2: Unknown parameter 'obj_type' [ 340.228781][ T5739] IPVS: starting estimator thread 0... [ 340.731458][ T7811] IPVS: using max 24 ests per chain, 57600 per kthread [ 342.850858][ T5800] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.071445][ T5800] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 343.315013][ T5800] usb 4-1: can't read configurations, error -71 [ 344.467711][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 345.665665][ T7855] loop5: detected capacity change from 0 to 32768 [ 345.677527][ T7855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.316 (7855) [ 345.712698][ T7855] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 345.722884][ T7855] BTRFS info (device loop5): using sha256 checksum algorithm [ 345.746989][ T7857] loop2: detected capacity change from 0 to 128 [ 345.788320][ T7857] EXT4-fs: Ignoring removed orlov option [ 345.843790][ T7857] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.900893][ T7855] BTRFS info (device loop5): enabling ssd optimizations [ 345.907882][ T7855] BTRFS info (device loop5): turning on sync discard [ 345.914641][ T7855] BTRFS info (device loop5): enabling free space tree [ 345.921435][ T7855] BTRFS info (device loop5): use zlib compression, level 3 [ 345.946371][ T7857] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.987521][ T57] bridge_slave_1: left allmulticast mode [ 346.195184][ T57] bridge_slave_1: left promiscuous mode [ 346.226568][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.305962][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.316'. [ 346.943910][ T57] bridge_slave_0: left allmulticast mode [ 346.969719][ T7881] loop3: detected capacity change from 0 to 512 [ 346.978319][ T57] bridge_slave_0: left promiscuous mode [ 346.998104][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.006773][ T7881] EXT4-fs: Ignoring removed orlov option [ 347.045288][ T7881] EXT4-fs (loop3): Test dummy encryption mode enabled [ 347.084924][ T7881] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.129584][ T57] bridge_slave_1: left allmulticast mode [ 347.137229][ T57] bridge_slave_1: left promiscuous mode [ 347.145037][ T7881] EXT4-fs (loop3): 1 truncate cleaned up [ 347.154097][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.163859][ T7881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.797249][ T57] bridge_slave_0: left allmulticast mode [ 347.810909][ T57] bridge_slave_0: left promiscuous mode [ 347.822442][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.097861][ T5624] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.994360][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.081691][ T7875] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 349.124404][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.152389][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.166339][ T57] bond0 (unregistering): Released all slaves [ 349.269762][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.287655][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.298238][ T57] bond0 (unregistering): Released all slaves [ 350.014132][ T5638] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 350.015466][ T7875] usb 3-1: Using ep0 maxpacket: 16 [ 350.081873][ T7875] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.151713][ T7875] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.177568][ T7875] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 350.206204][ T7875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.245950][ T7875] usb 3-1: config 0 descriptor?? [ 350.317349][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.348852][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.375097][ T7714] bridge_slave_0: entered allmulticast mode [ 350.401798][ T7714] bridge_slave_0: entered promiscuous mode [ 350.450303][ T57] hsr_slave_0: left promiscuous mode [ 350.461618][ T57] hsr_slave_1: left promiscuous mode [ 350.491005][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.513408][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.548964][ T57] hsr_slave_0: left promiscuous mode [ 350.570265][ T57] hsr_slave_1: left promiscuous mode [ 350.578333][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.596954][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.732551][ T7875] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 350.830776][ T5352] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 350.964298][ T57] team0 (unregistering): Port device team_slave_1 removed [ 351.000453][ T5352] usb 6-1: Using ep0 maxpacket: 32 [ 351.018448][ T5352] usb 6-1: unable to get BOS descriptor or descriptor too short [ 351.026872][ T57] team0 (unregistering): Port device team_slave_0 removed [ 351.049394][ T5352] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 351.071128][ T5352] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 351.098955][ T5352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.133552][ T5352] usb 6-1: Product: syz [ 351.146999][ T5352] usb 6-1: Manufacturer: syz [ 351.166286][ T5352] usb 6-1: SerialNumber: syz [ 351.484427][ T5739] usb 3-1: USB disconnect, device number 4 [ 351.952424][ T57] team0 (unregistering): Port device team_slave_1 removed [ 352.084594][ T57] team0 (unregistering): Port device team_slave_0 removed [ 352.606121][ T5352] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 352.879744][ T5352] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 353.948769][ T7935] loop2: detected capacity change from 0 to 1024 [ 353.981633][ T7935] hfsplus: invalid file type 0174377 for inode 21 [ 354.224166][ T7933] loop5: detected capacity change from 0 to 2048 [ 354.357028][ T7936] hfsplus: extend alloc file! (16384,256,150995124) [ 354.534382][ T7933] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.574378][ T5352] usb 6-1: USB disconnect, device number 5 [ 355.146603][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.185397][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.218954][ T7714] bridge_slave_1: entered allmulticast mode [ 355.767896][ T7714] bridge_slave_1: entered promiscuous mode [ 356.135967][ T7487] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 356.255991][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.420889][ T7487] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 356.508274][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.693686][ T7714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.922702][ T7714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.651490][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.663967][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.675963][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.692557][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.717375][ T7487] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 357.725221][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.775052][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.775127][ T7487] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 358.941953][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.469618][ T7714] team0: Port device team_slave_0 added [ 359.528860][ T7714] team0: Port device team_slave_1 added [ 359.832035][ T4936] Bluetooth: hci2: command tx timeout [ 360.741652][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.759979][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.804599][ T7714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.044837][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.782759][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.809776][ T7714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.910925][ T5770] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 361.918824][ T4936] Bluetooth: hci2: command tx timeout [ 362.078551][ T8011] serio: Serial port ptm0 [ 362.088546][ T7714] hsr_slave_0: entered promiscuous mode [ 362.095034][ T5770] usb 3-1: Using ep0 maxpacket: 8 [ 362.106820][ T7714] hsr_slave_1: entered promiscuous mode [ 362.118056][ T5770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 362.122082][ T7714] debugfs: 'hsr0' already exists in 'hsr' [ 362.143630][ T7714] Cannot create hsr debugfs directory [ 362.173304][ T5770] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 362.243946][ T5770] usb 3-1: config 140 has 0 interfaces, different from the descriptor's value: 2 [ 362.417382][ T5770] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 362.502262][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.617906][ T5770] usb 3-1: Product: syz [ 362.666185][ T5770] usb 3-1: Manufacturer: syz [ 362.719461][ T5770] usb 3-1: SerialNumber: syz [ 363.086678][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.178268][ T5770] usb 3-1: can't set config #140, error -71 [ 363.285104][ T5770] usb 3-1: USB disconnect, device number 5 [ 363.292847][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 364.081805][ T4936] Bluetooth: hci2: command tx timeout [ 364.263661][ T8026] loop5: detected capacity change from 0 to 256 [ 364.271642][ T8026] msdos: Bad value for 'tz' [ 365.381929][ T8034] loop2: detected capacity change from 0 to 16 [ 365.558205][ T8034] erofs (device loop2): mounted with root inode @ nid 36. [ 366.150501][ T4936] Bluetooth: hci2: command tx timeout [ 366.625860][ T8043] loop2: detected capacity change from 0 to 256 [ 366.643341][ T8043] vfat: Deprecated parameter 'posix' [ 366.693957][ T8043] FAT-fs: "posix" option is obsolete, not supported now [ 367.835532][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.856201][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.864762][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.878549][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.892757][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.992524][ T4936] Bluetooth: hci3: command tx timeout [ 371.971836][ T8056] syz.2.345 (8056): drop_caches: 2 [ 372.070712][ T4936] Bluetooth: hci3: command tx timeout [ 372.495800][ T8087] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 372.504397][ T8087] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 372.514327][ T8087] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 373.691526][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14 [ 373.728396][ T57] bridge_slave_1: left allmulticast mode [ 373.734222][ T57] bridge_slave_1: left promiscuous mode [ 373.740048][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.791960][ T57] bridge_slave_0: left allmulticast mode [ 373.797761][ T57] bridge_slave_0: left promiscuous mode [ 373.803673][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.986844][ T8092] overlayfs: failed to resolve './file2': -2 [ 374.160648][ T4936] Bluetooth: hci3: command tx timeout [ 375.190773][ T7875] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 375.385903][ T7875] usb 4-1: not running at top speed; connect to a high speed hub [ 375.401978][ T7875] usb 4-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 375.419833][ T7875] usb 4-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.444220][ T7875] usb 4-1: config 1 interface 0 has no altsetting 0 [ 375.493816][ T7875] usb 4-1: language id specifier not provided by device, defaulting to English [ 375.532084][ T7875] usb 4-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 375.551721][ T7875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.565298][ T7875] usb 4-1: Manufacturer: ј [ 375.572530][ T7875] usb 4-1: SerialNumber: 馚퀋怘̓⸩ㅻ髿୬è±ïµëŠ™äžŸæ¯¤ìŽ²è•¼æ¶å«¬ì哖鳘놆젖蚢å¹Å®Íœížâ•ƒè´°áƒ»éŒïš—ê⃧뤓åºíœ»ì³¡æŽà¥•ä¼¼ç­°ìŽ³î½¦é†¾â´§ã¡šå¥§è­«ì™­êµ‹áŠºï©¸â¡’ï¾ã¦¤êƒ›í„¸Ã„솩쟠⠀ꙙㇽₕĤ白芵㜔ꚗ퇳ူ迣릷哭á™á‘‡à¾ˆë©¼èŽŒåºâ©æ›¶â®¬ä“⾜ኴ놗å è†¬å›ê£Œç™›ì••ë…¿î‹Ÿïœ†à¿¼à°¥ã¿½ì”©í˜¿ëµë©å¼ž [ 376.240982][ T4936] Bluetooth: hci3: command tx timeout [ 376.364228][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.683234][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.746159][ T57] bond0 (unregistering): Released all slaves [ 376.986466][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.008117][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.022639][ T7953] bridge_slave_0: entered allmulticast mode [ 377.109856][ T7953] bridge_slave_0: entered promiscuous mode [ 377.299790][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.314315][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.323628][ T7953] bridge_slave_1: entered allmulticast mode [ 377.337952][ T7875] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 377.347378][ T7953] bridge_slave_1: entered promiscuous mode [ 377.355876][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.363205][ T7875] usb 4-1: USB disconnect, device number 7 [ 377.371936][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.517526][ T57] hsr_slave_0: left promiscuous mode [ 377.524734][ T57] hsr_slave_1: left promiscuous mode [ 377.531184][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.538968][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.706238][ T57] team0 (unregistering): Port device team_slave_1 removed [ 377.743997][ T57] team0 (unregistering): Port device team_slave_0 removed [ 378.042439][ T7953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.250771][ T7953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.905367][ T8125] loop5: detected capacity change from 0 to 512 [ 379.025583][ T8125] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.354: missing EA_INODE flag [ 379.044419][ T8125] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 379.050376][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 379.054167][ T8125] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.354: error while reading EA inode 12 err=-117 [ 379.060134][ C0] EXT4-fs (loop5): initial error at time 1784868307: ext4_xattr_inode_iget:441 [ 379.066198][ T8125] loop5: lost filesystem error report for type 5 error -117 [ 379.078175][ C0] : inode 12 [ 379.078201][ C0] EXT4-fs (loop5): last error at time 1784868307: ext4_xattr_inode_iget:441: inode 12 [ 379.132304][ T8125] EXT4-fs (loop5): 1 orphan inode deleted [ 379.143475][ T8125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.154569][ T7953] team0: Port device team_slave_0 added [ 379.166330][ T7953] team0: Port device team_slave_1 added [ 379.193908][ T8130] loop3: detected capacity change from 0 to 1024 [ 379.278397][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.286689][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.313998][ T7953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.335586][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.346629][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.377919][ T7953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.505377][ T8130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 379.773629][ T8130] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.146631][ T8109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.162302][ T7953] hsr_slave_0: entered promiscuous mode [ 380.169067][ T7953] hsr_slave_1: entered promiscuous mode [ 380.203651][ T7953] debugfs: 'hsr0' already exists in 'hsr' [ 380.251227][ T7953] Cannot create hsr debugfs directory [ 380.288593][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 380.317181][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.347334][ T7714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.384072][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.411485][ T7714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.474112][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.970495][ T8148] loop3: detected capacity change from 0 to 512 [ 382.118945][ T8148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.067229][ T7714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 384.075875][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.180118][ T7714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 384.828317][ T7714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.858479][ T8161] loop2: detected capacity change from 0 to 128 [ 384.869589][ T8161] vfat: Unknown parameter 'shortn' [ 385.247092][ T8166] rdma_op ffff88804c89d9f0 conn xmit_rdma 0000000000000000 [ 385.883657][ T8157] loop5: detected capacity change from 0 to 256 [ 385.911188][ T8157] vfat: Unknown parameter 'ioc' [ 385.976757][ T8166] geneve2: entered promiscuous mode [ 386.143216][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.481928][ T8180] loop5: detected capacity change from 0 to 32768 [ 386.556899][ T8186] netlink: 168 bytes leftover after parsing attributes in process `syz.2.362'. [ 386.701831][ T8180] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.200132][ T3342] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 50245 - 0 [ 387.228146][ T3342] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 50245 - 0 [ 387.250713][ T8180] XFS (loop5): Ending clean mount [ 387.262607][ T8180] XFS (loop5): Quotacheck needed: Please wait. [ 387.452822][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.499881][ T8180] XFS (loop5): Quotacheck: Done. [ 387.666525][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.683444][ T30] audit: type=1800 audit(1784868316.601:5): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.361" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4428 res=0 errno=0 [ 387.684557][ T8050] bridge_slave_0: entered allmulticast mode [ 387.855705][ T5638] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.902606][ T8050] bridge_slave_0: entered promiscuous mode [ 387.953990][ T3342] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 50245 - 0 [ 388.003723][ T3342] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 50245 - 0 [ 389.879016][ T8216] loop5: detected capacity change from 0 to 16 [ 389.908005][ T8216] erofs (device loop5): mounted with root inode @ nid 36. [ 389.946199][ T8213] loop2: detected capacity change from 0 to 1024 [ 389.968076][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 390.169406][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 390.178918][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 390.188642][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 390.197457][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 390.459729][ T8213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 390.521600][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.597313][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.612984][ T8213] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.664654][ T8050] bridge_slave_1: entered allmulticast mode [ 390.669759][ T8228] loop5: detected capacity change from 0 to 1024 [ 390.672724][ T8050] bridge_slave_1: entered promiscuous mode [ 390.707304][ T8228] hfsplus: invalid file type 0174377 for inode 21 [ 391.047068][ T8226] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 391.438868][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 392.156671][ T8237] loop2: detected capacity change from 0 to 128 [ 392.259011][ T8237] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 392.310528][ T8237] FAT-fs (loop2): Filesystem has been set read-only [ 392.390647][ T5622] Bluetooth: hci0: command tx timeout [ 392.423325][ T8239] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 392.530895][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15 [ 392.564476][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.647476][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.004390][ T8255] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 394.017079][ T8255] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 394.470512][ T5622] Bluetooth: hci0: command tx timeout [ 394.833482][ T8050] team0: Port device team_slave_0 added [ 394.864539][ T8050] team0: Port device team_slave_1 added [ 395.163757][ T8262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.376'. [ 395.413088][ T8264] binder: BINDER_SET_CONTEXT_MGR already set [ 395.420796][ T8264] binder: 8259:8264 ioctl 4018620d 2000000002c0 returned -16 [ 396.546731][ T8270] loop5: detected capacity change from 0 to 512 [ 396.784278][ T5622] Bluetooth: hci0: command tx timeout [ 396.857993][ T8270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.871715][ T8270] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.026066][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.592019][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.678021][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.866013][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.075431][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.129499][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.504373][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.740532][ T30] audit: type=1326 audit(1784868327.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.3.380" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c8419de99 code=0x0 [ 398.824562][ T8312] hub 1-0:1.0: USB hub found [ 398.831598][ T5622] Bluetooth: hci0: command tx timeout [ 398.849496][ T8312] hub 1-0:1.0: 1 port detected [ 399.056657][ T8050] hsr_slave_0: entered promiscuous mode [ 399.071884][ T8050] hsr_slave_1: entered promiscuous mode [ 399.093224][ T8050] debugfs: 'hsr0' already exists in 'hsr' [ 399.105901][ T8050] Cannot create hsr debugfs directory [ 400.633098][ T5622] Bluetooth: hci1: connection err: -111 [ 401.714986][ T8351] loop5: detected capacity change from 0 to 4096 [ 401.772579][ T8351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.795699][ T7953] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 402.848316][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.866912][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.878325][ T7953] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 402.892564][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.902864][ T7953] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 402.916210][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.924422][ T7953] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 403.118461][ T7953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.880543][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16 [ 405.434371][ T57] bridge_slave_1: left allmulticast mode [ 405.697526][ T8373] loop5: detected capacity change from 0 to 32768 [ 405.705968][ T57] bridge_slave_1: left promiscuous mode [ 405.731124][ T8373] (syz.5.390,8373,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 405.750155][ T8373] (syz.5.390,8373,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 405.767905][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.790078][ T8373] JBD2: Ignoring recovery information on journal [ 405.841202][ T8373] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 405.906840][ T30] audit: type=1800 audit(1784868334.831:7): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.390" name="file1" dev="loop5" ino=16978 res=0 errno=0 [ 405.929006][ T57] bridge_slave_0: left allmulticast mode [ 406.022259][ T57] bridge_slave_0: left promiscuous mode [ 406.058163][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.725819][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.739021][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.782146][ T57] bond0 (unregistering): Released all slaves [ 407.811614][ T8373] syz.5.390 (8373) used greatest stack depth: 19240 bytes left [ 407.821801][ T30] audit: type=1800 audit(1784868336.731:8): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.390" name="file1" dev="loop5" ino=16978 res=0 errno=0 [ 410.018896][ T8433] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 410.722074][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 410.752045][ T57] hsr_slave_0: left promiscuous mode [ 410.758585][ T5638] ocfs2: Unmounting device (7,5) on (node local) [ 410.767152][ T57] hsr_slave_1: left promiscuous mode [ 410.800158][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.829914][ T8441] loop3: detected capacity change from 0 to 512 [ 410.838606][ T8441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 410.855229][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.864414][ T8441] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.398: bad orphan inode 131083 [ 410.878030][ T8441] loop3: lost filesystem error report for type 5 error -117 [ 410.884519][ T8441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.916867][ T8442] JFS: charset not found [ 411.476835][ T8441] Bluetooth: MGMT ver 1.23 [ 411.731460][ T5739] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 411.835087][ T8449] Invalid source name [ 411.839329][ T8449] UBIFS error (pid: 8449): cannot open "/dev/sequencer", error -22 [ 411.882225][ T57] team0 (unregistering): Port device team_slave_1 removed [ 411.924698][ T5739] usb 4-1: Using ep0 maxpacket: 8 [ 412.059076][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.068326][ T57] team0 (unregistering): Port device team_slave_0 removed [ 412.068418][ T5739] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 412.088096][ T5739] usb 4-1: can't read configurations, error -71 [ 412.421943][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.429383][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.437660][ T8214] bridge_slave_0: entered allmulticast mode [ 412.447305][ T8214] bridge_slave_0: entered promiscuous mode [ 412.548229][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.560636][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.571990][ T8214] bridge_slave_1: entered allmulticast mode [ 412.581614][ T8214] bridge_slave_1: entered promiscuous mode [ 412.726558][ T8455] kAFS: No cell specified [ 412.761999][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.014696][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.101567][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.277898][ T8469] loop3: detected capacity change from 0 to 128 [ 414.294991][ T8469] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 414.308083][ T8469] hpfs: filesystem error: improperly stopped [ 414.314508][ T8469] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 414.324826][ T8469] hpfs: You really don't want any checks? You are crazy... [ 414.336402][ T8469] hpfs: Code page index out of array [ 414.342458][ T8469] hpfs: code page support is disabled [ 414.613543][ T8214] team0: Port device team_slave_0 added [ 414.665553][ T8469] hpfs: hpfs_map_4sectors(): unaligned read [ 414.701912][ T8469] hpfs: hpfs_map_4sectors(): unaligned read [ 414.735125][ T8469] hpfs: filesystem error: unable to find root dir [ 415.656359][ T8477] hpfs: hpfs_map_4sectors(): unaligned read [ 416.157705][ T8214] team0: Port device team_slave_1 added [ 416.732071][ T8478] loop5: detected capacity change from 0 to 1024 [ 416.798789][ T8478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 417.654210][ T8478] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.697135][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.733782][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.786881][ T8488] loop3: detected capacity change from 0 to 2048 [ 417.868652][ T4936] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 417.887966][ T4936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 417.898117][ T4936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 417.910219][ T4936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 417.918475][ T4936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 417.953291][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.125002][ T8488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.389385][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.904922][ T8498] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.407'. [ 419.402999][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.463814][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 419.484150][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.000422][ T5622] Bluetooth: hci6: command tx timeout [ 422.070648][ T5622] Bluetooth: hci6: command tx timeout [ 422.566832][ T8530] loop3: detected capacity change from 0 to 4096 [ 422.662734][ T8530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.879349][ T8214] hsr_slave_0: entered promiscuous mode [ 423.500078][ T8214] hsr_slave_1: entered promiscuous mode [ 423.675241][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.220503][ T5622] Bluetooth: hci6: command tx timeout [ 424.651492][ T8550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.416'. [ 424.660730][ T8550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.416'. [ 424.669559][ T8550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.416'. [ 424.779134][ T8562] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 424.786950][ T8562] netlink: 'syz.3.417': attribute type 2 has an invalid length. [ 425.530735][ T8050] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 425.579050][ T8564] netlink: 'syz.3.419': attribute type 2 has an invalid length. [ 425.664627][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.716041][ T8050] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 425.749255][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.838827][ T8050] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 425.866086][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.106571][ T8050] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 426.194343][ T8050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.231503][ T5622] Bluetooth: hci6: command tx timeout [ 428.558554][ T8599] overlayfs: failed to clone lowerpath [ 431.021485][ T8616] loop3: detected capacity change from 0 to 256 [ 431.759114][ T8619] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'. [ 431.769647][ T8619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.425'. [ 431.833862][ T4936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.850823][ T4936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.859019][ T4936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.867071][ T4936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.877022][ T4936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.311042][ T57] bridge_slave_1: left allmulticast mode [ 432.370689][ T57] bridge_slave_1: left promiscuous mode [ 432.444916][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.627208][ T57] bridge_slave_0: left allmulticast mode [ 432.967967][ T57] bridge_slave_0: left promiscuous mode [ 432.991022][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.428'. [ 433.069547][ T8634] loop3: detected capacity change from 0 to 2048 [ 433.075000][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.153312][ T8634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.715309][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.737824][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.757668][ T57] bond0 (unregistering): Released all slaves [ 434.090442][ T4936] Bluetooth: hci2: command tx timeout [ 436.164628][ T4936] Bluetooth: hci2: command tx timeout [ 437.544851][ T57] hsr_slave_0: left promiscuous mode [ 437.561406][ T57] hsr_slave_1: left promiscuous mode [ 437.573243][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.589755][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.600242][ T8664] netlink: 'syz.5.434': attribute type 1 has an invalid length. [ 437.622135][ T8664] netlink: 224 bytes leftover after parsing attributes in process `syz.5.434'. [ 437.649205][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.434'. [ 437.802615][ T8668] loop3: detected capacity change from 0 to 2048 [ 437.817108][ T8668] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 437.948920][ T8668] loop3: detected capacity change from 0 to 1024 [ 437.958548][ T8668] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 437.976724][ T8668] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 437.989304][ T8668] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 437.999107][ T8668] EXT4-fs (loop3): orphan cleanup on readonly fs [ 438.007103][ T8668] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.435: Inode bitmap for bg 0 marked uninitialized [ 438.021991][ T8668] loop3: lost filesystem error report for type 5 error -117 [ 438.024370][ T57] team0 (unregistering): Port device team_slave_1 removed [ 438.025907][ T8668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 438.075002][ T57] team0 (unregistering): Port device team_slave_0 removed [ 438.173139][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.235372][ T4936] Bluetooth: hci2: command tx timeout [ 439.195179][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.201620][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.418778][ T8674] loop3: detected capacity change from 0 to 32768 [ 439.428030][ T8674] ocfs2: Unknown parameter 'conoacl' [ 440.311170][ T4936] Bluetooth: hci2: command tx timeout [ 440.463063][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.438'. [ 440.511628][ T8679] loop5: detected capacity change from 0 to 128 [ 440.707713][ T8679] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 440.749260][ T8679] hpfs: filesystem error: improperly stopped [ 440.764931][ T8679] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 440.794820][ T8679] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 440.850510][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.882144][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.905380][ T8491] bridge_slave_0: entered allmulticast mode [ 440.924287][ T8491] bridge_slave_0: entered promiscuous mode [ 440.977915][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.992185][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.007141][ T8491] bridge_slave_1: entered allmulticast mode [ 441.033451][ T8491] bridge_slave_1: entered promiscuous mode [ 441.546626][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.575522][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.729478][ T8491] team0: Port device team_slave_0 added [ 441.855931][ T8491] team0: Port device team_slave_1 added [ 442.695192][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.709378][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.768027][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.788140][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.795752][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.831891][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.873478][ T8708] loop3: detected capacity change from 0 to 256 [ 442.982979][ T8708] loop3: detected capacity change from 0 to 4096 [ 443.009225][ T8708] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 443.184752][ T8708] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 444.078369][ T8214] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 444.098668][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.219299][ T8214] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.241092][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.248862][ T8723] syz_tun: entered allmulticast mode [ 445.255063][ T8723] syz_tun: left allmulticast mode [ 445.399035][ T8214] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.537109][ T8733] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 445.552465][ T8733] netlink: 224 bytes leftover after parsing attributes in process `syz.3.447'. [ 445.563738][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 445.829095][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.023473][ T8491] hsr_slave_0: entered promiscuous mode [ 446.030155][ T8491] hsr_slave_1: entered promiscuous mode [ 446.036733][ T8491] debugfs: 'hsr0' already exists in 'hsr' [ 446.042576][ T8491] Cannot create hsr debugfs directory [ 446.525110][ T8214] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.562223][ T8214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.197469][ T4936] Bluetooth: hci5: connection err: -111 [ 447.403845][ T8762] loop3: detected capacity change from 0 to 32768 [ 447.421912][ T8762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.451 (8762) [ 447.440411][ T8762] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 447.450584][ T8762] BTRFS info (device loop3): using crc32c checksum algorithm [ 447.563049][ T8762] BTRFS info (device loop3): setting nodatasum [ 447.569272][ T8762] BTRFS info (device loop3): setting nodatacow [ 447.575514][ T8762] BTRFS info (device loop3): turning on async discard [ 447.582328][ T8762] BTRFS info (device loop3): enabling free space tree [ 447.589119][ T8762] BTRFS info (device loop3): max_inline set to 0 [ 448.403401][ T30] audit: type=1326 audit(1784868377.161:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8760 comm="syz.3.451" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8419de99 code=0x0 [ 448.512478][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.543795][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.556647][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.579264][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.583664][ T8613] bridge_slave_0: entered allmulticast mode [ 448.592531][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.609723][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.619098][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.665876][ T8613] bridge_slave_0: entered promiscuous mode [ 448.790786][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.838661][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.863728][ T5639] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 448.876977][ T8613] bridge_slave_1: entered allmulticast mode [ 448.898572][ T8613] bridge_slave_1: entered promiscuous mode [ 449.316183][ T8797] loop3: detected capacity change from 0 to 2048 [ 449.424773][ T8799] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.216406][ T4936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 450.257402][ T4936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 450.274909][ T4936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 450.304403][ T4936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 450.321948][ T4936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 450.712563][ T5622] Bluetooth: hci3: command tx timeout [ 450.866546][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.187646][ T8813] loop3: detected capacity change from 0 to 1024 [ 451.215082][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.347418][ T8813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 451.381473][ T8813] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.418877][ T8613] team0: Port device team_slave_0 added [ 451.447926][ T8613] team0: Port device team_slave_1 added [ 451.674829][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 452.358424][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.378545][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.410468][ T5622] Bluetooth: hci4: command tx timeout [ 452.423880][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.439626][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.446620][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.473710][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.943053][ T5622] Bluetooth: hci3: command tx timeout [ 453.097556][ T8834] overlay: ./file0 is not a directory [ 453.680889][ T8613] hsr_slave_0: entered promiscuous mode [ 453.690034][ T8613] hsr_slave_1: entered promiscuous mode [ 453.697319][ T8613] debugfs: 'hsr0' already exists in 'hsr' [ 453.703464][ T8613] Cannot create hsr debugfs directory [ 454.590165][ T5622] Bluetooth: hci4: command tx timeout [ 455.001288][ T7875] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 455.030543][ T5622] Bluetooth: hci3: command tx timeout [ 455.067875][ T8847] overlayfs: failed to clone lowerpath [ 455.185551][ T7875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 455.197156][ T7875] usb 4-1: not running at top speed; connect to a high speed hub [ 455.213767][ T7875] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 455.223615][ T7875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.234537][ T7875] usb 4-1: Product: syz [ 455.238745][ T7875] usb 4-1: Manufacturer: syz [ 455.243796][ T7875] usb 4-1: SerialNumber: syz [ 455.269672][ T7875] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 455.467072][ T7875] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 455.527423][ T57] bridge_slave_1: left allmulticast mode [ 455.547562][ T57] bridge_slave_1: left promiscuous mode [ 455.560893][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.575158][ T7875] usb 4-1: USB disconnect, device number 10 [ 455.596369][ T57] bridge_slave_0: left allmulticast mode [ 455.604421][ T57] bridge_slave_0: left promiscuous mode [ 455.611974][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.654173][ T57] bridge_slave_1: left allmulticast mode [ 455.669393][ T57] bridge_slave_1: left promiscuous mode [ 455.684447][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.704480][ T57] bridge_slave_0: left allmulticast mode [ 455.717668][ T57] bridge_slave_0: left promiscuous mode [ 455.724021][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.872497][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.889156][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.901906][ T57] bond0 (unregistering): Released all slaves [ 456.058722][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.133707][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.297439][ T57] bond0 (unregistering): Released all slaves [ 456.630524][ T5622] Bluetooth: hci4: command tx timeout [ 456.641608][ T8865] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 456.756936][ T8863] bridge0: port 3(erspan0) entered blocking state [ 456.763667][ T8863] bridge0: port 3(erspan0) entered disabled state [ 456.770946][ T8863] erspan0: entered allmulticast mode [ 456.777770][ T8863] erspan0: entered promiscuous mode [ 456.783600][ T8863] bridge0: port 3(erspan0) entered blocking state [ 456.791380][ T8863] bridge0: port 3(erspan0) entered forwarding state [ 457.124026][ T5622] Bluetooth: hci3: command tx timeout [ 457.591490][ T5622] Bluetooth: hci1: unexpected cc 0x2029 length: 100 > 1 [ 457.598632][ T5622] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 458.778319][ T5622] Bluetooth: hci4: command tx timeout [ 459.217492][ T57] hsr_slave_0: left promiscuous mode [ 459.249154][ T57] hsr_slave_1: left promiscuous mode [ 459.272962][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.288163][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.312310][ T57] hsr_slave_0: left promiscuous mode [ 459.319560][ T57] hsr_slave_1: left promiscuous mode [ 459.325697][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.333583][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.588599][ T57] team0 (unregistering): Port device team_slave_1 removed [ 459.619801][ T57] team0 (unregistering): Port device team_slave_0 removed [ 459.663769][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 459.846346][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.872744][ T10] usb 4-1: config 2 has an invalid interface number: 247 but max is 1 [ 459.898226][ T10] usb 4-1: config 2 has an invalid interface number: 33 but max is 1 [ 459.912855][ T10] usb 4-1: config 2 has no interface number 0 [ 459.930584][ T10] usb 4-1: config 2 has no interface number 1 [ 459.937801][ T10] usb 4-1: config 2 interface 247 has no altsetting 0 [ 459.950785][ T10] usb 4-1: config 2 interface 33 has no altsetting 0 [ 459.965397][ T10] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=81.34 [ 459.991125][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.999149][ T10] usb 4-1: Product: syz [ 460.005739][ T57] team0 (unregistering): Port device team_slave_1 removed [ 460.011017][ T10] usb 4-1: Manufacturer: syz [ 460.020354][ T10] usb 4-1: SerialNumber: syz [ 460.028174][ T57] team0 (unregistering): Port device team_slave_0 removed [ 460.302958][ T10] usb 4-1: USB disconnect, device number 11 [ 460.922226][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.929967][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.937823][ T8787] bridge_slave_0: entered allmulticast mode [ 460.961456][ T8787] bridge_slave_0: entered promiscuous mode [ 461.068103][ T8899] loop3: detected capacity change from 0 to 1024 [ 461.077325][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.088780][ T8899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.097336][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.106381][ T8787] bridge_slave_1: entered allmulticast mode [ 461.116228][ T8787] bridge_slave_1: entered promiscuous mode [ 461.128131][ T8899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.444311][ T8787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.565439][ T8787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.814787][ T8787] team0: Port device team_slave_0 added [ 461.886858][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.905598][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.928046][ T8803] bridge_slave_0: entered allmulticast mode [ 461.951221][ T8803] bridge_slave_0: entered promiscuous mode [ 461.985581][ T8787] team0: Port device team_slave_1 added [ 462.105024][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.283854][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.293597][ T8803] bridge_slave_1: entered allmulticast mode [ 462.301825][ T8803] bridge_slave_1: entered promiscuous mode [ 462.336005][ T8491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 462.356145][ T8491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.009322][ T8491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 463.136669][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.157011][ T8491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.873035][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.904354][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.922418][ T8491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 463.952015][ T8491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.965910][ T8491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 463.986044][ T8491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.047805][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.062210][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.102038][ T8787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.952748][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 465.025554][ T8787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.075149][ T8787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.147811][ T8787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.410691][ T8948] netlink: 84 bytes leftover after parsing attributes in process `syz.3.483'. [ 466.373680][ T8803] team0: Port device team_slave_0 added [ 466.398011][ T8803] team0: Port device team_slave_1 added [ 466.719048][ T8787] hsr_slave_0: entered promiscuous mode [ 466.725881][ T8787] hsr_slave_1: entered promiscuous mode [ 466.733586][ T8787] debugfs: 'hsr0' already exists in 'hsr' [ 466.739605][ T8787] Cannot create hsr debugfs directory [ 466.999706][ T8959] loop3: detected capacity change from 0 to 32768 [ 467.009283][ T8959] (syz.3.487,8959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 467.022893][ T8959] (syz.3.487,8959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 467.046573][ T8959] JBD2: Ignoring recovery information on journal [ 467.084081][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.097138][ T8959] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 