last executing test programs: 26.369570752s ago: executing program 3 (id=541): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_names\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x2, 0x2f}, 0x40}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 24.160623589s ago: executing program 3 (id=544): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) socket$kcm(0x29, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4008040, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 20.599500632s ago: executing program 0 (id=546): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setfsgid(0xee00) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) syz_io_uring_submit(0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x40) write$cgroup_int(r3, &(0x7f00000001c0)=0x8000000, 0x12) 19.547380017s ago: executing program 0 (id=548): openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffd, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) 18.278285245s ago: executing program 3 (id=552): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000001c0)={0xffffc7ff, 0x50000, 0x0, 0x1, 0x10}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) 15.800284243s ago: executing program 3 (id=555): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r2 = socket(0x10, 0x80002, 0x0) socket$vsock_stream(0x2f, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={0x0, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r5}) 15.269561142s ago: executing program 4 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@window={0x3, 0x7, 0x2}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window, @timestamp], 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_emit_vhci(0x0, 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 14.139855563s ago: executing program 1 (id=557): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = semget$private(0x0, 0x4, 0x90) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0xb59]) semtimedop(r1, &(0x7f0000000280)=[{0x0, 0x0, 0x800}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x28) 12.621148207s ago: executing program 4 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000540)=[@window={0x3, 0x7, 0x2}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window, @timestamp], 0x7) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_emit_vhci(0x0, 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 12.516597551s ago: executing program 2 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) setrlimit(0xc, &(0x7f0000000280)={0x5, 0x5}) close(0xffffffffffffffff) 11.652523195s ago: executing program 0 (id=560): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000019140), 0xe6, 0x0) read$msr(r4, &(0x7f0000019180)=""/102392, 0x18ff8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(r5, 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_open_dev$video4linux(0x0, 0x1, 0x101000) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.541654814s ago: executing program 1 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) 9.747617805s ago: executing program 1 (id=562): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x18, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 9.746246889s ago: executing program 4 (id=563): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 8.470654758s ago: executing program 2 (id=564): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x53}, 0x28) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000011, 0x28011, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7.222068349s ago: executing program 4 (id=565): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{}, "1c21ef1a931cb91d", "589340439dc5066bed1f8b5ab6a232db469e89475250d67cb484781fc5d242f4", '\x00', "26d7f1bce08bbe00"}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="731d1b26", 0x4}], 0x1}, 0x4004404) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r4}) close_range(r1, 0xffffffffffffffff, 0x0) 7.168611266s ago: executing program 0 (id=566): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xd2) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup(r3) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xf}}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x4, 0x7, 0x5b, 0x7, 0x38, 0xfffffffa, 0x2}, &(0x7f0000000140)=0x9c) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) 7.126765432s ago: executing program 1 (id=567): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280), 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r5, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) setns(0xffffffffffffffff, 0x24020000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x0, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "3beb0b1889b90f105d66b3e5a7cb4742"}, 0x4, 0x4}) 6.725161049s ago: executing program 3 (id=568): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") setreuid(0xee01, 0xee01) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 5.724006069s ago: executing program 1 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.118614111s ago: executing program 2 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = openat$cgroup_devices(r3, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r4, 0x0, 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}], 0x1, 0xffffff01, 0xa) 5.117580931s ago: executing program 4 (id=571): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x20, 0x40, 0x282, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0x16a}}) 4.205929573s ago: executing program 3 (id=572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x123e00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8402, &(0x7f00000002c0)=ANY=[@ANYBLOB=',group', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r3, &(0x7f00000028c0)={0x2020}, 0x2020) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') syz_open_pts(r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000804) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) 3.961044692s ago: executing program 1 (id=573): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'caif0\x00', {}, 0x8}) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_emit_ethernet(0x0, 0x0, 0x0) 3.279054605s ago: executing program 2 (id=574): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$KDSETLED(r4, 0x4b32, 0x2) listen(r0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000000000000000000000000000000000080010000"], 0x50) madvise(&(0x7f0000510000/0x3000)=nil, 0x3000, 0x12) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e130100c9"], 0x29) 2.113516881s ago: executing program 0 (id=575): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) waitid(0x1, r0, 0x0, 0x20000000, &(0x7f0000000400)) semtimedop(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, 0x0, &(0x7f0000000100)) fcntl$getown(r3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) 1.958212626s ago: executing program 2 (id=576): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r0 = socket(0x22, 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x4}}}, 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x80044944, 0x1000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r5 = accept$unix(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200008f, &(0x7f00000003c0), 0x0, 0x554, &(0x7f0000000980)="$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") 1.915305001s ago: executing program 4 (id=577): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, &(0x7f0000000440)) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0}) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0a"], 0xd) 51.979673ms ago: executing program 2 (id=578): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x10000, 0x7, 0x6, 0x5, 0x4}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) syz_io_uring_submit(r4, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000018, &(0x7f00000013c0)=ANY=[], 0x0, 0x6b9, &(0x7f00000007c0)="$eJzs3c9vHGf9B/D3rNcbO98qX6dN2ggVESVSQYpInFgphAsBIeRDhapy4IqVOI2VjVPZLnIrBC5FcELi0D+gIPmGOCBxDwrncuvVx0pIXCIOERyMZnbWXnvXv+KfgdcrGj/PzPPMM5/97DMz3nVWG+B/1uSVNB+nyOSVtxbL9ZXlifbK8sSpurmdpKw3kmanSDGbFE+S22V7UbcXdf9iq+N8MnPrnc+frnzRWWvWS9W/sd1+Awzou1QvuZhkqC77DW837OmtxruT5KW+7q3dhtvKyPpKmbTLdQnHbrXP0l5238t5C5ww3dtY0blv9hnr3BhH6vt86qtD4+giPBx7usoBAADAC+qzR8cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx46u//L+qlUZe5mKL7/f+t7ra6/kJ7fNwBAAAAAAAAAMAB+MqzPMtiznTXV4vqb/6XqpVz+ddq8n95P/OZzlyuZjFTWchC5nI9yVjPQK3FqYWFuetre5YG73lj4J43juoRAwAAAAAAAMB/pV9kcv3v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBIUyVCnqJZz3fpYGs1ONa3yx1Lyt279BVEM2vj46OMAAACAfRl5jn3+/1meZTFnkvyxXF8tqtf8r1avl0fyfmazkJkspJ3p3K1fQ5ev+hsryxPtleWJh+XSP+53/rGnMKoR03nvYfCRL1Q9RnMvM9WWq7lTBXM3jWrP0oVuPIPj+qiMqfh2bZeRNeu0lgf77VbvIhyIvb4VMVYGl6xlZLyOrczG2U4GiuqNmmRzJrZ/dv494EhpZHjtSNfTWHvn59wh5Px0XZaP51eHmvO9WstEI1UmbvTMvle3z0Ty1T//4Uf327MP7t+bv3JyHtIOhrbYvnlOTPRk4rVBmegd6ERnornH/uNVJs6vrU/m+/lhruRi3s5cZvKTTGUh01mt26fq+Vz+HNt+ztzesPb2TpG06uelk+rdxHQx36tqU7lU7XsmMynyKHcznTerfzdyPd/IzdzMrZ5n+PyWcVePrTrrG5vP+u4z/ZeBwV/+Wl0ZTfLruuzLwSZbzc6D0rn2l3k925PXzqx/utbrbM95MN6TpZe72RkeOPjzXBubX6or5TE+rsuTYazORHkCde8S3ehe6WSiWd2L+uf576pzY749+2Du/tR7W4y/tGn9jbosp9Xyl3cMr75hDX4qDlZ5qJczUl9JNs6Osu2VtavM2Q131Vb9F5dOW6Ov7XzVVhTdM/UHfWdqOV/LM7VV/w7XP9KNqu21gW0TVduFnrYNv2/lUdq5ewT5A2CfxnK6Nfr30c9GPx395ej90bdGvnvqm6deb2X4r8Pfao4PvdF4vfhTPs3Pqtf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPs1/8OGDqXZ7em5wpbF10w6VnUbeVCnqL/TZ7V4/Pp08X2BHUxlJsmHLcLnhwA7x8S47j24Oo6+y+vPkyPPT/RLBwX1+U1aa2c2At3fq89Gxz4QTWRleP9GGMngCHPOFCTh01xYevndt/oMPvz7zcOrd6XenZ4dv3rw1fuvmmxPX7s20p8c7P487SuAwrN/0jzsSAAAAAAAAAAAAYLcGfULg0ks7fWhkV5/x8D8LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAMxeSXNxylyffzqeLm+sjzRLpdufb1nM0mjkRQ/TYonye10loz1DFfk90+yOuA4n8zceufzpytfrI/V7PRPGnW5D0v1kotJhuryoMa7s+/xin92H2GZsMvdxMFx+08AAAD//1gQ9CU=") 0s ago: executing program 0 (id=579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000940)=ANY=[], 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xfeffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 65.897293][ T5806] cgroup: Unknown subsys name 'net' [ 65.989241][ T5806] cgroup: Unknown subsys name 'cpuset' [ 65.998812][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.343869][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.352812][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.366134][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.376292][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.385080][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.400621][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.407810][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.414088][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.415357][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.429993][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.429995][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.430440][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.439122][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.445607][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.451746][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.459345][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.474398][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.480391][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.487691][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.494859][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.502030][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.507971][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.523260][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.531034][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.538278][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.546110][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.073987][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.168069][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 70.302058][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.309424][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.317157][ T5824] bridge_slave_0: entered allmulticast mode [ 70.324473][ T5824] bridge_slave_0: entered promiscuous mode [ 70.361114][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.368540][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.375912][ T5824] bridge_slave_1: entered allmulticast mode [ 70.383167][ T5824] bridge_slave_1: entered promiscuous mode [ 70.439562][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 70.523516][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.533184][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 70.553454][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.560914][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.568354][ T5830] bridge_slave_0: entered allmulticast mode [ 70.575603][ T5830] bridge_slave_0: entered promiscuous mode [ 70.588804][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.596090][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.603596][ T5830] bridge_slave_1: entered allmulticast mode [ 70.611771][ T5830] bridge_slave_1: entered promiscuous mode [ 70.622408][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.654447][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 70.753108][ T5824] team0: Port device team_slave_0 added [ 70.777762][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.795121][ T5824] team0: Port device team_slave_1 added [ 70.826749][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.909074][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.916359][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.923571][ T5820] bridge_slave_0: entered allmulticast mode [ 70.931190][ T5820] bridge_slave_0: entered promiscuous mode [ 70.947012][ T5830] team0: Port device team_slave_0 added [ 70.964841][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.972033][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.998059][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.011384][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.018404][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.044462][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.055712][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.063097][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.070496][ T5820] bridge_slave_1: entered allmulticast mode [ 71.078079][ T5820] bridge_slave_1: entered promiscuous mode [ 71.092465][ T5830] team0: Port device team_slave_1 added [ 71.151596][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.158990][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.166570][ T5818] bridge_slave_0: entered allmulticast mode [ 71.173911][ T5818] bridge_slave_0: entered promiscuous mode [ 71.217893][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.225703][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.233734][ T5818] bridge_slave_1: entered allmulticast mode [ 71.241100][ T5818] bridge_slave_1: entered promiscuous mode [ 