last executing test programs: 9m47.296793842s ago: executing program 3 (id=4): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x8, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/39, 0x27}, 0x2}], 0x1, 0x22102, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)=0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = userfaultfd(0x80801) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000200)={0x80000000}) close_range(r1, 0xffffffffffffffff, 0x0) 9m43.836185518s ago: executing program 3 (id=6): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r0, 0x0, 0x0) 9m42.8331369s ago: executing program 3 (id=8): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r0, 0x0, 0x0) 9m41.924147059s ago: executing program 3 (id=9): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r1, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 9m40.063991557s ago: executing program 3 (id=11): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x8000, 0x1, 0x61}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={'bond_slave_1\x00', {0x2, 0x4e21, @broadcast}}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) write$binfmt_elf64(r6, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 9m37.894640265s ago: executing program 3 (id=12): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") symlink(&(0x7f0000000040)='.\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) 9m37.458870954s ago: executing program 1 (id=2): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x8000, 0x1, 0x61}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={'bond_slave_1\x00', {0x2, 0x4e21, @broadcast}}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) 9m33.693103568s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 9m22.192910437s ago: executing program 32 (id=12): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$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") symlink(&(0x7f0000000040)='.\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) 9m18.490974928s ago: executing program 33 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m17.096333551s ago: executing program 0 (id=339): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) 5m14.369940433s ago: executing program 0 (id=341): io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa939) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0xc}) ioctl$FIOCLEX(r0, 0x5451) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='h\x00', 0x800, &(0x7f0000000080)={@align=0xfffffffffffffffb, {0x9, 0x8, 0x0, 0x6}}, 0x7e, &(0x7f00000000c0), &(0x7f0000000100)=0x5e2}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000180)={0xffffffff00000000, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, r3, 0x0, 0x2, 0x2dee, 0xfffff000, 0xd, 0x4, 0x0, 0x5b, 0x7fff, 0xca}) r4 = dup2(r0, r1) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000280)) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = dup(r0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000001300)=0x3) clock_gettime(0x0, &(0x7f0000007d80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007bc0)=[{{&(0x7f0000001340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004600)=[{&(0x7f00000013c0)=""/231, 0xe7}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/37, 0x25}, {&(0x7f0000002500)=""/146, 0x92}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/13, 0xd}], 0x7, &(0x7f0000004680)=""/236, 0xec}, 0x4}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004780)=""/159, 0x9f}, {&(0x7f0000004840)=""/32, 0x20}, {&(0x7f0000004880)=""/203, 0xcb}, {&(0x7f0000004980)=""/166, 0xa6}, {&(0x7f0000004a40)=""/115, 0x73}, {&(0x7f0000004ac0)=""/117, 0x75}, {&(0x7f0000004b40)=""/130, 0x82}], 0x7, &(0x7f0000004c80)=""/19, 0x13}, 0x6}, {{&(0x7f0000004cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004d40)=""/240, 0xf0}, {&(0x7f0000004e40)=""/61, 0x3d}, {&(0x7f0000004e80)=""/217, 0xd9}, {&(0x7f0000004f80)=""/70, 0x46}], 0x4, &(0x7f0000005040)=""/19, 0x13}, 0x9}, {{&(0x7f0000005080)=@phonet, 0x80, &(0x7f0000005100), 0x0, &(0x7f0000005140)=""/125, 0x7d}, 0x1}, {{&(0x7f00000051c0)=@generic, 0x80, &(0x7f0000006540)=[{&(0x7f0000005240)=""/58, 0x3a}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/192, 0xc0}, {&(0x7f0000006340)=""/148, 0x94}, {0xfffffffffffffffe}, {&(0x7f0000006400)=""/23, 0x17}, {&(0x7f0000006440)=""/234, 0xea}], 0x7, &(0x7f00000065c0)=""/153, 0x99}, 0x7eb3}, {{&(0x7f0000006680)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000007840)=[{&(0x7f0000006700)}, {&(0x7f0000006740)=""/200, 0xc8}, {&(0x7f0000006840)=""/4096, 0x1000}], 0x3}, 0x6}, {{&(0x7f0000007880)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007900)=""/95, 0x5f}, {&(0x7f0000007980)=""/203, 0xcb}], 0x2, &(0x7f0000007ac0)=""/196, 0xc4}, 0xfffffffc}], 0x7, 0x2040, &(0x7f0000007dc0)={r6, r7+60000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007e40), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000007f00)={&(0x7f0000007e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007e80)={0x2c, r9, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1080}, 