467.132187][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.170262][ T30] audit: type=1800 audit(1784868396.091:10): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.487" name="file1" dev="loop3" ino=16978 res=0 errno=0 [ 467.211454][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.232993][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.247024][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.316001][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.745784][ T5639] ocfs2: Unmounting device (7,3) on (node local) [ 467.896838][ T8803] hsr_slave_0: entered promiscuous mode [ 467.916383][ T8803] hsr_slave_1: entered promiscuous mode [ 467.932909][ T8803] debugfs: 'hsr0' already exists in 'hsr' [ 467.948841][ T8803] Cannot create hsr debugfs directory [ 468.160614][ T8971] ubi8: attaching mtd0 [ 468.165458][ T8971] ubi8 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 468.590465][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 468.760426][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 468.820693][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.862939][ T10] usb 4-1: config 67 has an invalid interface number: 47 but max is 0 [ 468.872342][ T10] usb 4-1: config 67 has no interface number 0 [ 468.879466][ T10] usb 4-1: config 67 interface 47 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 468.895674][ T10] usb 4-1: config 67 interface 47 has no altsetting 0 [ 468.921931][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=6e.21 [ 468.931656][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.944786][ T10] usb 4-1: Product: syz [ 468.949022][ T10] usb 4-1: Manufacturer: syz [ 468.956818][ T10] usb 4-1: SerialNumber: syz [ 469.057388][ T8974] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 469.379342][ T10] usb 4-1: USB disconnect, device number 12 [ 469.575286][ T57] bridge_slave_1: left allmulticast mode [ 469.590589][ T57] bridge_slave_1: left promiscuous mode [ 469.600859][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.622709][ T57] bridge_slave_0: left allmulticast mode [ 469.640061][ T57] bridge_slave_0: left promiscuous mode [ 469.647962][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.019566][ T8990] IPVS: set_ctl: invalid protocol: 122 127.0.0.1:20000 [ 470.648619][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.663732][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.676062][ T57] bond0 (unregistering): Released all slaves [ 471.577266][ T57] hsr_slave_0: left promiscuous mode [ 471.600221][ T57] hsr_slave_1: left promiscuous mode [ 471.612407][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.637958][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.662077][ T8994] loop3: detected capacity change from 0 to 1024 [ 471.669167][ T8994] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.689294][ T8994] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 471.703117][ T8994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 471.716289][ T8994] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.957723][ T57] team0 (unregistering): Port device team_slave_1 removed [ 471.976758][ T57] team0 (unregistering): Port device team_slave_0 removed [ 472.137630][ T8613] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 472.159548][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.252016][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.271678][ T8993] syz.3.493 (8993) used greatest stack depth: 15920 bytes left [ 472.289725][ T8613] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 472.317191][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 472.336411][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.354550][ T8613] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 472.389829][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.545975][ T8787] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.626174][ T8613] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 472.656387][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.538842][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.698382][ T8787] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.796871][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.804071][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.846552][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.853722][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.928945][ T8787] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.232798][ T9051] loop3: detected capacity change from 0 to 2048 [ 474.242070][ T8787] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.242745][ T9055] capability: warning: `syz.2.505' uses deprecated v2 capabilities in a way that may be insecure [ 474.299525][ T9051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.749653][ T9066] syz.3.504 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 474.781631][ T9066] ubi31: attaching mtd0 [ 474.808374][ T9066] ubi31: scanning is finished [ 474.813157][ T9066] ubi31: empty MTD device detected [ 474.977295][ T4936] Bluetooth: Frame is too long (len 12, expected len 4) [ 475.333583][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 475.442502][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.542064][ T9066] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 475.658639][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.719651][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.726869][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.772151][ T5639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.877863][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.885046][ T6399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.072663][ T9087] Bluetooth: MGMT ver 1.23 [ 477.825986][ T8787] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.896670][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.945858][ T8787] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.001291][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.054880][ T8787] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.303780][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.321280][ T8787] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.383444][ T8787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.427702][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.442924][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.469568][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.486335][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.500789][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.130200][ T9135] loop3: detected capacity change from 0 to 4096 [ 479.224879][ T9141] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 479.835729][ T9154] loop3: detected capacity change from 0 to 256 [ 480.576878][ T5622] Bluetooth: hci0: command tx timeout [ 481.519627][ T8787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.993998][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.185596][ T8787] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.205299][ T9202] loop3: detected capacity change from 0 to 128 [ 482.255206][ T9202] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 482.310906][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 482.338740][ T9202] hpfs: filesystem error: improperly stopped [ 482.373716][ T9202] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 482.419180][ T9202] hpfs: You really don't want any checks? You are crazy... [ 482.446421][ T9202] hpfs: Code page index out of array [ 482.475482][ T9202] hpfs: code page support is disabled [ 482.498688][ T9202] hpfs: hpfs_map_4sectors(): unaligned read [ 482.516257][ T9202] hpfs: hpfs_map_4sectors(): unaligned read [ 482.533428][ T9202] hpfs: filesystem error: unable to find root dir [ 482.576136][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.583356][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.650598][ T4936] Bluetooth: hci0: command tx timeout [ 482.826594][ T8803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.910240][ T9219] hpfs: hpfs_map_4sectors(): unaligned read [ 483.496359][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.558432][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.565655][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.595875][ T8803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.690971][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.725028][ T8803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.767564][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.777412][ T9224] netlink: 'syz.3.530': attribute type 16 has an invalid length. [ 483.827412][ T8803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 483.827689][ T9224] netlink: 'syz.3.530': attribute type 17 has an invalid length. [ 483.859193][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.893022][ T9224] netlink: 3 bytes leftover after parsing attributes in process `syz.3.530'. [ 483.917756][ T6392] bridge_slave_1: left allmulticast mode [ 483.937959][ T6392] bridge_slave_1: left promiscuous mode [ 483.946462][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.964466][ T6392] bridge_slave_0: left allmulticast mode [ 483.975173][ T6392] bridge_slave_0: left promiscuous mode [ 483.981462][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.444781][ T4936] Bluetooth: hci5: command 0x0406 tx timeout [ 484.598878][ T6392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.619331][ T6392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.637177][ T6392] bond0 (unregistering): Released all slaves [ 484.715982][ T5622] Bluetooth: hci0: command tx timeout [ 484.817860][ T9246] loop3: detected capacity change from 0 to 8 [ 484.947099][ T9246] SQUASHFS error: zlib decompression failed, data probably corrupt [ 484.986369][ T9246] SQUASHFS error: Failed to read block 0x9b: -5 [ 485.010845][ T6392] hsr_slave_0: left promiscuous mode [ 485.016273][ T9246] SQUASHFS error: Unable to read metadata cache entry [99] [ 485.033449][ T9246] SQUASHFS error: Unable to read inode 0x127 [ 485.045125][ T6392] hsr_slave_1: left promiscuous mode [ 485.056187][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.076223][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.628580][ T6392] team0 (unregistering): Port device team_slave_1 removed [ 485.668720][ T6392] team0 (unregistering): Port device team_slave_0 removed [ 486.034544][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.041957][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.050115][ T9110] bridge_slave_0: entered allmulticast mode [ 486.058752][ T9110] bridge_slave_0: entered promiscuous mode [ 486.129326][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.141661][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.149832][ T9110] bridge_slave_1: entered allmulticast mode [ 486.158654][ T9110] bridge_slave_1: entered promiscuous mode [ 486.220060][ T9272] loop3: detected capacity change from 0 to 2048 [ 486.279710][ T9272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.347886][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.384152][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.444339][ T8613] veth0_vlan: entered promiscuous mode [ 486.612362][ T9110] team0: Port device team_slave_0 added [ 486.644700][ T9110] team0: Port device team_slave_1 added [ 486.777496][ T8613] veth1_vlan: entered promiscuous mode [ 486.790661][ T5622] Bluetooth: hci0: command tx timeout [ 486.852977][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.879336][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.346801][ T5622] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 487.423178][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.441092][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.460846][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.520992][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.821784][ T9110] hsr_slave_0: entered promiscuous mode [ 487.835032][ T9110] hsr_slave_1: entered promiscuous mode [ 488.025957][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.045226][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 488.344944][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.367264][ T5622] Bluetooth: hci5: unexpected event for opcode 0x0c05 [ 488.506766][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.513971][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.666339][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.673528][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.808691][ T4936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 488.834404][ T4936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 488.843414][ T4936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 488.856383][ T4936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 488.868293][ T4936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.213394][ T8787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.474897][ T9343] loop3: detected capacity change from 0 to 2048 [ 489.527387][ T9343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.951820][ T5622] Bluetooth: hci2: command tx timeout [ 491.703745][ T57] bridge_slave_1: left allmulticast mode [ 491.730430][ T57] bridge_slave_1: left promiscuous mode [ 491.741256][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.771847][ T57] bridge_slave_0: left allmulticast mode [ 491.805269][ T57] bridge_slave_0: left promiscuous mode [ 491.813510][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.734694][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.751546][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.769275][ T57] bond0 (unregistering): Released all slaves [ 492.906106][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.031727][ T5622] Bluetooth: hci2: command tx timeout [ 493.031842][ T8787] veth0_vlan: entered promiscuous mode [ 493.190222][ T57] hsr_slave_0: left promiscuous mode [ 493.238176][ T57] hsr_slave_1: left promiscuous mode [ 493.251317][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.274027][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.328616][ T57] veth1_vlan: left promiscuous mode [ 493.339777][ T57] veth0_vlan: left promiscuous mode [ 493.432168][ T9422] ieee802154 phy0 wpan0: encryption failed: -22 [ 493.617803][ T9427] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 493.641902][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 493.792886][ T57] team0 (unregistering): Port device team_slave_1 removed [ 493.824023][ T57] team0 (unregistering): Port device team_slave_0 removed [ 494.118954][ T9110] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 494.157410][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.255847][ T9110] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 494.306929][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.403284][ T8787] veth1_vlan: entered promiscuous mode [ 494.424321][ T9110] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 494.473999][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.580451][ T9110] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 494.645975][ T9110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.758219][ T9455] tipc: Invalid UDP bearer configuration [ 494.758279][ T9455] tipc: Enabling of bearer rejected, failed to enable media [ 495.020058][ T8803] veth0_vlan: entered promiscuous mode [ 495.115839][ T5622] Bluetooth: hci2: command tx timeout [ 495.216850][ T8787] veth0_macvtap: entered promiscuous mode [ 495.363004][ T8803] veth1_vlan: entered promiscuous mode [ 495.392378][ T8787] veth1_macvtap: entered promiscuous mode [ 495.466700][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.577017][ T8787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.620176][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.639356][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.658863][ T9325] bridge_slave_0: entered allmulticast mode [ 495.667299][ T9325] bridge_slave_0: entered promiscuous mode [ 495.716764][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.728982][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.744616][ T9325] bridge_slave_1: entered allmulticast mode [ 495.759776][ T9325] bridge_slave_1: entered promiscuous mode [ 495.878136][ T802] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 496.026292][ T6399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.061704][ T802] usb 4-1: Using ep0 maxpacket: 32 [ 496.076927][ T6399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.098158][ T6399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.111029][ T802] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 496.131461][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.146829][ T802] usb 4-1: Product: syz [ 496.156199][ T802] usb 4-1: Manufacturer: syz [ 496.156872][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.163204][ T802] usb 4-1: SerialNumber: syz [ 496.194947][ T802] usb 4-1: config 0 descriptor?? [ 496.209768][ T6399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.223264][ T802] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 496.238921][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.336563][ T9325] team0: Port device team_slave_0 added [ 496.379436][ T9325] team0: Port device team_slave_1 added [ 496.505516][ T8803] veth0_macvtap: entered promiscuous mode [ 496.556275][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.574623][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.602762][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.627648][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.640770][ T802] gspca_ov534_9: reg_w failed -71 [ 496.674887][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.699150][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.747291][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.847323][ T8803] veth1_macvtap: entered promiscuous mode [ 496.979201][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.024980][ T6388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.061576][ T6388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.068407][ T9325] hsr_slave_0: entered promiscuous mode [ 497.082801][ T802] gspca_ov534_9: Unknown sensor 0000 [ 497.082892][ T802] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 497.114472][ T9325] hsr_slave_1: entered promiscuous mode [ 497.133413][ T9325] debugfs: 'hsr0' already exists in 'hsr' [ 497.140038][ T802] usb 4-1: USB disconnect, device number 13 [ 497.156411][ T9325] Cannot create hsr debugfs directory [ 497.200999][ T5622] Bluetooth: hci2: command tx timeout [ 497.317628][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.324862][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.390634][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.518125][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.525327][ T6399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.566497][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.584656][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.616357][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.673785][ T9520] lo speed is unknown, defaulting to 1000 [ 497.759789][ T9520] lo speed is unknown, defaulting to 1000 [ 497.827394][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.848496][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.871696][ T9520] lo speed is unknown, defaulting to 1000 [ 497.902895][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.954823][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.601911][ T9520] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 498.689060][ T9520] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 498.711562][ T9520] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 498.738419][ T9528] tipc: Started in network mode [ 498.745859][ T9528] tipc: Node identity 4, cluster identity 4711 [ 498.752110][ T9528] tipc: Node number set to 4 [ 498.824055][ T9520] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 498.955278][ T9520] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 499.464248][ T9520] lo speed is unknown, defaulting to 1000 [ 499.537135][ T6399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.564802][ T6399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.615872][ T9520] lo speed is unknown, defaulting to 1000 [ 499.726361][ T9520] lo speed is unknown, defaulting to 1000 [ 499.823956][ T9520] lo speed is unknown, defaulting to 1000 [ 499.830238][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.878455][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.937319][ T9520] lo speed is unknown, defaulting to 1000 [ 500.237366][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.244053][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.270444][ T9520] lo speed is unknown, defaulting to 1000 [ 500.683851][ T9520] lo speed is unknown, defaulting to 1000 [ 501.625777][ T9325] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.693256][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.766137][ T9586] loop5: detected capacity change from 0 to 512 [ 501.792134][ T9325] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.855811][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.899400][ T9586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.970048][ T9325] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 502.018196][ T9586] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.037655][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.048971][ T9325] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 502.103070][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.192355][ T5741] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 502.208144][ T9601] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 502.274673][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.387098][ T5741] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 503.040341][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.099223][ T5741] usb 4-1: config 0 descriptor?? [ 503.245325][ T8787] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.291827][ T9614] binder: 9613:9614 ioctl c0306201 200000000080 returned -22 [ 503.412588][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.432221][ T5741] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 503.470657][ T5741] [drm:udl_init] *ERROR* Selecting channel failed [ 503.552921][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.646021][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.653266][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.787582][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.794814][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.888571][ T5741] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 503.925622][ T5741] [drm] Initialized udl on minor 2 [ 503.938536][ T9631] block nbd6: NBD_DISCONNECT [ 503.999395][ T9631] exFAT-fs (nbd6): unable to read boot sector [ 504.043726][ T9631] exFAT-fs (nbd6): failed to read boot sector [ 504.064567][ T5741] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.106703][ T9631] exFAT-fs (nbd6): failed to recognize exfat type [ 504.245699][ T5741] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 504.354488][ T5763] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 504.381685][ T5741] usb 4-1: USB disconnect, device number 14 [ 504.416894][ T5763] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 504.453595][ T9637] loop5: detected capacity change from 0 to 2048 [ 504.539913][ T9110] veth0_vlan: entered promiscuous mode [ 504.547320][ T9637] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.617688][ T9110] veth1_vlan: entered promiscuous mode [ 504.797645][ T9110] veth0_macvtap: entered promiscuous mode [ 504.850033][ T9110] veth1_macvtap: entered promiscuous mode [ 505.470522][ T9657] loop3: detected capacity change from 0 to 256 [ 505.495581][ T9657] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 505.559426][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.582800][ T9657] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 505.615040][ T9657] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 505.658051][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.667142][ T9657] UDF-fs: Scanning with blocksize 512 failed [ 505.702872][ T9657] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 505.752308][ T113] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.769360][ T9657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.810074][ T113] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.858440][ T113] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.949589][ T113] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.358721][ T6388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.395611][ T6388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.468318][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.614'. [ 506.565357][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.600817][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.911560][ T5763] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 506.990419][ T5741] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 507.187487][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.211987][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.228226][ T5741] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.431162][ T5763] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 507.527087][ T5741] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.723011][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.749364][ T5741] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.765335][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.768668][ T5763] usb 4-1: config 0 descriptor?? [ 507.782499][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.803121][ T5763] uvcvideo 4-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 507.813513][ T5741] usb 6-1: Product: syz [ 507.820990][ T5741] usb 6-1: Manufacturer: syz [ 507.826264][ T5763] uvcvideo 4-1:0.0: No valid video chain found. [ 507.833980][ T5741] usb 6-1: SerialNumber: syz [ 508.006856][ T5763] usb 4-1: USB disconnect, device number 15 [ 508.122218][ T5741] usb 6-1: USB disconnect, device number 6 [ 508.746684][ T9325] veth0_vlan: entered promiscuous mode [ 508.799886][ T9325] veth1_vlan: entered promiscuous mode [ 508.840722][ T9714] loop3: detected capacity change from 0 to 128 [ 508.925914][ T9325] veth0_macvtap: entered promiscuous mode [ 508.956651][ T9325] veth1_macvtap: entered promiscuous mode [ 509.019342][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.060990][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.090903][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 509.139123][ T6399] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.158430][ T6399] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.205679][ T6399] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.235327][ T6399] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.270647][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 509.297530][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 509.325856][ T10] usb 6-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 509.374300][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.417850][ T10] usb 6-1: config 0 descriptor?? [ 509.586837][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.623970][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.760554][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.780327][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.803098][ T9712] loop8: detected capacity change from 0 to 32768 [ 509.877660][ T10] pantherlord 0003:0810:0002.0002: collection stack underflow [ 509.928481][ T10] pantherlord 0003:0810:0002.0002: item 0 2 0 12 parsing failed [ 509.941116][ T9712] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 509.952221][ T10] pantherlord 0003:0810:0002.0002: parse failed [ 509.959484][ T10] pantherlord 0003:0810:0002.0002: probe with driver pantherlord failed with error -22 [ 510.063622][ T10] usb 6-1: USB disconnect, device number 7 [ 510.127503][ T9712] XFS (loop8): Ending clean mount [ 510.403869][ T9743] tipc: Started in network mode [ 510.409121][ T9743] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 510.420882][ T5864] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 510.432475][ T9743] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 511.064647][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 511.077919][ T9743] tipc: Enabled bearer , priority 10 [ 511.151723][ T5864] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 511.228311][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.262843][ T9110] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 511.314726][ T5864] usb 4-1: config 0 descriptor?? [ 511.340497][ T9733] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 511.409033][ T9748] loop7: detected capacity change from 0 to 64 [ 511.670873][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 511.688963][ T9758] hfs: request for non-existent node 131072 in B*Tree [ 511.780140][ T9758] hfs: request for non-existent node 131072 in B*Tree [ 511.814450][ T9748] hfs: request for non-existent node 131072 in B*Tree [ 511.821355][ T9748] hfs: request for non-existent node 131072 in B*Tree [ 511.836299][ T5864] hid (null): usage index exceeded [ 511.852575][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 511.875854][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: unknown main item tag 0x4 [ 511.888756][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: reserved main item tag 0xd [ 511.890571][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 8 [ 511.900762][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: ignoring exceeding usage max [ 511.917945][ T5352] tipc: Node number set to 1 [ 511.957983][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: ignoring exceeding usage max [ 511.980015][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: usage index exceeded [ 511.992484][ T10] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.14 [ 512.019889][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.031876][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: item 0 2 2 2 parsing failed [ 512.050718][ T9325] hfs: request for non-existent node 131072 in B*Tree [ 512.063190][ T10] usb 6-1: Product: syz [ 512.068754][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: parse failed (reason: -22) [ 512.078297][ T10] usb 6-1: Manufacturer: syz [ 512.089428][ T5864] hid-corsair-void 0003:1B1C:0A31.0003: probe with driver hid-corsair-void failed with error -22 [ 512.094298][ T10] usb 6-1: SerialNumber: syz [ 512.172416][ T5864] usb 4-1: USB disconnect, device number 16 [ 512.175526][ T10] usb 6-1: config 0 descriptor?? [ 512.201925][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 512.217737][ T9751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 512.241932][ T9751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 512.285131][ T9768] loop7: detected capacity change from 0 to 64 [ 512.329852][ T9768] hfs: unable to locate alternate MDB [ 512.353475][ T9768] hfs: continuing without an alternate MDB [ 512.521807][ T10] dm9601 6-1:0.0: probe with driver dm9601 failed with error -71 [ 512.563742][ T10] usb 6-1: USB disconnect, device number 8 [ 512.710873][ T5741] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 512.883930][ T9786] loop7: detected capacity change from 0 to 8 [ 512.890933][ T5741] usb 7-1: Using ep0 maxpacket: 16 [ 512.902352][ T5741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.917971][ T5741] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 512.963542][ T5741] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.004432][ T5741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.033347][ T5622] Bluetooth: hci1: unknown advertising packet type: 0xff [ 513.033381][ T5622] Bluetooth: hci1: unknown advertising packet type: 0xfa [ 513.041088][ T5622] Bluetooth: hci1: unknown advertising packet type: 0x09 [ 513.048163][ T5622] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 513.058347][ T5622] Bluetooth: hci1: Dropping invalid advertising data [ 513.073524][ T5622] Bluetooth: hci1: Malformed LE Event: 0x02 [ 513.086800][ T5741] usb 7-1: config 0 descriptor?? [ 513.226857][ T9792] vlan2: entered promiscuous mode [ 513.245723][ T9792] macvlan0: entered promiscuous mode [ 513.273235][ T5864] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 513.304033][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 513.450346][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 513.452587][ T5864] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 513.489002][ T5864] usb 4-1: config 0 has no interface number 0 [ 513.489058][ T5864] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 513.492573][ T5864] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 513.528986][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 513.529020][ T5864] usb 4-1: Product: syz [ 513.529039][ T5864] usb 4-1: SerialNumber: syz [ 513.546301][ T5741] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 513.546476][ T5864] usb 4-1: config 0 descriptor?? [ 513.563761][ T5864] cm109 4-1:0.8: invalid payload size 20, expected 4 [ 513.585932][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 513.624225][ T5741] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0004/input/input11 [ 513.688874][ T9804] loop5: detected capacity change from 0 to 1024 [ 513.736787][ T30] audit: type=1800 audit(1784868442.651:11): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.658" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 513.824399][ T5741] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 513.918898][ T5741] usb 7-1: USB disconnect, device number 2 [ 514.191400][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 514.191698][ T10] usb 4-1: USB disconnect, device number 17 [ 514.198388][ C1] ------------[ cut here ]------------ [ 514.209921][ C1] URB ffff88803359f400 submitted while active [ 514.215980][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: syz-executor/9110 [ 514.226239][ C1] Modules linked in: [ 514.230332][ C1] CPU: 1 UID: 0 PID: 9110 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 514.241371][ C1] Tainted: [L]=SOFTLOCKUP [ 514.245688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 514.255740][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 514.261284][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 08 d3 fa 49 83 3e 00 74 40 e8 8e 75 65 fa 48 8d 3d 67 7d 04 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 73 75 65 fa eb 05 e8 6c 75 [ 514.261310][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010083 [ 514.286962][ C1] RAX: ffffffff8760fbf2 RBX: ffff88803359f400 RCX: 0000000000040000 [ 514.294937][ C1] RDX: ffffc90002272000 RSI: ffff88803359f400 RDI: ffffffff90657960 [ 514.302916][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 514.310894][ C1] R10: dffffc0000000000 R11: fffff52000141140 R12: ffff888028a41048 [ 514.318872][ C1] R13: ffff888028a41030 R14: ffff88803359f408 R15: 0000000000000820 [ 514.326851][ C1] FS: 00005555881f2500(0000) GS:ffff888125052000(0000) knlGS:0000000000000000 [ 514.335784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.342369][ C1] CR2: 000000110c3125a5 CR3: 00000000701d6000 CR4: 0000000000350ef0 [ 514.350348][ C1] Call Trace: [ 514.353663][ C1] [ 514.356497][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.362138][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.367970][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 