71.266844][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.276740][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.283896][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.291243][ T5821] bridge_slave_0: entered allmulticast mode [ 71.298601][ T5821] bridge_slave_0: entered promiscuous mode [ 71.307492][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.314442][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.340567][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.353155][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.360222][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.373460][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.386223][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.393091][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.432480][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.442066][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.449341][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.456942][ T5821] bridge_slave_1: entered allmulticast mode [ 71.464193][ T5821] bridge_slave_1: entered promiscuous mode [ 71.483529][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.537898][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.553702][ T5824] hsr_slave_0: entered promiscuous mode [ 71.560623][ T5824] hsr_slave_1: entered promiscuous mode [ 71.594424][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.604375][ T5823] Bluetooth: hci2: command tx timeout [ 71.604409][ T5833] Bluetooth: hci4: command tx timeout [ 71.610669][ T5823] Bluetooth: hci0: command tx timeout [ 71.616087][ T5145] Bluetooth: hci3: command tx timeout [ 71.621484][ T5829] Bluetooth: hci1: command tx timeout [ 71.656520][ T5820] team0: Port device team_slave_0 added [ 71.677326][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.703837][ T5818] team0: Port device team_slave_0 added [ 71.712761][ T5820] team0: Port device team_slave_1 added [ 71.733769][ T5830] hsr_slave_0: entered promiscuous mode [ 71.740626][ T5830] hsr_slave_1: entered promiscuous mode [ 71.747323][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.753111][ T5830] Cannot create hsr debugfs directory [ 71.786145][ T5818] team0: Port device team_slave_1 added [ 71.815674][ T5821] team0: Port device team_slave_0 added [ 71.824124][ T5821] team0: Port device team_slave_1 added [ 71.848472][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.855429][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.881653][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.933731][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.940830][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.966858][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.009753][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.016867][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.042895][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.077983][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.084930][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.111479][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.124087][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.131075][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.158503][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.201564][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.208755][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.234907][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.379284][ T5820] hsr_slave_0: entered promiscuous mode [ 72.386070][ T5820] hsr_slave_1: entered promiscuous mode [ 72.392514][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.398337][ T5820] Cannot create hsr debugfs directory [ 72.437723][ T5818] hsr_slave_0: entered promiscuous mode [ 72.444315][ T5818] hsr_slave_1: entered promiscuous mode [ 72.451222][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 72.457014][ T5818] Cannot create hsr debugfs directory [ 72.529671][ T5821] hsr_slave_0: entered promiscuous mode [ 72.536708][ T5821] hsr_slave_1: entered promiscuous mode [ 72.543088][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 72.549184][ T5821] Cannot create hsr debugfs directory [ 72.873517][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.885779][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.941938][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.977786][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.081657][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.094911][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.119688][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.141666][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.194878][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.208276][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.221827][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.239360][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.361051][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.381281][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.394832][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.418460][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.430788][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.533676][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.564132][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.611645][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.618986][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.634226][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.645325][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.666943][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.674095][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.681797][ T5829] Bluetooth: hci1: command tx timeout [ 73.681851][ T5145] Bluetooth: hci0: command tx timeout [ 73.688453][ T5829] Bluetooth: hci3: command tx timeout [ 73.694935][ T5833] Bluetooth: hci4: command tx timeout [ 73.699520][ T5829] Bluetooth: hci2: command tx timeout [ 73.715484][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.722713][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.733523][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.778331][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.785461][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.840804][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.848005][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.889754][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.035053][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.070479][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.111090][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.118310][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.166317][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.173496][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.200051][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.244367][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.251581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.292814][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.300047][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.359950][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.422050][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.561615][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.604945][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.612176][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.658914][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.666152][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.705184][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.899948][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.015936][ T5824] veth0_vlan: entered promiscuous mode [ 75.059616][ T5830] veth0_vlan: entered promiscuous mode [ 75.078616][ T5824] veth1_vlan: entered promiscuous mode [ 75.108836][ T5830] veth1_vlan: entered promiscuous mode [ 75.189977][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.253695][ T5820] veth0_vlan: entered promiscuous mode [ 75.284898][ T5824] veth0_macvtap: entered promiscuous mode [ 75.295717][ T5830] veth0_macvtap: entered promiscuous mode [ 75.313655][ T5824] veth1_macvtap: entered promiscuous mode [ 75.325008][ T5830] veth1_macvtap: entered promiscuous mode [ 75.348848][ T5820] veth1_vlan: entered promiscuous mode [ 75.394172][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.426591][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.450198][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.459502][ T5818] veth0_vlan: entered promiscuous mode [ 75.491398][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.503795][ T5818] veth1_vlan: entered promiscuous mode [ 75.540088][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.562726][ T5820] veth0_macvtap: entered promiscuous mode [ 75.585760][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607223][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.616824][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.634094][ T5820] veth1_macvtap: entered promiscuous mode [ 75.653240][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.662056][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.686764][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.712007][ T5821] veth0_vlan: entered promiscuous mode [ 75.726836][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.741913][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.756010][ T5829] Bluetooth: hci2: command tx timeout [ 75.761436][ T5829] Bluetooth: hci0: command tx timeout [ 75.766912][ T5823] Bluetooth: hci4: command tx timeout [ 75.766948][ T5833] Bluetooth: hci1: command tx timeout [ 75.778359][ T5145] Bluetooth: hci3: command tx timeout [ 75.794929][ T5821] veth1_vlan: entered promiscuous mode [ 75.802574][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854318][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.899234][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.908763][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.929143][ T5818] veth0_macvtap: entered promiscuous mode [ 75.938730][ T1112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.948762][ T1112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.981592][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.982341][ T1112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.991231][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.002325][ T1112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.033212][ T5818] veth1_macvtap: entered promiscuous mode [ 76.066334][ T5821] veth0_macvtap: entered promiscuous mode [ 76.075211][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.086835][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.114743][ T5821] veth1_macvtap: entered promiscuous mode [ 76.160622][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.164892][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.178223][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.211384][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.229252][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.266136][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.273980][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.276862][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.325900][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.334699][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.349096][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.393479][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.796907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.805956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.899466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.956102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.002618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.104905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.105028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.113405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.616177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 77.789296][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.872311][ T5833] Bluetooth: hci0: command tx timeout [ 77.878160][ T5145] Bluetooth: hci1: command tx timeout [ 77.883568][ T5145] Bluetooth: hci4: command tx timeout [ 77.889218][ T51] Bluetooth: hci3: command tx timeout [ 77.889263][ T5829] Bluetooth: hci2: command tx timeout [ 77.931554][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.967450][ T1112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.971367][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.976370][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.010007][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.052943][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.083397][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.087192][ T5945] syzkaller0: entered promiscuous mode [ 78.095927][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.116045][ T5945] syzkaller0: entered allmulticast mode [ 78.235603][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.245941][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.370637][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.101574][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.141647][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.926398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.116991][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.236251][ T5965] loop2: detected capacity change from 0 to 64 [ 80.680254][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.630272][ T9] cfg80211: failed to load regulatory.db [ 84.661265][ T6001] nvme_fabrics: unknown parameter or missing value '®™{$n¦ù•ÈéêìÍ×âhFç¼  ñztð*±h~Àó yeûãxR#[–Y½_j÷AFýà' in ctrl creation request [ 85.400064][ T6004] kAFS: unable to lookup cell '.S²jË¡8' [ 89.222594][ T6023] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 89.229377][ T6024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.236877][ T6024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.242989][ T6024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.259851][ T6024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.267754][ T6024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.273738][ T6024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.321536][ T6024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 89.331044][ T6024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.337546][ T6024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.347840][ T6024] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.354663][ T6024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.361106][ T6024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.370310][ T6024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.346982][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.354329][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.360487][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.467694][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.449422][ T6049] loop0: detected capacity change from 0 to 256 [ 92.627832][ T6049] ======================================================= [ 92.627832][ T6049] WARNING: The mand mount option has been deprecated and [ 92.627832][ T6049] and is ignored by this kernel. Remove the mand [ 92.627832][ T6049] option from the mount to silence this warning. [ 92.627832][ T6049] ======================================================= [ 92.788432][ T6055] can0: slcan on ttyS3. [ 93.090550][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807792b400: rx timeout, send abort [ 93.184663][ T6049] vfat: Unknown parameter 'code' [ 93.192274][ T6054] loop3: detected capacity change from 0 to 512 [ 93.253771][ T6054] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.357142][ T6054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 93.358289][ T6050] can0 (unregistered): slcan off ttyS3. [ 93.366149][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.450898][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.457011][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.476077][ T6054] System zones: 1-12 [ 93.515891][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.546995][ T6054] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.599666][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807792b400: abort rx timeout. Force session deactivation [ 93.623291][ T6054] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.28: invalid indirect mapped block 2 (level 2) [ 93.918299][ T6054] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 93.920744][ T6054] EXT4-fs (loop3): Remounting filesystem read-only [ 93.930057][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 93.930093][ C0] EXT4-fs (loop3): initial error at time 1770918597: ext4_free_branches:1023: inode 11 [ 93.930134][ C0] EXT4-fs (loop3): last error at time 1770918597: ext4_free_branches:1023: inode 11 [ 94.052507][ T6063] netlink: 'syz.4.30': attribute type 298 has an invalid length. [ 94.173867][ T6063] loop4: detected capacity change from 0 to 64 [ 94.334324][ T6054] EXT4-fs (loop3): 1 truncate cleaned up [ 94.540550][ T6054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 94.556474][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.768388][ T10] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 94.783870][ T10] usb 2-1: config 0 has no interface number 0 [ 94.956370][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b2.a1 [ 94.975954][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.551733][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 95.563590][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.569830][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.569844][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.655975][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.732976][ T10] usb 2-1: config 0 descriptor?? [ 97.303154][ T6072] loop3: detected capacity change from 0 to 2048 [ 97.487494][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.595314][ T5863] usb 2-1: USB disconnect, device number 2 [ 100.162818][ T6081] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 101.089978][ T6094] loop0: detected capacity change from 0 to 40427 [ 101.108165][ T6094] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 101.116243][ T6094] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.157150][ T6094] F2FS-fs (loop0): invalid crc value [ 101.511150][ T6094] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.778950][ T6094] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.787497][ T6094] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.008271][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.105410][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 102.112756][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 103.121822][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 103.197182][ T6113] ceph: No mds server is up or the cluster is laggy [ 103.205509][ T6108] ceph: No mds server is up or the cluster is laggy [ 103.212798][ T29] libceph: connect (1)[c::]:6789 error -101 [ 103.226590][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 103.426968][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 103.540331][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 103.552739][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 105.176335][ T6125] loop3: detected capacity change from 0 to 512 [ 105.204121][ T6125] EXT4-fs: Ignoring removed nobh option [ 105.217345][ T6125] EXT4-fs: Ignoring removed oldalloc option [ 105.303722][ T6125] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 105.401204][ T6140] loop2: detected capacity change from 0 to 128 [ 105.458987][ T6125] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.41: invalid indirect mapped block 256 (level 1) [ 105.579588][ T6125] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 105.581924][ T6125] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.41: invalid indirect mapped block 2683928664 (level 1) [ 105.591148][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 105.591162][ C1] EXT4-fs (loop3): initial error at time 1770918609: ext4_free_branches:1023: inode 13 [ 105.591179][ C1] EXT4-fs (loop3): last error at time 1770918609: ext4_free_branches:1023: inode 13 [ 105.680420][ T6142] batman_adv: batadv0: Adding interface: vxlan0 [ 105.695607][ T6125] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 105.702976][ T6142] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.747329][ T6125] EXT4-fs (loop3): 1 truncate cleaned up [ 105.810433][ T6142] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 105.880525][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.912652][ T6151] »»»»»»: renamed from veth1_macvtap (while UP) [ 107.538173][ T6154] mmap: syz.1.47 (6154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.696110][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.089726][ T6160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.45'. [ 108.099461][ T6160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.45'. [ 108.108519][ T6160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.45'. [ 114.140070][ T6202] overlayfs: failed to resolve './bus': -2 [ 116.413673][ T6219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.60'. [ 116.422649][ T6219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.60'. [ 116.432536][ T6219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.60'. [ 118.018625][ T6231] Cannot find set identified by id 0 to match [ 125.033155][ T6261] bridge1: entered promiscuous mode [ 125.038438][ T6261] bridge1: entered allmulticast mode [ 125.314162][ T30] audit: type=1107 audit(1770918627.457:2): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JF4 0Ç7VC0Ø/"¨ÛXHOÊ9œí§2_=$à/Ô§cÓD>ÆÎÁƒãFdš'Û‡ó­Oz|­ëö‰`DY½=¢ènX«°ÏBuù”ËÑ—6;kËÑ›hfp›9”ON‡«•¯²§x}}gf™ÈƲ»–9ÕšgZœŸ91•øp݈ýAôsü(rw£'ám‹}.ʺxŸU [ 125.314162][ T30] *宥BŒ¥—OiPý§V©"/q{p' [ 126.117006][ T6269] trusted_key: encrypted_key: insufficient parameters specified [ 128.728379][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 131.016932][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 131.226082][ T6311] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 132.313396][ T6324] random: crng reseeded on system resumption [ 132.335256][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.730121][ T6329] 9p: Bad value for 'rfdno' [ 132.743366][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 132.767278][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.942696][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.479838][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.490027][ T5863] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.499943][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.653542][ T5863] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.876956][ T5863] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.990000][ T6338] loop3: detected capacity change from 0 to 64 [ 134.409088][ T5863] usb 3-1: Manufacturer: syz [ 134.417164][ T5863] usb 3-1: config 0 descriptor?? [ 134.448592][ T1112] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 134.854014][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.860420][ T5863] rc_core: IR keymap rc-hauppauge not found [ 134.860541][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.866468][ T5863] Registered IR keymap rc-empty [ 134.866877][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.047139][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.569652][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.602972][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 135.748621][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.792563][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.892986][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.930861][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.079484][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.100281][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.131566][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 136.249141][ T6356] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 136.649817][ T6358] loop3: detected capacity change from 0 to 128 [ 136.662422][ T6358] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.703801][ T6358] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.319097][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.480579][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 137.508386][ T36] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.532923][ T5863] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 138.551067][ T5863] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 138.734333][ T5863] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.070278][ T5863] usb 3-1: USB disconnect, device number 2 [ 139.127695][ T6377] 9p: Bad value for 'rfdno' [ 139.299561][ T6375] loop4: detected capacity change from 0 to 16 [ 139.812940][ T6375] erofs (device loop4): mounted with root inode @ nid 36. [ 141.594223][ T6397] loop1: detected capacity change from 0 to 128 [ 141.901441][ T6405] xt_hashlimit: max too large, truncated to 1048576 [ 141.911108][ T6405] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 145.037803][ T6427] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.401237][ T6429] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 146.460040][ T6430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.466292][ T6430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.472356][ T6430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.478322][ T6430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.484359][ T6430] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.627255][ T6439] tipc: Started in network mode [ 147.660323][ T6439] tipc: Node identity 7ec52db61076, cluster identity 4711 [ 147.707980][ T6439] tipc: Enabled bearer , priority 0 [ 148.013145][ T6455] syzkaller0: entered promiscuous mode [ 148.283075][ T6455] syzkaller0: entered allmulticast mode [ 148.456878][ T6438] tipc: Resetting bearer [ 148.504443][ T6438] tipc: Disabling bearer [ 148.762934][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 148.762964][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.769021][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.769056][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.436407][ T6466] tipc: Started in network mode [ 149.441331][ T6466] tipc: Node identity 86399dd3f4ea, cluster identity 4711 [ 150.084070][ T6466] tipc: Enabled bearer , priority 0 [ 150.200663][ T6475] syzkaller0: entered promiscuous mode [ 150.207230][ T6477] loop1: detected capacity change from 0 to 512 [ 150.264024][ T6475] syzkaller0: entered allmulticast mode [ 150.386410][ T6477] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.124: corrupted in-inode xattr: bad e_name length [ 150.543657][ T6477] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.544926][ T6477] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.124: couldn't read orphan inode 15 (err -117) [ 150.554139][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 150.554164][ C0] EXT4-fs (loop1): initial error at time 1770918651: ext4_iget_extra_inode:5025: inode 15 [ 150.554188][ C0] EXT4-fs (loop1): last error at time 1770918651: ext4_iget_extra_inode:5025: inode 15 [ 150.663401][ T6477] loop1: lost filesystem error report for type 5 error -117 [ 151.067138][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.100547][ T6477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.141472][ T6480] tipc: Resetting bearer [ 151.264268][ T6463] tipc: Resetting bearer [ 151.998094][ T6463] tipc: Disabling bearer [ 152.108919][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.157636][ T5863] tipc: Node number set to 1926471123 [ 152.439527][ T6499] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 152.949890][ T6500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.956055][ T6500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.962185][ T6500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.968255][ T6500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.975665][ T6500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.353050][ T6502] loop1: detected capacity change from 0 to 40427 [ 153.683068][ T6505] loop4: detected capacity change from 0 to 32768 [ 153.736763][ T6502] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 153.744672][ T6502] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.772576][ T6502] F2FS-fs (loop1): invalid crc value [ 153.842558][ T6502] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 154.422401][ T6505] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 154.451671][ T6505] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 154.464337][ T6502] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.471456][ T6502] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.691257][ T6505] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 154.705967][ T5822] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 154.715237][ T5822] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 154.911952][ T30] audit: type=1800 audit(1770918655.397:3): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 155.257969][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.264155][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.270694][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.276905][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.381438][ T5818] syz-executor: attempt to access beyond end of device [ 156.381438][ T5818] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 156.427274][ T5822] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1601ms [ 156.437537][ T5822] gfs2: fsid=syz:syz.0: jid=0: Done [ 156.438567][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 156.438592][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.438608][ T5818] Call Trace: [ 156.438618][ T5818] [ 156.438625][ T5818] dump_stack_lvl+0xe8/0x150 [ 156.438654][ T5818] f2fs_handle_critical_error+0x37c/0x540 [ 156.438689][ T5818] f2fs_write_end_io+0xcdb/0xff0 [ 156.438726][ T5818] __submit_merged_bio+0x256/0x700 [ 156.438759][ T5818] f2fs_submit_merged_write+0x284/0x390 [ 156.438790][ T5818] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 156.438831][ T5818] f2fs_sync_node_pages+0x14bf/0x1680 [ 156.438899][ T5818] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 156.438964][ T5818] f2fs_write_checkpoint+0xeb8/0x26a0 [ 156.439014][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 156.439084][ T5818] kill_f2fs_super+0x314/0x720 [ 156.439110][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 156.439142][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.439180][ T5818] deactivate_locked_super+0xbc/0x130 [ 156.439207][ T5818] cleanup_mnt+0x437/0x4d0 [ 156.439225][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 156.439252][ T5818] task_work_run+0x1d9/0x270 [ 156.439275][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 156.439302][ T5818] exit_to_user_mode_loop+0xed/0x480 [ 156.439322][ T5818] ? rcu_is_watching+0x15/0xb0 [ 156.439349][ T5818] do_syscall_64+0x32d/0xf80 [ 156.439364][ T5818] ? trace_irq_disable+0x3b/0x150 [ 156.439388][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.439405][ T5818] ? clear_bhb_loop+0x40/0x90 [ 156.439434][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.439455][ T5818] RIP: 0033:0x7f6b3b99d1d7 [ 156.439477][ T5818] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 156.439491][ T5818] RSP: 002b:00007ffceeb79968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 156.439510][ T5818] RAX: 0000000000000000 RBX: 00007f6b3ba31c3b RCX: 00007f6b3b99d1d7 [ 156.439522][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceeb79a20 [ 156.439532][ T5818] RBP: 00007ffceeb79a20 R08: 00007ffceeb7aa20 R09: 00000000ffffffff [ 156.439543][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffceeb7aab0 [ 156.439554][ T5818] R13: 00007f6b3ba31c3b R14: 0000000000025204 R15: 00007ffceeb7aaf0 [ 156.439582][ T5818] [ 156.439589][ T5818] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 156.443741][ T6505] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 156.758552][ T6505] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 159.424985][ T6547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.658985][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 159.669215][ T6535] team0: Port device batadv1 added [ 160.978514][ T6559] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 161.631163][ T6560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.638306][ T6560] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.645808][ T6560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.652071][ T6560] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.658119][ T6560] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.885211][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.891343][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.897421][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.903598][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.602758][ T6590] loop4: detected capacity change from 0 to 32768 [ 165.625146][ T6591] Bluetooth: MGMT ver 1.23 [ 165.970326][ T112] ERROR: (device loop4): dbFree: error in block map [ 165.970326][ T112] [ 166.017284][ T6587] loop0: detected capacity change from 0 to 4096 [ 166.092646][ T112] ERROR: (device loop4): remounting filesystem as read-only [ 166.400064][ T6587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.636491][ T6587] overlayfs: missing 'lowerdir' [ 167.132742][ T6588] loop1: detected capacity change from 0 to 4096 [ 167.309231][ T6588] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.394023][ T6588] EXT4-fs (loop1): Test dummy encryption mode enabled [ 167.415070][ T6603] loop2: detected capacity change from 0 to 164 [ 167.439413][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.670566][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.222844][ T6607] rock: directory entry would overflow storage [ 168.229245][ T6607] rock: sig=0x4f50, size=4, remaining=3 [ 168.234802][ T6607] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 168.258515][ T6588] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 168.420397][ T6588] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.554320][ T6599] loop3: detected capacity change from 0 to 32768 [ 168.569457][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.750598][ T6599] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.148 (6599) [ 169.364594][ T6599] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.418488][ T6599] BTRFS info (device loop3): using sha256 checksum algorithm [ 169.719351][ T6623] libceph: resolve '400' (ret=-3): failed [ 170.171978][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 170.183917][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 170.232763][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 170.437063][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 170.467478][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 170.604415][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 170.614141][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 170.738177][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.790349][ T6643] bond0: (slave rose0): Enslaving as an active interface with an up link [ 171.093971][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 171.102369][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 171.223391][ T6599] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 171.487004][ T6599] BTRFS error (device loop3): open_ctree failed: -12 [ 172.128539][ T6659] loop2: detected capacity change from 0 to 2048 [ 172.312952][ T6659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.843047][ T6683] loop0: detected capacity change from 0 to 128 [ 173.879327][ T6683] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 173.951192][ T6683] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.525036][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.755416][ T6714] loop4: detected capacity change from 0 to 1024 [ 176.782161][ T6714] ext4: Bad value for 'barrier' [ 177.091458][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.167'. [ 179.708422][ T6744] process 'syz.3.172' launched '/dev/fd/8' with NULL argv: empty string added [ 180.668856][ T6746] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.687104][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 180.729918][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 180.795382][ T6745] ceph: No mds server is up or the cluster is laggy [ 181.017888][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 181.064696][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 181.085719][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 181.172683][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 182.307994][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 182.369862][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 182.580648][ T6768] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.621081][ T6788] loop4: detected capacity change from 0 to 1764 [ 184.972946][ T6792] loop2: detected capacity change from 0 to 256 [ 185.475427][ T6792] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 188.042643][ T6809] syz.4.186 (6809): drop_caches: 2 [ 188.185034][ T6806] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 188.937786][ T6807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.944408][ T6807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.950501][ T6807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.960082][ T6807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.968057][ T6807] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.354238][ T6836] SQUASHFS error: Failed to read block 0x0: -5 [ 190.360807][ T6836] unable to read squashfs_super_block [ 191.737875][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.744561][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.751297][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.758003][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.071040][ T6847] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 193.200617][ T6858] delete_channel: no stack [ 193.222791][ T6858] loop1: detected capacity change from 0 to 22 [ 193.234501][ T6858] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 193.657921][ T6858] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 195.611854][ T6874] loop3: detected capacity change from 0 to 8 [ 195.962459][ T5823] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 196.117551][ T6881] SQUASHFS error: Failed to read block 0x1ec: -5 [ 196.124362][ T6881] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 198.378835][ T6899] loop1: detected capacity change from 0 to 32768 [ 198.662144][ T6897] loop0: detected capacity change from 0 to 32768 [ 199.176854][ T6899] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.208273][ T6899] XFS (loop1): Ending clean mount [ 199.219173][ T6899] XFS (loop1): Quotacheck needed: Please wait. [ 199.246752][ T6897] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.265186][ T6899] XFS (loop1): Quotacheck: Done. [ 199.315805][ T6897] XFS (loop0): Ending clean mount [ 199.584981][ T6924] netlink: 'syz.1.206': attribute type 6 has an invalid length. [ 199.593289][ T6924] netlink: 'syz.1.206': attribute type 7 has an invalid length. [ 199.601324][ T6924] netlink: 'syz.1.206': attribute type 8 has an invalid length. [ 199.609439][ T6924] netlink: 'syz.1.206': attribute type 15 has an invalid length. [ 200.847859][ T6930] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 200.859955][ T5818] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.904549][ T5821] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.918298][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.947334][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.988302][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'. [ 204.847180][ T6961] Zero length message leads to an empty skb [ 205.405339][ T6972] loop3: detected capacity change from 0 to 32768 [ 205.657203][ T6976] trusted_key: encrypted_key: insufficient parameters specified [ 209.700775][ T7016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.297503][ T7024] loop3: detected capacity change from 0 to 32768 [ 211.392361][ T7024] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.477984][ T7024] XFS (loop3): Ending clean mount [ 211.488652][ T7024] XFS (loop3): Quotacheck needed: Please wait. [ 211.568355][ T7024] XFS (loop3): Quotacheck: Done. [ 211.854707][ T7039] netlink: 'syz.3.231': attribute type 6 has an invalid length. [ 211.862695][ T7039] netlink: 'syz.3.231': attribute type 7 has an invalid length. [ 211.870574][ T7039] netlink: 'syz.3.231': attribute type 8 has an invalid length. [ 211.878570][ T7039] netlink: 'syz.3.231': attribute type 15 has an invalid length. [ 212.233784][ T5820] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.656249][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.666516][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.685434][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.704319][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.711993][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.777435][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.967002][ T7057] loop4: detected capacity change from 0 to 1024 [ 214.000488][ T7057] EXT4-fs: Ignoring removed nobh option [ 214.487162][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.187986][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.870940][ T5833] Bluetooth: hci3: unexpected event for opcode 0x041b [ 215.884841][ T5833] Bluetooth: hci2: command tx timeout [ 216.500812][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.697785][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.774089][ T7087] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 216.960099][ T7091] loop2: detected capacity change from 0 to 32768 [ 217.023039][ T7091] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.236223][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.252127][ T7091] XFS (loop2): Ending clean mount [ 217.266223][ T7091] XFS (loop2): Quotacheck needed: Please wait. [ 217.307103][ T7091] XFS (loop2): Quotacheck: Done. [ 217.527400][ T7106] netlink: 'syz.2.246': attribute type 6 has an invalid length. [ 217.535146][ T7106] netlink: 'syz.2.246': attribute type 7 has an invalid length. [ 217.542846][ T7106] netlink: 'syz.2.246': attribute type 8 has an invalid length. [ 217.550486][ T7106] netlink: 'syz.2.246': attribute type 15 has an invalid length. [ 218.013975][ T5830] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.546968][ T5833] Bluetooth: hci2: command tx timeout [ 218.907582][ T49] bridge_slave_1: left allmulticast mode [ 218.941971][ T49] bridge_slave_1: left promiscuous mode [ 218.949305][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.297192][ T49] bridge_slave_0: left allmulticast mode [ 219.303297][ T49] bridge_slave_0: left promiscuous mode [ 219.682155][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.115380][ T7129] loop4: detected capacity change from 0 to 512 [ 220.136709][ T7129] EXT4-fs: Ignoring removed nobh option [ 220.544691][ T7129] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.252: iget: bad i_size value: 38620345925642 [ 220.589561][ T7131] Invalid option length (65058) for dns_resolver key [ 220.642089][ T7129] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.652193][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 220.667965][ C1] EXT4-fs (loop4): initial error at time 1770918716: ext4_orphan_get:1391: inode 15 [ 220.677351][ C1] EXT4-fs (loop4): last error at time 1770918716: ext4_orphan_get:1391: inode 15 [ 220.690937][ T7129] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.252: couldn't read orphan inode 15 (err -117) [ 220.727083][ T7129] loop4: lost filesystem error report for type 5 error -117 [ 220.742933][ T7129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.777281][ T5833] Bluetooth: hci2: command tx timeout [ 222.021764][ T7136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 222.532904][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.564044][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.607061][ T49] bond0 (unregistering): Released all slaves [ 222.613302][ T5863] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 222.750070][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.823597][ T49] tipc: Left network mode [ 222.857292][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 222.903435][ T7052] chnl_net:caif_netlink_parms(): no params data found [ 222.943196][ T5863] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 222.964481][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.982868][ T5833] Bluetooth: hci2: command tx timeout [ 223.002705][ T5863] usb 4-1: config 0 has no interface number 0 [ 223.121173][ T7169] loop4: detected capacity change from 0 to 1024 [ 223.137648][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 223.204499][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.211268][ T7169] hfsplus: failed to load root directory [ 223.268154][ T5863] usb 4-1: Product: syz [ 223.986709][ T30] audit: type=1107 audit(1770918719.584:4): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 224.095802][ T5863] usb 4-1: Manufacturer: syz [ 224.130921][ T5863] usb 4-1: SerialNumber: syz [ 224.654028][ T5863] usb 4-1: config 0 descriptor?? [ 224.668487][ T5863] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 224.709975][ T5863] uvcvideo 4-1:0.31: No valid video chain found. [ 225.715145][ T7186] loop3: detected capacity change from 0 to 32768 [ 225.760753][ T7188] loop4: detected capacity change from 0 to 256 [ 225.788521][ T7186] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 225.864926][ T7186] XFS (loop3): Ending clean mount [ 225.880524][ T7186] XFS (loop3): Quotacheck needed: Please wait. [ 225.933164][ T7188] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 225.975113][ T7186] XFS (loop3): Quotacheck: Done. [ 225.987885][ T7184] kAFS: No cell specified [ 226.063264][ T7188] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 226.097935][ T7188] syz_tun: entered allmulticast mode [ 226.273802][ T49] hsr_slave_0: left promiscuous mode [ 226.299805][ T49] hsr_slave_1: left promiscuous mode [ 226.319648][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.343270][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.380116][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.409328][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.429685][ T49] veth1_macvtap: left promiscuous mode [ 226.441961][ T49] veth0_macvtap: left promiscuous mode [ 226.550152][ T49] veth1_vlan: left promiscuous mode [ 226.556094][ T49] veth0_vlan: left promiscuous mode [ 228.027277][ T7216] netlink: 'syz.1.261': attribute type 9 has an invalid length. [ 228.035143][ T7216] netlink: 'syz.1.261': attribute type 11 has an invalid length. [ 228.043066][ T7216] netlink: 'syz.1.261': attribute type 12 has an invalid length. [ 228.051415][ T7216] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.261'. [ 228.066102][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 228.687518][ T5863] usb 4-1: USB disconnect, device number 2 [ 228.787742][ T5820] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 231.287369][ T49] team0 (unregistering): Port device team_slave_1 removed [ 231.350752][ T49] team0 (unregistering): Port device team_slave_0 removed [ 231.764626][ T7241] x_tables: duplicate underflow at hook 2 [ 232.043874][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.064584][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.087620][ T7052] bridge_slave_0: entered allmulticast mode [ 232.125555][ T7052] bridge_slave_0: entered promiscuous mode [ 232.242879][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.262364][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.280483][ T7052] bridge_slave_1: entered allmulticast mode [ 232.288565][ T7052] bridge_slave_1: entered promiscuous mode [ 232.915363][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.981808][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.212276][ T7052] team0: Port device team_slave_0 added [ 233.222408][ T7052] team0: Port device team_slave_1 added [ 233.410476][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.236081][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.460582][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.612243][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.624821][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.676862][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.383140][ T7052] hsr_slave_0: entered promiscuous mode [ 235.397730][ T7052] hsr_slave_1: entered promiscuous mode [ 235.480901][ T7052] debugfs: 'hsr0' already exists in 'hsr' [ 235.486754][ T7052] Cannot create hsr debugfs directory [ 235.626483][ T7282] loop3: detected capacity change from 0 to 16 [ 235.638152][ T7282] erofs: Unknown parameter '0x0000000000000003' [ 236.859062][ T7286] loop4: detected capacity change from 0 to 32768 [ 236.955355][ T7286] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.052718][ T7286] XFS (loop4): Ending clean mount [ 237.060413][ T7286] XFS (loop4): Quotacheck needed: Please wait. [ 237.130041][ T7286] XFS (loop4): Quotacheck: Done. [ 237.778582][ T7302] usb usb7: usbfs: process 7302 (syz.1.277) did not claim interface 0 before use [ 238.084382][ T5824] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.522450][ T7310] loop3: detected capacity change from 0 to 512 [ 238.559799][ T7310] EXT4-fs: Ignoring removed nobh option [ 238.613404][ T7310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 238.654587][ T7310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.707632][ T7315] loop4: detected capacity change from 0 to 4096 [ 238.746810][ T7315] EXT4-fs (loop4): Test dummy encryption mode enabled [ 238.790643][ T7310] EXT4-fs (loop3): 1 truncate cleaned up [ 238.801379][ T7315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.814758][ T7310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.733433][ T7331] netlink: 52 bytes leftover after parsing attributes in process `syz.2.282'. [ 239.887563][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.389674][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.703385][ T7052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.725111][ T7052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.970455][ T7364] loop1: detected capacity change from 0 to 32768 [ 243.030976][ T7361] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.037126][ T7361] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.043341][ T7361] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.049437][ T7361] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.055536][ T7361] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.061631][ T7361] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.103278][ T7361] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.139333][ T7052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.158714][ T7364] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.210725][ T7364] XFS (loop1): Ending clean mount [ 243.218597][ T7364] XFS (loop1): Quotacheck needed: Please wait. [ 243.303105][ T7378] vivid-007: disconnect [ 243.837269][ T7052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.922678][ T7364] XFS (loop1): Quotacheck: Done. [ 244.035357][ T7370] vivid-007: reconnect [ 244.663408][ T7393] netlink: 256 bytes leftover after parsing attributes in process `syz.1.289'. [ 244.672724][ T7393] netlink: 72 bytes leftover after parsing attributes in process `syz.1.289'. [ 245.172375][ T5818] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 245.194843][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 245.222073][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.228090][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.234644][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.241058][ T7397] openvswitch: netlink: Flow actions attr not present in new flow. [ 245.249825][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.846810][ T7397] bridge1: entered promiscuous mode [ 246.121407][ T7406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.295'. [ 246.152362][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.165717][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 246.265253][ T7406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.295'. [ 246.279083][ T7418] __vm_enough_memory: pid: 7418, comm: syz.1.293, bytes: 4503599627366400 not enough memory for the allocation [ 246.391653][ T7052] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.406016][ T7406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.295'. [ 246.424774][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.432013][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.613112][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.620271][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.442885][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.472689][ T7052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.135450][ T7441] loop4: detected capacity change from 0 to 164 [ 249.143551][ T7441] iso9660: Bad value for 'mode' [ 249.709341][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.993565][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.149751][ T7448] loop3: detected capacity change from 0 to 128 [ 251.357340][ T7448] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.598691][ T7456] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.604867][ T7456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.610936][ T7456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.617105][ T7456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.623345][ T7456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.626412][ T7448] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.775340][ T7052] veth0_vlan: entered promiscuous mode [ 251.822344][ T7052] veth1_vlan: entered promiscuous mode [ 251.991956][ T7052] veth0_macvtap: entered promiscuous mode [ 252.059700][ T7052] veth1_macvtap: entered promiscuous mode [ 252.136136][ T5907] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 252.136524][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.187330][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.198817][ T5820] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.339330][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 252.385585][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.463954][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 252.559832][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.618635][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.739841][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 252.755362][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 252.767479][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 252.770768][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.430703][ T3553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.481717][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 253.566372][ T5907] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 253.577765][ T3553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.627936][ T7485] loop1: detected capacity change from 0 to 128 [ 253.629086][ T5907] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 253.649598][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.655651][ T7485] EXT4-fs: inline encryption not supported [ 253.665861][ T5907] usb 5-1: Product: syz [ 253.703896][ T7485] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 253.724164][ T5907] usb 5-1: Manufacturer: syz [ 253.750356][ T5907] usb 5-1: SerialNumber: syz [ 253.756932][ T7485] EXT4-fs (loop1): Test dummy encryption mode enabled [ 253.772129][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.778255][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.781327][ T5907] usb 5-1: config 0 descriptor?? [ 253.784421][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.784457][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.789172][ T7485] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 253.824264][ T7486] loop3: detected capacity change from 0 to 4096 [ 253.831659][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.844834][ T7463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.850044][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.862739][ T7463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.883072][ T7486] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.931275][ T5907] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.943299][ T7486] EXT4-fs (loop3): Test dummy encryption mode enabled [ 253.950762][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.971215][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.001629][ T7486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.337650][ T7486] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 256.146389][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.691287][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 256.706810][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 257.709719][ T29] usb 5-1: USB disconnect, device number 2 [ 259.022895][ T7526] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.029031][ T7526] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.035192][ T7526] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.041241][ T7526] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.047333][ T7526] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.214809][ T7538] loop0: detected capacity change from 0 to 8 [ 260.225498][ T7538] SQUASHFS error: lzo decompression failed, data probably corrupt [ 260.233436][ T7538] SQUASHFS error: Failed to read block 0x28d: -5 [ 260.239814][ T7538] SQUASHFS error: Unable to read metadata cache entry [28b] [ 260.247107][ T7538] SQUASHFS error: Unable to read inode 0x11f [ 260.563130][ T7547] loop2: detected capacity change from 0 to 128 [ 262.165220][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.171262][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 262.177460][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.183478][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.199867][ T7547] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 262.232892][ T7547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.227901][ T7564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.234062][ T7564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.240107][ T7564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.246087][ T7564] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.252228][ T7564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.288739][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.295191][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.621905][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.629160][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.635341][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 266.641358][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.297036][ T7597] infiniband: Added to hash: ib_dev=ffff88804aadc000 (0)() ndev=ffff88807b05a000 (26)(veth1_to_team) [ 267.833119][ T7597] infiniband syz2: set active [ 267.839413][ T7597] infiniband syz2: added veth1_to_team [ 267.850564][ T7597] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 267.854662][ T7597] infiniband syz2: Couldn't open port 1 [ 268.004096][ T7597] RDS/IB: syz2: added [ 268.008673][ T7597] smc: adding ib device syz2 with port count 1 [ 268.015321][ T7597] smc: ib device syz2 port 1 has no pnetid [ 269.359996][ T7594] loop0: detected capacity change from 0 to 764 [ 269.919899][ T7609] netlink: 'syz.0.330': attribute type 2 has an invalid length. [ 271.571799][ T7614] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 271.813654][ T7615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.827398][ T7615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.836410][ T7615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.845060][ T7615] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.853253][ T7615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.935949][ T7628] loop0: detected capacity change from 0 to 8 [ 272.298385][ T7628] SQUASHFS error: lzo decompression failed, data probably corrupt [ 272.306306][ T7628] SQUASHFS error: Failed to read block 0x28d: -5 [ 272.312771][ T7628] SQUASHFS error: Unable to read metadata cache entry [28b] [ 272.321320][ T7628] SQUASHFS error: Unable to read inode 0x11f [ 274.468909][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.475075][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 274.481399][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.487504][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.578433][ T7684] loop1: detected capacity change from 0 to 2048 [ 279.347892][ T7687] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 279.548498][ T7688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.554613][ T7688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.560789][ T7688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.566951][ T7688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.573072][ T7688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.965116][ T7684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.812306][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.138020][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.138036][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.138068][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.144053][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.497105][ T7706] syz.1.348 (7706): drop_caches: 2 [ 283.974533][ T5822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 284.435168][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 284.567895][ T5822] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 285.053867][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.080061][ T5822] usb 4-1: Product: syz [ 285.098880][ T5822] usb 4-1: Manufacturer: syz [ 285.124974][ T5822] usb 4-1: SerialNumber: syz [ 285.143944][ T5822] usb 4-1: config 0 descriptor?? [ 287.280521][ T7752] xt_TCPMSS: Only works on TCP SYN packets [ 287.892617][ T10] usb 4-1: USB disconnect, device number 3 [ 290.291246][ T7764] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 290.421227][ T7771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.427394][ T7771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.433509][ T7771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.439563][ T7771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.445693][ T7771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.643072][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 292.643276][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 292.649186][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.655196][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 295.870222][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 296.344004][ T5906] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 296.683919][ T5906] usb 4-1: device descriptor read/64, error -71 [ 296.711336][ T7820] loop4: detected capacity change from 0 to 256 [ 297.982529][ T7820] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 299.534996][ T7838] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 299.548489][ T7842] loop3: detected capacity change from 0 to 1024 [ 299.565629][ T7839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.577503][ T7839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.584093][ T7839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.590574][ T7839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.596924][ T7839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.729150][ T7844] loop4: detected capacity change from 0 to 512 [ 301.907509][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.913784][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.922729][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.928889][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.059648][ T7844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.282897][ T7844] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.071724][ T7867] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 304.582910][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.608232][ T7884] loop2: detected capacity change from 0 to 164 [ 305.953473][ T7884] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 307.317038][ T7904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 307.783770][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 307.793531][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 307.815551][ T7907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.821768][ T7907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.827824][ T7907] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.833811][ T7907] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 307.839887][ T7907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.038131][ T30] audit: type=1800 audit(1770918799.598:5): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.391" name="bus" dev="tmpfs" ino=395 res=0 errno=0 [ 310.058352][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.064417][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.070600][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.070913][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.569581][ T7993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.615956][ T7993] bond_slave_0: entered promiscuous mode [ 313.621954][ T7993] bond_slave_1: entered promiscuous mode [ 313.629193][ T7993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.639826][ T7993] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 314.042225][ T8000] Device name cannot be null; rc = [-22] [ 315.291250][ T8002] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 318.151991][ T8026] loop3: detected capacity change from 0 to 2 [ 318.170933][ T8026] jffs2: Bad value for 'rp_size' [ 320.470733][ T8051] loop0: detected capacity change from 0 to 128 [ 320.480977][ T8051] EXT4-fs: Ignoring removed nobh option [ 320.537283][ T8051] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.550446][ T8051] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 321.220379][ T8056] loop2: detected capacity change from 0 to 512 [ 321.720543][ T8056] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.736831][ T7052] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.764569][ T8059] loop4: detected capacity change from 0 to 128 [ 321.779166][ T8056] EXT4-fs (loop2): 1 truncate cleaned up [ 321.788049][ T8059] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 321.808939][ T8063] syz.3.419 uses obsolete (PF_INET,SOCK_PACKET) [ 321.882180][ T8056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.529137][ T8081] /dev/nullb0: Can't open blockdev [ 324.043275][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.714826][ T5907] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 325.249231][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 325.821604][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.834016][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.847642][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.859436][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.886167][ T5907] usb 3-1: config 0 descriptor?? [ 325.913778][ T5907] hub 3-1:0.0: bad descriptor, ignoring hub [ 325.920340][ T5907] hub 3-1:0.0: probe with driver hub failed with error -5 [ 326.109904][ T5907] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 326.622155][ T8104] netlink: 92 bytes leftover after parsing attributes in process `syz.2.421'. [ 330.652388][ T8128] random: crng reseeded on system resumption [ 330.668398][ T8128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'. [ 330.678270][ T8128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'. [ 331.869637][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.887688][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.191626][ T10] usb 3-1: USB disconnect, device number 3 [ 333.671836][ T8156] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 333.846134][ T8144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.852681][ T8144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.859044][ T8144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.866415][ T8144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.872662][ T8144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.559913][ T8163] loop2: detected capacity change from 0 to 256 [ 335.121121][ T8163] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 336.052002][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.061175][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.061188][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.061263][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.850395][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 336.856705][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 336.882712][ T8179] loop4: detected capacity change from 0 to 4096 [ 337.124066][ T8179] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 337.150179][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 337.246728][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 337.379800][ T8190] loop3: detected capacity change from 0 to 2048 [ 337.490719][ T8190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.708894][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 338.714931][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 339.280493][ T8182] ceph: No mds server is up or the cluster is laggy [ 339.872807][ T30] audit: type=1800 audit(1770918828.399:6): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.430" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 339.946815][ T12] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22. [ 341.256453][ T8208] No such timeout policy "syz1" [ 342.423558][ T8218] loop2: detected capacity change from 0 to 128 [ 342.700787][ T8218] EXT4-fs: Ignoring removed nobh option [ 342.739247][ T8218] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.753762][ T8218] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.449923][ T8229] overlayfs: failed to decode file handle (len=3, type=1, flags=0, err=-22) [ 343.459949][ T8229] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 343.555267][ T5830] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.225942][ T8235] loop2: detected capacity change from 0 to 16 [ 344.237893][ T8235] erofs: Unknown parameter '0x0000000000000003' [ 347.985515][ T8249] 9p: Bad value for 'rfdno' [ 348.334247][ T8250] loop3: detected capacity change from 0 to 1024 [ 348.389797][ T8250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.015850][ T8259] loop4: detected capacity change from 0 to 8 [ 349.151005][ T8259] SQUASHFS error: lzo decompression failed, data probably corrupt [ 349.158949][ T8259] SQUASHFS error: Failed to read block 0x91: -5 [ 349.165254][ T8259] SQUASHFS error: Unable to read metadata cache entry [8f] [ 349.173808][ T8259] SQUASHFS error: Unable to read inode 0x11f [ 349.203265][ T5822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 350.299202][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 351.335965][ T5822] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 351.344213][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.360599][ T5822] usb 1-1: config 0 has no interface number 0 [ 351.389458][ T8282] loop3: detected capacity change from 0 to 8 [ 351.407318][ T7504] udevd[7504]: incorrect cramfs checksum on /dev/loop3 [ 351.414989][ T8282] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 351.646564][ T8282] cramfs: Error -3 while decompressing! [ 351.652382][ T8282] cramfs: ffffffff9a3a9c68(26)->ffff88805475f000(4096) [ 351.659315][ T8282] cramfs: Error -3 while decompressing! [ 351.664865][ T8282] cramfs: ffffffff9a3a9c82(26)->ffff888053a5c000(4096) [ 351.671765][ T8282] cramfs: Error -3 while decompressing! [ 351.677367][ T8282] cramfs: ffffffff9a3a9c9c(16)->ffff888053a5d000(4096) [ 351.684264][ T8282] cramfs: Error -3 while decompressing! [ 351.691101][ T8282] cramfs: ffffffff9a3a9c68(26)->ffff88805475f000(4096) [ 353.439312][ T5822] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 353.448642][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.456747][ T5822] usb 1-1: Product: syz [ 353.460923][ T5822] usb 1-1: Manufacturer: syz [ 353.465588][ T5822] usb 1-1: SerialNumber: syz [ 354.149280][ T8286] loop0: detected capacity change from 0 to 32768 [ 354.213911][ T8286] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 354.235834][ T5822] usb 1-1: config 0 descriptor?? [ 354.350806][ T5822] usb 1-1: can't set config #0, error -71 [ 354.428888][ T5822] usb 1-1: USB disconnect, device number 2 [ 355.831878][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 360.732309][ T10] IPVS: starting estimator thread 0... [ 360.891808][ T8331] IPVS: using max 41 ests per chain, 98400 per kthread [ 362.210815][ T5931] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 364.258460][ T8355] IPVS: Error connecting to the multicast addr [ 364.676106][ T8348] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 364.729108][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 364.753789][ T5931] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 364.762739][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.075216][ T5931] usb 3-1: config 0 has no interface number 0 [ 365.084423][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 365.094125][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.102129][ T5931] usb 3-1: Product: syz [ 365.128143][ T5931] usb 3-1: Manufacturer: syz [ 365.132857][ T5931] usb 3-1: SerialNumber: syz [ 366.015215][ T8363] loop1: detected capacity change from 0 to 64 [ 366.016956][ T5931] usb 3-1: config 0 descriptor?? [ 366.031442][ T5931] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 366.039075][ T5931] uvcvideo 3-1:0.31: No valid video chain found. [ 366.703465][ T8380] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 367.398221][ T5931] IPVS: starting estimator thread 0... [ 367.487738][ T5863] usb 3-1: USB disconnect, device