0x4) bind$rds(r8, &(0x7f0000007f40)={0x2, 0x4e21, @local}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000007f80)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000008000), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r10, &(0x7f00000080c0)={&(0x7f0000007fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008080)={&(0x7f0000008040)={0x3c, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8804}, 0x4800) futex(&(0x7f0000008100)=0x2, 0x9, 0x2, &(0x7f0000008140)={0x0, 0x989680}, &(0x7f0000008180)=0x1, 0x2) r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000081c0), 0x20000, 0x0) ioctl$PIO_UNISCRNMAP(r12, 0x4b6a, &(0x7f0000008200)="68f38158e130a808a363ea01a7af8c893fb0dc2e542f69b55c6fc756decddf494709068ce9d82f55599d8e77572c8c2c7d5ee17ea4b1e951c4fe3bec5df208dcb6903a870247d695ac383deb2ce6f31c6fe6fc6b8f39d23e18dd8e43bd0f69dff70f9e7e325b09eb896e91e8d3f1ced0d2cc8cb922a9744ca82c44bd6a2763569c7f8cfa19c154c979a97e20bc2a1db0a2de97d7e890a7884566a9e579c0c2ed5637983872b3117752d94b2ac474495102176237e66cc7611267e3795dcceb89d57eac75ff4e9a9db07c") writev(r12, &(0x7f00000095c0)=[{&(0x7f0000008300)="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", 0xfa}, {&(0x7f0000008400)="066b9c5fbf0e9a967cf22d38acc605e13316cdb5d9848571458c0008292c26ba5d4259f46ac7899111576b81f6dd22d81f9d0ff9ee88421d99892bbea35f8d2456d26f2d7d979aa6c90ddbafad33e58c5cecfea4d895029bcb4315d554d624700376", 0x62}, {&(0x7f0000008480)="f93bff67bf2a98e4cd2cc6ffeb6ef73d243ae335b7b703fb78ff536c92cd7a160b90869566a91bfae024f98cd37e92df4b58bbbe6a354e9113d826ae5df5f27e7f4408b91567587950ea554d33a05dae2608b658fdb53f492cea2fc110fd", 0x5e}, {&(0x7f0000008500)="d351ac0ee4fddf1114d2f6bcf5bc8650c08ccde1a728f0e9d987d424fe1390f76c4dd0978ce3542e9a0cfbc0a97d358853e2806d169eda97ad8aa9219c0d1e47f590270f859e73b92e3cdbafe9bd1cea2c4a395b8a04203c6e8d2699c0b22f994773c87d25397add3e9d0d378e84b9de11da9429baa36763a483ea87818857ba74ccf31835a1bef2f92bd5d334905d41c08211f75fe8cd454a70f65735109ad9208f5913220d07dbce02ac8813", 0xad}, {&(0x7f00000085c0)="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", 0x1000}], 0x5) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000009680)={r2, 0x80000, 0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000096c0)=@o_path={&(0x7f0000009640)='./file0\x00', 0xffffffffffffffff, 0x4000, r13}, 0x18) 5m11.578243099s ago: executing program 0 (id=346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ffffffffffffffff"}, 0x28) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x3, 0x4) (async, rerun: 32) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x10000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000003c0)={{r0}, "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"}) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, r2, &(0x7f0000000380)='./file0\x00') (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000040)="d0faf9343886bc0a95c12b6be9e7003e54dc2c0a7c347990208d7b8b0b95e985f3dc5adb598e428772c9b1a2a77ecb50a81c13e389adef211d7d49cf0ee2d16c7fc37ec040e9f45a6640c286e478c4942323f1ce86c66873359a17608cd1ab3a8201a26815847c6dc4bbd4b76632129d8e15c319fb30a1761ad9e05646bcd5ae4c9abd6bb0b91681a4c5c8dd152952786a480b2a771bee955baec82361f6d5627d5abbdff7bccf011ea53eeb44b19eeb3665ce094731436d8873ce3c587306722771fcbf0c256a1f3226ad7d", &(0x7f0000000140)=""/99}, 0x20) 5m11.490261371s ago: executing program 0 (id=347): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x7, 0x0, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000100)={0x0, 0x7, 0x41b, {0x1}, 0x7, 0x4}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x2}, 0x28) 5m9.977917544s ago: executing program 0 (id=350): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) open(0x0, 0x803c1, 0x38) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) fchdir(r0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file1\x00', 0x104000, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000080)='./cgroup/syz1\x00', 0xa00, &(0x7f00000000c0)={@_ha_fsid={[0x800, 0x3]}, {0x7, 0x3, 0xfffffff5, 0x7}}, 0x4c, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x8}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 5m7.343230387s ago: executing program 0 (id=354): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x1, 0xf0}, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r2, 0x0, {}, 0x1}, 0x18) socket$rds(0x15, 0x5, 0x0) sendfile(r1, r0, 0x0, 0x1000000000000a) 4m51.525881992s ago: executing program 34 (id=354): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x1, 0xf0}, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r2, 0x0, {}, 0x1}, 0x18) socket$rds(0x15, 0x5, 0x0) sendfile(r1, r0, 0x0, 0x1000000000000a) 6.615070992s ago: executing program 2 (id=789): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r4, 0x1, 0xfffffffd, 0x4, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x1, 0x80000000, 0xd0c, 0x0, 0x4}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002400)={0xc, {"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", 0x1000}}, 0x1006) 5.694846591s ago: executing program 2 (id=791): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000280)={0xff, @loopback, 0x4e21, 0x0, 'sh\x00', 0x1, 0x9, 0x3f}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000340)={0x3, "ee8a19748ba5f77643b2a255e396c51935d5ebd4e32d495901d4ab9ac16841ea", 0x4, 0x9, 0x9, 0x10, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "2b47019676fb912bfb3979bb82d94c42da0498ad601e4b92fe2c62ba4d6bdd44d280dada5a5650e1edaecb4fd923a6ded85d084df9d5e7bffddda34d04e5cdb51ef2fe8703b3988bb47989823d53b49308c5d2977c173d08535eaf56e740391766d74589e9806165ef3d4085755bbaa162e74e4dc541aa6004761f6a43e20556918bb04da9070b3cc89472820459902b3342031e1571d32a8b78f2da2a8e73e26af9389dced48cdcaf0a714363789e4acd9373813e2729986552c1cdbeabd3a03d7684ead62926c387b1552066f9751c9f0fa935afda36cf2fb30bba0cb8007f3bd1fea86ef3b7f8434e250f2a09e6a3b569c8c0519adc93f8b909470f39920551618ecfe04ff0cc4b1ed29eee56dcd976a79181e4d3218b51150ce595c25371293ec4d05e4aa411ef3b190554c6a2e06ee6374d80a3c511603a8a20b75f8075d0d83d31b86be7d2d785e6d60c07b515fe04bd55e20bcfe799a3e66c93744c52d0d34880ab42354859d5d1a9d0d65b52a0819b19c2d7f7a285d401825bf40ccc355b1aecb100c3f86c71607b00c59c7a8c0d8ae35a0a0e20f189568cb1a386c9d799f2c5ba6cce4e6ae0dce69f7391a4f4b011b27ad89ecaca95b90be9e517d39fa47ab5d08fd75233c1b0b604c169ebdc29efe713e9ecd551fc383be78cc5afccee1d8bb067e64054734b61c99f1055748b335ea261b9a6ccd1b3362a0c9d26c74bcda8e4d1efca7f614a61b8dfa2508a39f78901cf7ab2f15409f1da06432db0b50f00e16a77ceece0e315fc63c46cd418a1d259ba713bc5a26a49bdc202cf04e02149cf29c1f617f0898321ecf9d395f349e276480b42147d4dc1af6491e05cff9a33517437cb21125f6945e0b727576880a89ef6d53375bb901e14ae1a2dd27a5bf67012b8e4515023dba602d2e5293da914c199c0c0d610bf6461cd7bba6c8b948e96f395c39a7a0b93df65368f8eaa306fdcf87522ac1a36c427d98af77c3a3afa33dc3e8e070a1a2f66a4877abbeef23ff67befdcc9532cf3990918fb778d7799ee1f26b469c37f3c9578b8f8f2d00d32fc839171b9474e76f03d827a4eac2802322f3d68b03d1516aec9566bba3acc0bcf0d6a551c412f080d8c7fe0c60e23cdb328920263477470ea4f23e23d5aebbfda173aa781f89bf0cdfce2003ed3c010c511b3b489eab29453a365b839cca172e3abbcbab0203899bdb4f14a3423c2293166145760e61c3c188c3e0888ee817f0772ff89e02df8f42b9951e1661b39def34308c46e8ec1e4e5b68e88140ac7dc993523191fdb71db3a2677a3bd666e6180a96c9846bce6cb6c16e379bf29e1769a66da2f6781e79f082cb80662d72adbb21240cef87dc3079a822b2a791753fcd12a7ec362088d76237370bcd5d5daa440ba735b4e29cf2cb93583a5080270d1a3fd40183dc04f30e01c428f92e595c89fcbd1fc52962eedea82e2772b5f5fa3dad0f908fe6a48fffcc69df60f34ef9d9ba7609d16cdf733ca77785c0ab6f536b79ffde4ff9b835bfcaffef0d15ae69c26c0588f1acd5a648fde52568c713163717eb77f863d20dda0f1ca2c0306748544d3763c1cfa82f1785f047c842cadc4f8ac1906ab6ad8f6425bb9efbe97ee62ea7e40ec6ac342f457f00626f907ed939864"}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0xffff, 0x7, 0x202, 0x3, 0x9, 0x1000, 0x3ff, 0x0, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x77, 0x0, &(0x7f0000000080)="d2df03c3ff4f84e5fbb1cb4686dd", 0x0, 0x95b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 5.355582786s ago: executing program 2 (id=792): syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffff8, 0x900) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x20040004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000140), 0x0, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0xc2dcc000) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) wait4(0x0, 0x0, 0x8, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b52, 0x0) futex(&(0x7f0000000040)=0x2, 0xd, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0302f000000000000000fcff1300573a0a008d1fbc3b9f5f36a36a13ab7cf11e94a10780a2fbf87800e0fb9f775a0000000057306fc2470b60ba79c4fe25a3e15e91d7a2576b21acdb0a2c126ae401263da22da28c472717fee574feda30151386dbb2e77211bc721fd96976a7d356d6be7544f4a65de93aff13", @ANYRESHEX=r2, @ANYBLOB], 0x1c}}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r6, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x8, 0x4, r5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, r5}]) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0xfffff2d4, 0x200ffffe, 0x9, 0x10000, 0x59, "050000000000030000000000000800", 0x1, 0x802}) 4.252568194s ago: executing program 2 (id=793): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x200) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) ioctl$SNDCTL_TMR_START(r0, 0x5402) r3 = socket(0x29, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x7, 0x800, r1}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x800}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x6, 0x9, 0xaf]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x6f, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86b"}, &(0x7f0000000080)=0x77) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061115c0000000000850000001c0025009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0x980000, 0x1, 0xa97d, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x6, '\x00', @ptr}}) 4.093905401s ago: executing program 2 (id=794): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) 2.903445845s ago: executing program 2 (id=796): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000000c00)="fcd95193e128", 0x6}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x96, 0xd) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x8, &(0x7f00000000c0)=0x9, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r7 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0x7d, &(0x7f0000000400)={0x1, 0x1, 0x200, 0xbe, 0x2, 0x8, 0x401, 0x80, r9}, &(0x7f00000004c0)=0x20) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1a000}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) 2.759100548s ago: executing program 4 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x4005836, 0x8, 0x5, 0x9, 0x101, 0x6, 0x103c, 0x200000000006, 0x7, 0x32a, 0x1, 0x1, 0xd, 0x40000000009, 0x101, 0xefd4], 0x8080000, 0xb47427ba437e7df}) syz_usb_control_io$uac3(r2, &(0x7f00000000c0)={0x14, &(0x7f00000002c0)=ANY=[], 0x0}, 0x0) setsockopt$inet_tcp_int(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x8, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x40080) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) 2.003765932s ago: executing program 4 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x4000, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.889661194s ago: executing program 4 (id=799): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r5, 0xb97534d5fe9704cf, 0x70bd2d, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x247}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 1.121017689s ago: executing program 4 (id=800): syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffff8, 0x900) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000a004e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f6000000080001001c0000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x20040004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000140), 0x0, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0xc2dcc000) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) wait4(0x0, 0x0, 0x8, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b52, 0x0) futex(&(0x7f0000000040)=0x2, 0xd, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYBLOB="0302f000000000000000fcff1300573a0a008d1fbc3b9f5f36a36a13ab7cf11e94a10780a2fbf87800e0fb9f775a0000000057306fc2470b60ba79c4fe25a3e15e91d7a2576b21acdb0a2c126ae401263da22da28c472717fee574feda30151386dbb2e77211bc721fd96976a7d356d6be7544f4a65de93aff13", @ANYRESHEX=r2, @ANYBLOB], 0x1c}}, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) io_setup(0x2, &(0x7f0000000a00)=0x0) io_submit(r6, 0x1, &(0x7f0000000a40)=[&(0x7f0000000000)={0x0, 0x0, 0x22, 0x8, 0x4, r5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, r5}]) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000280)={0xfffff2d4, 0x200ffffe, 0x9, 0x10000, 0x59, "050000000000030000000000000800", 0x1, 0x802}) 100.812932ms ago: executing program 4 (id=801): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x200) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) ioctl$SNDCTL_TMR_START(r0, 0x5402) r3 = socket(0x29, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x7, 0x800, r1}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x800}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x6, 0x9, 0xaf]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x6f, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86b"}, &(0x7f0000000080)=0x77) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061115c0000000000850000001c0025009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0x980000, 0x1, 0xa97d, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x6, '\x00', @ptr}}) 0s ago: executing program 4 (id=802): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x6b1, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/82, 0x52) kernel console output (not intermixed with test programs): ota options ignored when QUOTA feature is enabled [ 467.440644][ T8498] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 467.446662][ T8498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 467.465289][ T8498] System zones: 0-2, 18-18, 34-34 [ 467.466380][ T8498] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 467.643400][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.187809][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'. [ 468.370372][ T8508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.384228][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.653301][ T8529] loop4: detected capacity change from 0 to 32768 [ 469.935740][ T8529] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 470.004752][ T8361] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.005126][ T8361] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.005374][ T8361] bridge_slave_0: entered allmulticast mode [ 470.008021][ T8361] bridge_slave_0: entered promiscuous mode [ 470.016183][ T8361] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.019668][ T8361] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.019946][ T8361] bridge_slave_1: entered allmulticast mode [ 470.061913][ T8361] bridge_slave_1: entered promiscuous mode [ 