514.373349][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 514.378717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.384352][ C1] dummy_timer+0xac3/0x4b40 [ 514.388858][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.394521][ C1] ? __lock_acquire+0x683/0x2cf0 [ 514.399472][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.405111][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.410743][ C1] ? __lock_acquire+0x683/0x2cf0 [ 514.415707][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.421085][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 514.426024][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.431840][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 514.436772][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 514.441984][ C1] hrtimer_run_softirq+0x17a/0x240 [ 514.447106][ C1] handle_softirqs+0x225/0x840 [ 514.451872][ C1] ? __irq_exit_rcu+0xca/0x220 [ 514.456645][ C1] __irq_exit_rcu+0xca/0x220 [ 514.461232][ C1] irq_exit_rcu+0x9/0x30 [ 514.465468][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 514.471113][ C1] [ 514.474032][ C1] [ 514.476949][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 514.482926][ C1] RIP: 0010:vm_normal_page+0x20/0x280 [ 514.488299][ C1] Code: 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 41 55 41 54 53 50 49 89 d7 48 89 34 24 49 89 fd e8 52 74 ad ff 31 ff <4c> 89 fe e8 28 79 ad ff 4d 85 ff 0f 95 c3 4c 89 fe 48 83 e6 01 40 [ 514.507897][ C1] RSP: 0018:ffffc900042672e0 EFLAGS: 00000246 [ 514.513963][ C1] RAX: ffffffff8218fd2e RBX: 0000000000000001 RCX: ffff88802c475d00 [ 514.521927][ C1] RDX: 0000000000000000 RSI: 00007f89b8d7a000 RDI: 0000000000000000 [ 514.529891][ C1] RBP: ffffc900042675b0 R08: ffff88801d4a784f R09: 1ffff11003a94f09 [ 514.537853][ C1] R10: dffffc0000000000 R11: ffffed1003a94f0a R12: 00007f89b8d7a000 [ 514.545816][ C1] R13: ffff888074ecf3c0 R14: 8000000042181007 R15: 8000000042181007 [ 514.553787][ C1] ? vm_normal_page+0x1e/0x280 [ 514.558570][ C1] copy_pmd_range+0x87c/0x5880 [ 514.563358][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.568988][ C1] ? kasan_save_track+0x4f/0x80 [ 514.573836][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 514.578863][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 514.584056][ C1] ? do_syscall_64+0x174/0x580 [ 514.588810][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.594895][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.600551][ C1] ? __lock_acquire+0x683/0x2cf0 [ 514.605497][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.611151][ C1] copy_page_range+0xc26/0x1250 [ 514.616028][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 514.621326][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.626957][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.632585][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 514.639353][ C1] dup_mmap+0xf21/0x1d90 [ 514.643611][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 514.648283][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.653316][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.658947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.664671][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.670313][ C1] copy_mm+0x11a/0x480 [ 514.674384][ C1] ? copy_process+0xd3c/0x4390 [ 514.679158][ C1] copy_process+0x1e3e/0x4390 [ 514.683839][ C1] ? copy_process+0xd3c/0x4390 [ 514.688615][ C1] ? __pfx_copy_process+0x10/0x10 [ 514.693644][ C1] kernel_clone+0x2d7/0x940 [ 514.698150][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 514.703191][ C1] __x64_sys_clone+0x1b6/0x230 [ 514.707957][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 514.713263][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.718895][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 514.724193][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.730253][ C1] do_syscall_64+0x174/0x580 [ 514.734844][ C1] ? trace_irq_disable+0x3b/0x140 [ 514.739876][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.745762][ C1] RIP: 0033:0x7f89b9dc6912 [ 514.750174][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 514.769775][ C1] RSP: 002b:00007fffeb6099a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 514.778194][ C1] RAX: ffffffffffffffda RBX: 00007fffeb6099a0 RCX: 00007f89b9dc6912 [ 514.786336][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 514.794298][ C1] RBP: 00007fffeb609b2c R08: 0000000000000000 R09: 0000000000000001 [ 514.802261][ C1] R10: 00005555881f27d0 R11: 0000000000000246 R12: 0000000000000001 [ 514.810219][ C1] R13: 00000000000927c0 R14: 000000000007d8f5 R15: 00007fffeb609b80 [ 514.818201][ C1] [ 514.821215][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 514.828483][ C1] CPU: 1 UID: 0 PID: 9110 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 514.839498][ C1] Tainted: [L]=SOFTLOCKUP [ 514.843807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 514.853849][ C1] Call Trace: [ 514.857116][ C1] [ 514.859947][ C1] vpanic+0x56c/0xa60 [ 514.863951][ C1] ? __pfx__printk+0x10/0x10 [ 514.868540][ C1] ? __pfx_vpanic+0x10/0x10 [ 514.873047][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 514.878333][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 514.883544][ C1] panic+0xc5/0xd0 [ 514.887358][ C1] ? __pfx_panic+0x10/0x10 [ 514.891792][ C1] __warn+0x315/0x4c0 [ 514.895762][ C1] ? usb_submit_urb+0x79/0x18b0 [ 514.900617][ C1] ? usb_submit_urb+0x79/0x18b0 [ 514.905467][ C1] __report_bug+0x276/0x570 [ 514.909966][ C1] ? usb_submit_urb+0x79/0x18b0 [ 514.914818][ C1] ? __pfx___report_bug+0x10/0x10 [ 514.919849][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.925487][ C1] ? __lock_acquire+0x683/0x2cf0 [ 514.930439][ C1] report_bug_entry+0x19a/0x290 [ 514.935292][ C1] ? usb_submit_urb+0x7c/0x18b0 [ 514.940141][ C1] ? usb_submit_urb+0x81/0x18b0 [ 514.944988][ C1] handle_bug+0xce/0x200 [ 514.949263][ C1] exc_invalid_op+0x1a/0x50 [ 514.953850][ C1] asm_exc_invalid_op+0x1a/0x20 [ 514.958700][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 514.964157][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 99 08 d3 fa 49 83 3e 00 74 40 e8 8e 75 65 fa 48 8d 3d 67 7d 04 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 73 75 65 fa eb 05 e8 6c 75 [ 514.983759][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010083 [ 514.989826][ C1] RAX: ffffffff8760fbf2 RBX: ffff88803359f400 RCX: 0000000000040000 [ 514.997804][ C1] RDX: ffffc90002272000 RSI: ffff88803359f400 RDI: ffffffff90657960 [ 515.005771][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 515.013733][ C1] R10: dffffc0000000000 R11: fffff52000141140 R12: ffff888028a41048 [ 515.021697][ C1] R13: ffff888028a41030 R14: ffff88803359f408 R15: 0000000000000820 [ 515.029669][ C1] ? usb_submit_urb+0x72/0x18b0 [ 515.034537][ C1] ? usb_submit_urb+0x72/0x18b0 [ 515.039387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.045014][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 515.050834][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 515.056210][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 515.061571][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.067203][ C1] dummy_timer+0xac3/0x4b40 [ 515.071708][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.077338][ C1] ? __lock_acquire+0x683/0x2cf0 [ 515.082278][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.087909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.093538][ C1] ? __lock_acquire+0x683/0x2cf0 [ 515.098492][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.103876][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 515.108817][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 515.114628][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 515.119561][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 515.124775][ C1] hrtimer_run_softirq+0x17a/0x240 [ 515.129897][ C1] handle_softirqs+0x225/0x840 [ 515.134664][ C1] ? __irq_exit_rcu+0xca/0x220 [ 515.139434][ C1] __irq_exit_rcu+0xca/0x220 [ 515.144023][ C1] irq_exit_rcu+0x9/0x30 [ 515.148262][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 515.154018][ C1] [ 515.156936][ C1] [ 515.159852][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 515.165824][ C1] RIP: 0010:vm_normal_page+0x20/0x280 [ 515.171285][ C1] Code: 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 41 55 41 54 53 50 49 89 d7 48 89 34 24 49 89 fd e8 52 74 ad ff 31 ff <4c> 89 fe e8 28 79 ad ff 4d 85 ff 0f 95 c3 4c 89 fe 48 83 e6 01 40 [ 515.190881][ C1] RSP: 0018:ffffc900042672e0 EFLAGS: 00000246 [ 515.196941][ C1] RAX: ffffffff8218fd2e RBX: 0000000000000001 RCX: ffff88802c475d00 [ 515.204908][ C1] RDX: 0000000000000000 RSI: 00007f89b8d7a000 RDI: 0000000000000000 [ 515.212868][ C1] RBP: ffffc900042675b0 R08: ffff88801d4a784f R09: 1ffff11003a94f09 [ 515.220829][ C1] R10: dffffc0000000000 R11: ffffed1003a94f0a R12: 00007f89b8d7a000 [ 515.228791][ C1] R13: ffff888074ecf3c0 R14: 8000000042181007 R15: 8000000042181007 [ 515.236777][ C1] ? vm_normal_page+0x1e/0x280 [ 515.241563][ C1] copy_pmd_range+0x87c/0x5880 [ 515.246355][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.251987][ C1] ? kasan_save_track+0x4f/0x80 [ 515.256845][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 515.261875][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 515.267067][ C1] ? do_syscall_64+0x174/0x580 [ 515.271824][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.277889][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.283517][ C1] ? __lock_acquire+0x683/0x2cf0 [ 515.288464][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.294106][ C1] copy_page_range+0xc26/0x1250 [ 515.298980][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 515.304275][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.309902][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.315532][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 515.322298][ C1] dup_mmap+0xf21/0x1d90 [ 515.326589][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 515.331262][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.336297][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.341929][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.348004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.353646][ C1] copy_mm+0x11a/0x480 [ 515.357717][ C1] ? copy_process+0xd3c/0x4390 [ 515.362479][ C1] copy_process+0x1e3e/0x4390 [ 515.367172][ C1] ? copy_process+0xd3c/0x4390 [ 515.371954][ C1] ? __pfx_copy_process+0x10/0x10 [ 515.376992][ C1] kernel_clone+0x2d7/0x940 [ 515.381508][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 515.386565][ C1] __x64_sys_clone+0x1b6/0x230 [ 515.391333][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 515.396636][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 515.402268][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 515.407566][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.413633][ C1] do_syscall_64+0x174/0x580 [ 515.418222][ C1] ? trace_irq_disable+0x3b/0x140 [ 515.423251][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.429137][ C1] RIP: 0033:0x7f89b9dc6912 [ 515.433546][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 515.453154][ C1] RSP: 002b:00007fffeb6099a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 515.461576][ C1] RAX: ffffffffffffffda RBX: 00007fffeb6099a0 RCX: 00007f89b9dc6912 [ 515.469542][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 515.477502][ C1] RBP: 00007fffeb609b2c R08: 0000000000000000 R09: 0000000000000001 [ 515.485474][ C1] R10: 00005555881f27d0 R11: 0000000000000246 R12: 0000000000000001 [ 515.493438][ C1] R13: 00000000000927c0 R14: 000000000007d8f5 R15: 00007fffeb609b80 [ 515.501422][ C1] [ 515.504664][ C1] Kernel Offset: disabled [ 515.508972][ C1] Rebooting in 86400 seconds..