number 4 [ 367.594865][ T8382] IPVS: using max 41 ests per chain, 98400 per kthread [ 367.857496][ T8384] loop1: detected capacity change from 0 to 40427 [ 367.878301][ T8384] F2FS-fs (loop1): invalid crc value [ 367.964721][ T8384] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 367.974604][ T8384] F2FS-fs (loop1): Start checkpoint disabled! [ 367.990835][ T8384] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 368.001344][ T8384] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 369.150737][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 369.325063][ T8397] loop3: detected capacity change from 0 to 1024 [ 369.576652][ T1001] kworker/u8:6: attempt to access beyond end of device [ 369.576652][ T1001] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 369.595362][ T1001] CPU: 1 UID: 0 PID: 1001 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 369.595388][ T1001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 369.595399][ T1001] Workqueue: writeback wb_workfn (flush-7:1) [ 369.595435][ T1001] Call Trace: [ 369.595443][ T1001] [ 369.595451][ T1001] dump_stack_lvl+0xe8/0x150 [ 369.595479][ T1001] f2fs_handle_critical_error+0x37c/0x540 [ 369.595514][ T1001] f2fs_write_end_io+0xcdb/0xff0 [ 369.595553][ T1001] __submit_merged_bio+0x256/0x700 [ 369.595587][ T1001] __submit_merged_write_cond+0x3c9/0x4e0 [ 369.595621][ T1001] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 369.595671][ T1001] f2fs_write_data_pages+0x2975/0x35e0 [ 369.595690][ T1001] ? unwind_next_frame+0xa5/0x23c0 [ 369.595714][ T1001] ? lock_release+0x4b/0x3d0 [ 369.595769][ T1001] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 369.595802][ T1001] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 369.595856][ T1001] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 369.595915][ T1001] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 369.595937][ T1001] do_writepages+0x32e/0x550 [ 369.595968][ T1001] ? reacquire_held_locks+0x104/0x190 [ 369.595992][ T1001] ? writeback_sb_inodes+0x43d/0x19a0 [ 369.596018][ T1001] __writeback_single_inode+0x133/0x11a0 [ 369.596042][ T1001] ? do_raw_spin_unlock+0xf5/0x210 [ 369.596064][ T1001] writeback_sb_inodes+0x944/0x19a0 [ 369.596092][ T1001] ? ret_from_fork_asm+0x1a/0x30 [ 369.596134][ T1001] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 369.596154][ T1001] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.596212][ T1001] ? rcu_is_watching+0x15/0xb0 [ 369.596246][ T1001] wb_writeback+0x456/0xb70 [ 369.596271][ T1001] ? queue_io+0x2b1/0x4a0 [ 369.596307][ T1001] ? __pfx_wb_writeback+0x10/0x10 [ 369.596326][ T1001] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.596360][ T1001] wb_workfn+0x414/0xf50 [ 369.596381][ T1001] ? look_up_lock_class+0x57/0x110 [ 369.596420][ T1001] ? __pfx_wb_workfn+0x10/0x10 [ 369.596443][ T1001] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.596464][ T1001] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 369.596503][ T1001] ? process_one_work+0x87c/0x1650 [ 369.596525][ T1001] process_one_work+0x949/0x1650 [ 369.596569][ T1001] ? __pfx_process_one_work+0x10/0x10 [ 369.596589][ T1001] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.596624][ T1001] worker_thread+0xb46/0x1140 [ 369.596674][ T1001] kthread+0x388/0x470 [ 369.596692][ T1001] ? __pfx_worker_thread+0x10/0x10 [ 369.596713][ T1001] ? __pfx_kthread+0x10/0x10 [ 369.596732][ T1001] ret_from_fork+0x51e/0xb90 [ 369.596758][ T1001] ? __pfx_ret_from_fork+0x10/0x10 [ 369.596779][ T1001] ? __switch_to+0xc7d/0x1450 [ 369.596804][ T1001] ? __pfx_kthread+0x10/0x10 [ 369.596823][ T1001] ret_from_fork_asm+0x1a/0x30 [ 369.596865][ T1001] [ 369.596894][ T1001] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 371.762170][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 372.630333][ T8414] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 372.737452][ T8420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 372.832601][ T8417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.842929][ T8417] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.852318][ T8417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.864082][ T8417] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 372.874038][ T8417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.777002][ T8437] loop3: detected capacity change from 0 to 64 [ 374.852827][ T91] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 375.718992][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 375.725159][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 375.725188][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.731341][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 375.743615][ T91] usb 3-1: Using ep0 maxpacket: 8 [ 375.783474][ T91] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 375.922791][ T91] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.944704][ T91] usb 3-1: config 0 has no interface number 0 [ 376.972597][ T91] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 376.982587][ T8448] loop4: detected capacity change from 0 to 1024 [ 376.983439][ T8448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.149473][ T8449] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 377.413702][ T8448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 377.453315][ T8448] System zones: 0-1, 3-36 [ 377.463573][ T91] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.480840][ T91] usb 3-1: Product: syz [ 377.507574][ T8448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.513618][ T8453] loop3: detected capacity change from 0 to 4096 [ 377.525848][ T91] usb 3-1: Manufacturer: syz [ 377.534343][ T91] usb 3-1: SerialNumber: syz [ 377.556950][ T91] usb 3-1: config 0 descriptor?? [ 377.557974][ T8453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.565635][ T91] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 377.585349][ T91] uvcvideo 3-1:0.31: No valid video chain found. [ 377.632678][ T5822] usb 3-1: USB disconnect, device number 5 [ 379.324467][ T8452] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set [ 380.602458][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.443132][ T8491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.713141][ T8494] loop0: detected capacity change from 0 to 512 [ 382.857564][ T8494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.942754][ T8494] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.885221][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.155211][ T8519] loop3: detected capacity change from 0 to 1024 [ 384.170964][ T5863] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 384.358230][ T7052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.474945][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 384.482767][ T5863] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 384.495458][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.530579][ T5822] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 384.552831][ T5863] usb 2-1: config 0 has no interface number 0 [ 385.009894][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 385.024141][ T8530] hfsplus: xattr searching failed [ 385.039219][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.047446][ T5863] usb 2-1: Product: syz [ 385.051635][ T5863] usb 2-1: Manufacturer: syz [ 385.128052][ T5863] usb 2-1: SerialNumber: syz [ 385.139101][ T5863] usb 2-1: config 0 descriptor?? [ 385.148689][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 385.165185][ T5822] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 385.179331][ T141] hfsplus: bad catalog file entry [ 385.191088][ T141] hfsplus: b-tree write err: -5, ino 3 [ 385.193805][ T5863] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 385.245077][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.392934][ T5863] uvcvideo 2-1:0.31: No valid video chain found. [ 385.399949][ T5822] usb 5-1: config 0 has no interface number 0 [ 386.203840][ T8542] loop1: detected capacity change from 0 to 32768 [ 386.317656][ T8542] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 386.641689][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 386.802836][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.818868][ T8542] XFS (loop1): Ending clean mount [ 386.828905][ T8542] XFS (loop1): Quotacheck needed: Please wait. [ 386.842789][ T5822] usb 5-1: Product: syz [ 386.847055][ T5822] usb 5-1: Manufacturer: syz [ 386.852291][ T5822] usb 5-1: SerialNumber: syz [ 387.425407][ T5822] usb 5-1: config 0 descriptor?? [ 387.441998][ T8542] XFS (loop1): Quotacheck: Done. [ 387.522462][ T5931] usb 2-1: USB disconnect, device number 3 [ 387.569697][ T5818] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 387.711176][ T5822] usb 5-1: can't set config #0, error -71 [ 387.784042][ T5822] usb 5-1: USB disconnect, device number 3 [ 388.146305][ T8564] loop0: detected capacity change from 0 to 512 [ 388.535759][ T8564] EXT4-fs: test_dummy_encryption requires encrypt feature [ 389.528002][ T8574] trusted_key: encrypted_key: insufficient parameters specified [ 390.120279][ T8576] loop3: detected capacity change from 0 to 256 [ 390.184132][ T5863] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 391.215428][ T5863] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 391.231484][ T5863] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.261427][ T8586] vivid-003: disconnect [ 391.392986][ T8589] loop0: detected capacity change from 0 to 64 [ 391.418331][ T5863] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 391.449714][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.571409][ T5863] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 391.639131][ T8577] vivid-003: reconnect [ 391.654141][ T5822] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 391.674996][ T30] audit: type=1800 audit(1770918876.891:7): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.530" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 391.885535][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.115879][ T8593] syz.0.530: attempt to access beyond end of device [ 392.115879][ T8593] loop0: rw=8423425, sector=63, nr_sectors = 6 limit=64 [ 392.130299][ T8593] syz.0.530: attempt to access beyond end of device [ 392.130299][ T8593] loop0: rw=8423425, sector=72, nr_sectors = 2 limit=64 [ 392.306348][ T8591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.312939][ T8591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.320217][ T8591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.327541][ T8591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.333722][ T8591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.449813][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.460237][ T5822] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.469358][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.477501][ T5822] usb 3-1: SerialNumber: syz [ 392.578227][ T8598] loop3: detected capacity change from 0 to 512 [ 392.603741][ T8598] EXT4-fs: Ignoring removed orlov option [ 392.609446][ T8598] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.675461][ T8598] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.531: corrupted in-inode xattr: e_value size too large [ 392.708296][ T8598] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 392.709892][ T8598] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.531: couldn't read orphan inode 15 (err -117) [ 392.719163][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 392.719187][ C1] EXT4-fs (loop3): initial error at time 1770918877: ext4_iget_extra_inode:5025: inode 15 [ 392.719217][ C1] EXT4-fs (loop3): last error at time 1770918877: ext4_iget_extra_inode:5025: inode 15 [ 392.792789][ T5822] usb 3-1: invalid UAC_HEADER (v1) [ 392.804740][ T8598] loop3: lost filesystem error report for type 5 error -117 [ 392.818032][ T8598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.851643][ T5822] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 392.913580][ T5822] usb 3-1: USB disconnect, device number 6 [ 392.998262][ T7504] udevd[7504]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.220766][ T5887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 393.856940][ T5863] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 393.881640][ T5820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.892719][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 393.923668][ T5887] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 394.878085][ T8610] loop2: detected capacity change from 0 to 4096 [ 395.038771][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.039490][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.044860][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 395.051051][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 395.076125][ T8610] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 395.104372][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.135549][ T5887] usb 1-1: config 0 has no interface number 0 [ 395.144193][ T8610] ntfs3(loop2): Failed to load $Secure (-22). [ 395.151906][ T8610] ntfs3(loop2): Failed to initialize $Secure (-22). [ 395.163928][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 395.261983][ T5863] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 395.270102][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.296840][ T5863] usb 2-1: config 0 has no interface number 0 [ 395.303278][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 395.312813][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.342151][ T5887] usb 1-1: Product: syz [ 395.356836][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 395.368520][ T5887] usb 1-1: Manufacturer: syz [ 395.395404][ T5887] usb 1-1: SerialNumber: syz [ 395.401103][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.409283][ T5863] usb 2-1: Product: syz [ 395.417831][ T5887] usb 1-1: config 0 descriptor?? [ 395.431388][ T5863] usb 2-1: Manufacturer: syz [ 395.436625][ T5863] usb 2-1: SerialNumber: syz [ 395.444487][ T5887] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 395.451788][ T5887] uvcvideo 1-1:0.31: No valid video chain found. [ 395.461383][ T5863] usb 2-1: config 0 descriptor?? [ 395.470041][ T5863] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 395.482581][ T5863] uvcvideo 2-1:0.31: No valid video chain found. [ 396.462719][ T8618] loop0: detected capacity change from 0 to 32768 [ 396.480206][ T8619] loop1: detected capacity change from 0 to 32768 [ 396.547819][ T5931] usb 5-1: USB disconnect, device number 4 [ 396.601483][ T8618] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 396.602172][ T8619] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 396.664007][ T8618] XFS (loop0): Ending clean mount [ 396.672906][ T8618] XFS (loop0): Quotacheck needed: Please wait. [ 396.733518][ T8618] XFS (loop0): Quotacheck: Done. [ 396.736912][ T8619] XFS (loop1): Ending clean mount [ 396.748193][ T8619] XFS (loop1): Quotacheck