470.201504][ T8361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.210072][ T8361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.467001][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 470.840043][ T8361] team0: Port device team_slave_0 added [ 473.147651][ T8361] team0: Port device team_slave_1 added [ 473.616017][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.616029][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.616042][ T8361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.638756][ T8361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.638771][ T8361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.638792][ T8361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.012225][ T8361] hsr_slave_0: entered promiscuous mode [ 474.016541][ T8361] hsr_slave_1: entered promiscuous mode [ 474.215283][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 474.806142][ T8570] loop2: detected capacity change from 0 to 64 [ 475.696994][ T8106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.718660][ T8581] loop4: detected capacity change from 0 to 1024 [ 475.774342][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.712835][ T8592] geneve1: entered promiscuous mode [ 477.846946][ T8106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.997033][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.030541][ T8106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.075942][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.182411][ T8106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.283670][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.213423][ T8106] kthread_run failed with err -4 [ 481.630632][ T8644] loop4: detected capacity change from 0 to 128 [ 481.651109][ T8644] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 481.948382][ T8642] loop2: detected capacity change from 0 to 4096 [ 482.158421][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.224052][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 482.281459][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 482.284391][ T1248] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 482.322379][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.323126][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.566754][ T1248] usb 5-1: unable to get BOS descriptor or descriptor too short [ 482.567335][ T1248] usb 5-1: not running at top speed; connect to a high speed hub [ 482.568402][ T1248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.568451][ T1248] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.568476][ T1248] usb 5-1: config 1 interface 0 has no altsetting 0 [ 482.576555][ T1248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.576581][ T1248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.576597][ T1248] usb 5-1: Product: syz [ 482.576609][ T1248] usb 5-1: Manufacturer: syz [ 482.576620][ T1248] usb 5-1: SerialNumber: syz [ 482.709015][ T8642] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 482.758712][ T8642] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB [ 482.911798][ T1248] cdc_ether 5-1:1.0: GUID doesn't match [ 482.926179][ T1248] usb 5-1: USB disconnect, device number 20 [ 485.371464][ T5630] Bluetooth: hci3: command tx timeout [ 486.025628][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.067147][ T4926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.084211][ T4926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.096331][ T4926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.104052][ T4926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.602716][ T8710] loop2: detected capacity change from 0 to 512 [ 486.648647][ T8710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.684505][ T8710] netlink: 'syz.2.521': attribute type 48 has an invalid length. [ 486.820906][ T8710] 9p: Bad value for 'wfdno' [ 486.905014][ T8716] capability: warning: `syz.2.521' uses deprecated v2 capabilities in a way that may be insecure [ 487.381192][ T4926] Bluetooth: hci3: command tx timeout [ 487.381928][ T6513] bridge_slave_1: left allmulticast mode [ 487.381960][ T6513] bridge_slave_1: left promiscuous mode [ 487.525377][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.105457][ T6513] bridge_slave_0: left allmulticast mode [ 488.105570][ T6513] bridge_slave_0: left promiscuous mode [ 488.292879][ T4926] Bluetooth: hci1: command tx timeout [ 488.457533][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.402434][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.485403][ T4926] Bluetooth: hci3: command tx timeout [ 489.951709][ T5750] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 490.130980][ T5750] usb 5-1: Using ep0 maxpacket: 8 [ 490.134367][ T5750] usb 5-1: config 1 has an invalid interface number: 103 but max is 2 [ 490.134392][ T5750] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 490.134408][ T5750] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.134432][ T5750] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.134450][ T5750] usb 5-1: config 1 has no interface number 0 [ 490.134478][ T5750] usb 5-1: too many endpoints for config 1 interface 103 altsetting 205: 212, using maximum allowed: 30 [ 490.134514][ T5750] usb 5-1: config 1 interface 103 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 212 [ 490.134537][ T5750] usb 5-1: config 1 interface 103 has no altsetting 0 [ 490.138855][ T5750] usb 5-1: language id specifier not provided by device, defaulting to English [ 490.140597][ T5750] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.140622][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.140639][ T5750] usb 5-1: Product: syz [ 490.140651][ T5750] usb 5-1: Manufacturer: syz [ 490.140663][ T5750] usb 5-1: SerialNumber: syz [ 490.341182][ T4926] Bluetooth: hci1: command tx timeout [ 490.458897][ T8744] loop2: detected capacity change from 0 to 32768 [ 490.534287][ T6513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.577396][ T5750] usb 5-1: USB disconnect, device number 21 [ 490.623966][ T8744] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 490.700388][ T8744] XFS (loop2): Ending clean mount [ 490.718249][ T6513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.793212][ T5616] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 490.802933][ T6513] bond0 (unregistering): Released all slaves [ 490.909084][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 491.541079][ T4926] Bluetooth: hci3: command tx timeout [ 491.617577][ T8763] random: crng reseeded on system resumption [ 491.761918][ T8766] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 492.061616][ T6513] hsr_slave_0: left promiscuous mode [ 492.080939][ T6513] hsr_slave_1: left promiscuous mode [ 492.081885][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.155417][ T5750] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 492.156844][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.333406][ T5750] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 492.333434][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.500653][ T4926] Bluetooth: hci1: command tx timeout [ 492.521041][ T5750] usb 3-1: config 0 descriptor?? [ 492.527565][ T5750] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 493.389315][ T8766] loop2: detected capacity change from 0 to 2048 [ 493.393161][ T8766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 493.576915][ T8766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.595176][ T38] audit: type=1800 audit(1781470590.830:45): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.529" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 493.620659][ T8766] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 493.626036][ T8766] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 493.626069][ T8766] EXT4-fs (loop2): This should not happen!! Data will be lost [ 493.626069][ T8766] [ 493.626083][ T8766] EXT4-fs (loop2): Total free blocks count 0 [ 493.626095][ T8766] EXT4-fs (loop2): Free/Dirty block details [ 493.626138][ T8766] EXT4-fs (loop2): free_blocks=2415919504 [ 493.626180][ T8766] EXT4-fs (loop2): dirty_blocks=256 [ 493.626193][ T8766] EXT4-fs (loop2): Block reservation details [ 493.626203][ T8766] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 493.977040][ T5750] gp8psk: usb in 128 operation failed. [ 493.984492][ T5750] gp8psk: usb in 137 operation failed. [ 493.984664][ T5750] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 493.984706][ T5750] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 494.055343][ T5750] usb 3-1: USB disconnect, device number 8 [ 494.593108][ T4926] Bluetooth: hci1: command tx timeout [ 495.145032][ T1176] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 495.165100][ T5616] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 495.399028][ T8797] loop4: detected capacity change from 0 to 32768 [ 495.438202][ T8797] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 495.444836][ T8797] JBD2: Ignoring recovery information on journal [ 495.560805][ T8797] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 496.091878][ T38] audit: type=1800 audit(1781470593.140:46): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.532" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 496.716059][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 496.893610][ T6513] team0 (unregistering): Port device team_slave_1 removed [ 496.987218][ T6513] team0 (unregistering): Port device team_slave_0 removed [ 497.405235][ T5624] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 497.503794][ T8813] loop4: detected capacity change from 0 to 32768 [ 497.559691][ T8813] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 497.578085][ T5624] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 497.578108][ T5624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.578123][ T5624] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.578155][ T5624] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 497.578175][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.655385][ T5624] usb 3-1: config 0 descriptor?? [ 497.755325][ T8813] XFS (loop4): Ending clean mount [ 497.941672][ T5612] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 498.755657][ T8838] loop4: detected capacity change from 0 to 8 [ 500.156713][ T5728] usb 3-1: USB disconnect, device number 9 [ 501.741996][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.742083][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.956825][ T8856] loop4: detected capacity change from 0 to 1024 [ 502.105665][ T8856] EXT4-fs (loop4): orphan cleanup on readonly fs [ 502.486447][ T8856] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 502.486784][ T8856] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 502.486901][ T8856] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.539: Failed to acquire dquot type 0 [ 502.486956][ T8856] loop4: lost filesystem error report for type 5 error -5 [ 502.490977][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 502.491000][ C0] EXT4-fs (loop4): initial error at time 1781470599: ext4_acquire_dquot:7041 [ 502.491018][ C0] EXT4-fs (loop4): last error at time 1781470599: ext4_acquire_dquot:7041 [ 502.762686][ T8856] EXT4-fs (loop4): 1 truncate cleaned up [ 502.765802][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.769189][ T8856] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.368124][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.368496][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.368785][ T8652] bridge_slave_0: entered allmulticast mode [ 503.393532][ T8652] bridge_slave_0: entered promiscuous mode [ 505.466557][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.466830][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.467119][ T8652] bridge_slave_1: entered allmulticast mode [ 505.470454][ T8652] bridge_slave_1: entered promiscuous mode [ 505.556943][ T8902] loop4: detected capacity change from 0 to 64 [ 505.924374][ T8902] syz.4.543: attempt to access beyond end of device [ 505.924374][ T8902] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 505.924743][ T8902] Buffer I/O error on dev loop4, logical block 512, async page read [ 505.925443][ T8902] syz.4.543: attempt to access beyond end of device [ 505.925443][ T8902] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 505.925515][ T8902] Buffer I/O error on dev loop4, logical block 56576, async page read [ 507.994142][ T8902] syz.4.543: attempt to access beyond end of device [ 507.994142][ T8902] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 507.994248][ T8902] Buffer I/O error on dev loop4, logical block 512, async page read [ 507.997846][ T8902] syz.4.543: attempt to access beyond end of device [ 507.997846][ T8902] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 507.997925][ T8902] Buffer I/O error on dev loop4, logical block 56576, async page read [ 508.143315][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.229105][ T8902] syz.4.543: attempt to access beyond end of device [ 508.229105][ T8902] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 508.229300][ T8902] Buffer I/O error on dev loop4, logical block 512, async page read [ 508.229404][ T8902] syz.4.543: attempt to access beyond end of device [ 508.229404][ T8902] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 508.229478][ T8902] Buffer I/O error on dev loop4, logical block 56576, async page read [ 508.894366][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 508.919342][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 508.922563][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 508.937903][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 508.983667][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.115630][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.650541][ T4926] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 510.263079][ T8652] team0: Port device team_slave_0 added [ 510.327878][ T8962] syz.2.550 uses obsolete (PF_INET,SOCK_PACKET) [ 510.700825][ T8966] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 510.700902][ T8966] PKCS7: Only support pkcs7_signedData type [ 510.706201][ T8966] netlink: 'syz.2.550': attribute type 31 has an invalid length. [ 511.488831][ T4926] Bluetooth: hci5: command tx timeout [ 511.795701][ T8652] team0: Port device team_slave_1 added [ 512.213660][ T8976] loop2: detected capacity change from 0 to 512 [ 512.235882][ T8976] EXT4-fs: Ignoring removed oldalloc option [ 512.235933][ T8976] ext3: Unknown parameter 'dont_measure' [ 512.590925][ T5728] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 512.733860][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.733872][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.733886][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.782198][ T5728] usb 3-1: Using ep0 maxpacket: 16 [ 512.789533][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.789563][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.789598][ T5728] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 