needed: Please wait. [ 396.905696][ T8619] XFS (loop1): Quotacheck: Done. [ 396.923210][ T8619] kAFS: No cell specified [ 397.544732][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.571219][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.916346][ T7052] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 397.917101][ T5931] usb 1-1: USB disconnect, device number 3 [ 398.503683][ T5863] usb 2-1: USB disconnect, device number 4 [ 398.557637][ T5818] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 399.755268][ T8659] overlayfs: failed to resolve './file2': -2 [ 400.367527][ T8664] loop1: detected capacity change from 0 to 128 [ 400.374766][ T8664] adfs: Bad value for 'gid' [ 400.379291][ T8664] adfs: Bad value for 'gid' [ 400.520212][ T8665] loop1: detected capacity change from 0 to 128 [ 401.044557][ T8665] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 401.066526][ T8665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.734682][ T8673] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 402.842876][ T8678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.504486][ T8674] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.511368][ T8674] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.517511][ T8674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.523590][ T8674] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.529789][ T8674] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.707982][ T8675] netlink: 'syz.3.544': attribute type 21 has an invalid length. [ 405.716104][ T8675] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.373245][ T979] libceph: connect (1)[c::]:6789 error -97 [ 406.423239][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 406.436367][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 406.494179][ T8699] ceph: No mds server is up or the cluster is laggy [ 406.636777][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 406.636820][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 406.643462][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.643490][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.002809][ T8709] loop1: detected capacity change from 0 to 2048 [ 407.050875][ T8709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.198489][ T8717] loop4: detected capacity change from 0 to 64 [ 407.243043][ T8717] hfs: get root inode failed [ 407.303471][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 408.438839][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 408.943950][ T8720] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 408.955264][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 408.962157][ T5934] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 408.970468][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.980751][ T5934] usb 3-1: config 0 has no interface number 0 [ 409.421289][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 409.438146][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.446347][ T5934] usb 3-1: Product: syz [ 409.471119][ T5934] usb 3-1: Manufacturer: syz [ 409.479990][ T5934] usb 3-1: SerialNumber: syz [ 409.505623][ T5934] usb 3-1: config 0 descriptor?? [ 409.538729][ T5934] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 409.570344][ T5934] uvcvideo 3-1:0.31: No valid video chain found. [ 409.841354][ T8735] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 410.026549][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 410.704790][ T8738] loop2: detected capacity change from 0 to 32768 [ 411.078591][ T8738] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 411.249090][ T8738] XFS (loop2): Ending clean mount [ 412.301420][ T8750] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 412.477237][ T8751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 412.483960][ T8751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 412.490162][ T8751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.496331][ T8751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 412.503223][ T8751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 412.503582][ T8738] XFS (loop2): Quotacheck needed: Please wait. [ 412.616521][ T8738] XFS (loop2): Quotacheck: Done. [ 412.677868][ T5863] usb 3-1: USB disconnect, device number 7 [ 412.868466][ T5830] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.366616][ T8759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.376816][ T8759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.383791][ T8759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.391062][ T8759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 414.398387][ T8759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.579947][ T8771] loop1: detected capacity change from 0 to 8192 [ 416.942703][ T8779] infiniband: Added to hash: ib_dev=ffff88801d7cc000 (0)() ndev=ffff888076e92000 (38)(lo) [ 416.952971][ T8779] lo speed is unknown, defaulting to 1000 [ 416.960018][ T8779] lo speed is unknown, defaulting to 1000 [ 416.967983][ T8779] lo speed is unknown, defaulting to 1000 [ 416.996331][ T8779] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 417.261107][ T8779] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 417.513511][ T8779] lo speed is unknown, defaulting to 1000 [ 417.537803][ T8779] lo speed is unknown, defaulting to 1000 [ 417.705413][ T8779] lo speed is unknown, defaulting to 1000 [ 417.724137][ T8779] lo speed is unknown, defaulting to 1000 [ 417.747098][ T8779] lo speed is unknown, defaulting to 1000 [ 417.755381][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 417.761405][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 417.767465][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 417.773464][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 417.781376][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 418.100066][ T8785] loop2: detected capacity change from 0 to 1024 [ 418.165261][ T8785] EXT4-fs: inline encryption not supported [ 418.171120][ T8785] EXT4-fs: Ignoring removed i_version option [ 418.180842][ T30] audit: type=1326 audit(1770918901.688:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.4.565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe954d9bf79 code=0x0 [ 418.271701][ T8785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.217584][ T8785] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.564: Allocating blocks 497-513 which overlap fs metadata [ 419.245346][ T8785] EXT4-fs (loop2): pa ffff88807e1aa488: logic 256, phys. 385, len 8 [ 419.253773][ T8785] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 1 [ 419.732291][ T8801] loop3: detected capacity change from 0 to 128 [ 420.110983][ T8801] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.131595][ T8801] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.231733][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 420.261160][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.723530][ T5820] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.187706][ T8816] kernel profiling enabled (shift: 9) [ 421.344462][ T8807] bridge2: port 1(veth3) entered blocking state [ 421.822851][ T8807] bridge2: port 1(veth3) entered disabled state [ 422.000831][ T8807] veth3: entered allmulticast mode [ 422.222432][ T8807] veth3: entered promiscuous mode [ 422.267526][ T8804] bridge2: port 2(veth0_to_bond) entered blocking state [ 422.281245][ T8804] bridge2: port 2(veth0_to_bond) entered disabled state [ 422.314133][ T8804] veth0_to_bond: entered allmulticast mode [ 422.335188][ T8804] veth0_to_bond: entered promiscuous mode [ 422.480820][ T8832] fuse: Unknown parameter 'group00000000000000000000' [ 422.591862][ T5829] Bluetooth: hci4: unexpected subevent 0x01 length: 37 > 18 [ 423.053421][ T8809] bridge2: port 3(veth5) entered blocking state [ 423.071490][ T8809] bridge2: port 3(veth5) entered disabled state [ 423.088246][ T8809] veth5: entered allmulticast mode [ 423.148140][ T8809] veth5: entered promiscuous mode [ 423.271696][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 423.324824][ T8835] loop0: detected capacity change from 0 to 16 [ 423.331935][ T8835] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 423.703609][ T8843] loop2: detected capacity change from 0 to 512 [ 424.289692][ T8844] syz.4.577 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 424.763534][ T8843] EXT4-fs (loop2): orphan cleanup on readonly fs [ 424.770332][ T8843] Quota error (device loop2): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 424.781220][ T8843] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 424.801773][ T8843] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 424.822012][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 424.834337][ T8843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.576: bg 0: block 248: padding at end of block bitmap is not set [ 424.848918][ T8843] loop2: lost filesystem error report for type 5 error -117 [ 424.853514][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 424.867302][ C1] EXT4-fs (loop2): last error at time 1770918907: ext4_validate_block_bitmap:441 [ 424.877561][ T8843] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 424.886297][ T8843] loop2: lost filesystem error report for type 5 error -117 [ 424.896945][ T8843] EXT4-fs (loop2): 1 orphan inode deleted [ 424.910893][ T8843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.926882][ T8843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.806613][ T8852] loop2: detected capacity change from 0 to 1024 [ 425.827450][ T5833] ------------[ cut here ]------------ [ 425.833120][ T5833] refcnt < 0 [ 425.833146][ T5833] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u9:6/5833 [ 425.847120][ T5833] Modules linked in: [ 425.851543][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.863573][ T5833] Tainted: [L]=SOFTLOCKUP [ 425.867905][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 425.878052][ T5833] Workqueue: hci4 hci_conn_timeout [ 425.883278][ T5833] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 425.888839][ T5833] Code: 48 89 df e8 83 99 09 00 eb 07 e8 1c b6 24 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 02 b6 24 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 425.909361][ T5833] RSP: 0018:ffffc90004007b10 EFLAGS: 00010293 [ 425.916193][ T5833] RAX: ffffffff8aa0ea7e RBX: ffff88802dcec000 RCX: ffff888075863c80 [ 425.924280][ T5833] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 425.932254][ T5833] RBP: 00000000ffffffff R08: ffff88802dcec013 R09: 1ffff11005b9d802 [ 425.940654][ T5833] R10: dffffc0000000000 R11: ffffed1005b9d803 R12: dffffc0000000000 [ 425.948751][ T5833] R13: 1ffff1100eb0c820 R14: ffff88802dceca40 R15: ffff88802dcec010 [ 425.956829][ T5833] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 425.965867][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.972497][ T5833] CR2: 00007f20d7a7fc00 CR3: 000000004f9ac000 CR4: 00000000003526f0 [ 425.980612][ T5833] Call Trace: [ 425.983907][ T5833] [ 425.986889][ T5833] ? process_one_work+0x87c/0x1650 [ 425.992020][ T5833] process_one_work+0x949/0x1650 [ 425.997020][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 426.002466][ T5833] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.007530][ T5833] worker_thread+0xb46/0x1140 [ 426.012337][ T5833] kthread+0x388/0x470 [ 426.017123][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 426.023159][ T5833] ? __pfx_kthread+0x10/0x10 [ 426.027868][ T5833] ret_from_fork+0x51e/0xb90 [ 426.032573][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 426.037721][ T5833] ? __switch_to+0xc7d/0x1450 [ 426.042506][ T5833] ? __pfx_kthread+0x10/0x10 [ 426.047143][ T5833] ret_from_fork_asm+0x1a/0x30 [ 426.052011][ T5833] [ 426.055145][ T5833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 426.062434][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.073477][ T5833] Tainted: [L]=SOFTLOCKUP [ 426.077799][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 426.087870][ T5833] Workqueue: hci4 hci_conn_timeout [ 426.093012][ T5833] Call Trace: [ 426.096294][ T5833] [ 426.099224][ T5833] vpanic+0x56c/0xa60 [ 426.103219][ T5833] ? __pfx__printk+0x10/0x10 [ 426.107819][ T5833] ? __pfx_vpanic+0x10/0x10 [ 426.112329][ T5833] ? is_bpf_text_address+0x26/0x2b0 [ 426.117539][ T5833] panic+0xc5/0xd0 [ 426.121274][ T5833] ? __pfx_panic+0x10/0x10 [ 426.125705][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 426.130657][ T5833] __warn+0x315/0x4f0 [ 426.134738][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 426.139685][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 426.144635][ T5833] __report_bug+0x29a/0x540 [ 426.149239][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 426.154185][ T5833] ? __pfx___report_bug+0x10/0x10 [ 426.159219][ T5833] ? irqentry_exit+0x59e/0x620 [ 426.163983][ T5833] ? rcu_is_watching+0x15/0xb0 [ 426.168759][ T5833] ? hci_conn_timeout+0x101/0x2c0 [ 426.173790][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 426.178745][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 426.183691][ T5833] report_bug+0x16a/0x220 [ 426.188031][ T5833] ? hci_conn_timeout+0xff/0x2c0 [ 426.192973][ T5833] ? hci_conn_timeout+0x101/0x2c0 [ 426.198007][ T5833] handle_bug+0x98/0x200 [ 426.202254][ T5833] exc_invalid_op+0x1a/0x50 [ 426.206760][ T5833] asm_exc_invalid_op+0x1a/0x20 [ 426.211610][ T5833] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 426.217163][ T5833] Code: 48 89 df e8 83 99 09 00 eb 07 e8 1c b6 24 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 02 b6 24 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 426.236771][ T5833] RSP: 0018:ffffc90004007b10 EFLAGS: 00010293 [ 426.242851][ T5833] RAX: ffffffff8aa0ea7e RBX: ffff88802dcec000 RCX: ffff888075863c80 [ 426.250831][ T5833] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 426.258803][ T5833] RBP: 00000000ffffffff R08: ffff88802dcec013 R09: 1ffff11005b9d802 [ 426.266777][ T5833] R10: dffffc0000000000 R11: ffffed1005b9d803 R12: dffffc0000000000 [ 426.274750][ T5833] R13: 1ffff1100eb0c820 R14: ffff88802dceca40 R15: ffff88802dcec010 [ 426.282745][ T5833] ? hci_conn_timeout+0xfe/0x2c0 [ 426.287716][ T5833] ? process_one_work+0x87c/0x1650 [ 426.292839][ T5833] process_one_work+0x949/0x1650 [ 426.297817][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 426.303206][ T5833] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.308253][ T5833] worker_thread+0xb46/0x1140 [ 426.312961][ T5833] kthread+0x388/0x470 [ 426.317044][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 426.322159][ T5833] ? __pfx_kthread+0x10/0x10 [ 426.326757][ T5833] ret_from_fork+0x51e/0xb90 [ 426.331363][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 426.336479][ T5833] ? __switch_to+0xc7d/0x1450 [ 426.341175][ T5833] ? __pfx_kthread+0x10/0x10 [ 426.345769][ T5833] ret_from_fork_asm+0x1a/0x30 [ 426.350566][ T5833] [ 426.353909][ T5833] Kernel Offset: disabled [ 426.358215][ T5833] Rebooting in 86400 seconds..