512.789619][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.807529][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.807545][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.807567][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.809977][ T5728] usb 3-1: config 0 descriptor?? [ 512.810749][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.811389][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.811847][ T8703] bridge_slave_0: entered allmulticast mode [ 512.834195][ T8703] bridge_slave_0: entered promiscuous mode [ 512.981602][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.982176][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.982441][ T8703] bridge_slave_1: entered allmulticast mode [ 512.990214][ T8703] bridge_slave_1: entered promiscuous mode [ 513.618717][ T8984] loop4: detected capacity change from 0 to 128 [ 514.415594][ T5728] usb 3-1: language id specifier not provided by device, defaulting to English [ 514.424707][ T4926] Bluetooth: hci5: command tx timeout [ 514.617451][ T5728] letsketch 0003:6161:4D15.0004: Device info: 礔ã»æ¶½è¯æ–¡ê”šæ¡‰ç¨ë žî©—ᅵ鴚í§é˜´ì¨…挦旉슱꾳饣䡛ꌕ묖ï¦äŸ˜ïŠá¤³ïŽ‹ì·½æ›îˆ¡ã‹˜ã»»ãµ£í™î£ŠÌ¿ã¹µã¡…ᖿ膭䜿擓Ｚ듣馷ฌë²èµ’â’‹ï“· [ 514.868273][ T5728] letsketch 0003:6161:4D15.0004: Device info: ï“¿ [ 514.893459][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.024032][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.070720][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.080248][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.107798][ T8652] hsr_slave_0: entered promiscuous mode [ 515.109652][ T8652] hsr_slave_1: entered promiscuous mode [ 515.123374][ T8652] debugfs: 'hsr0' already exists in 'hsr' [ 515.123401][ T8652] Cannot create hsr debugfs directory [ 515.175459][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.178822][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.190371][ T8976] binder: 8975:8976 ioctl c0306201 200000000640 returned -22 [ 515.239181][ T5728] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 515.239273][ T5728] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 515.337741][ T5728] usb 3-1: USB disconnect, device number 10 [ 515.366874][ T8989] loop4: detected capacity change from 0 to 2048 [ 515.518502][ T8989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.696946][ T8988] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 515.718903][ T8703] team0: Port device team_slave_0 added [ 515.743053][ T8988] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 515.743084][ T8988] EXT4-fs (loop4): This should not happen!! Data will be lost [ 515.743084][ T8988] [ 515.743096][ T8988] EXT4-fs (loop4): Total free blocks count 0 [ 515.743108][ T8988] EXT4-fs (loop4): Free/Dirty block details [ 515.743146][ T8988] EXT4-fs (loop4): free_blocks=4096 [ 515.743179][ T8988] EXT4-fs (loop4): dirty_blocks=16 [ 515.743191][ T8988] EXT4-fs (loop4): Block reservation details [ 515.743200][ T8988] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 515.743719][ T8703] team0: Port device team_slave_1 added [ 516.436541][ T155] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28 [ 516.456048][ T5612] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 516.506261][ T5630] Bluetooth: hci5: command tx timeout [ 517.317078][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.317094][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.317117][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.430795][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.430811][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.430832][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.644320][ T5630] Bluetooth: hci5: command tx timeout [ 519.944462][ T2235] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 520.428034][ T9016] loop4: detected capacity change from 0 to 32768 [ 520.638691][ T9016] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 520.971615][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 521.231206][ T8703] hsr_slave_0: entered promiscuous mode [ 521.233427][ T8703] hsr_slave_1: entered promiscuous mode [ 521.240494][ T8703] debugfs: 'hsr0' already exists in 'hsr' [ 521.240522][ T8703] Cannot create hsr debugfs directory [ 521.372897][ T38] audit: type=1326 audit(1781470618.610:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.4.565" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3521dcce59 code=0x0 [ 521.433131][ T9023] loop2: detected capacity change from 0 to 128 [ 521.434907][ T9023] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 521.815032][ T1248] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 521.977047][ T1248] usb 3-1: unable to get BOS descriptor or descriptor too short [ 521.977570][ T1248] usb 3-1: not running at top speed; connect to a high speed hub [ 521.979773][ T1248] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.979803][ T1248] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.979816][ T1248] usb 3-1: config 1 interface 0 has no altsetting 0 [ 522.056756][ T1248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.056786][ T1248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.056804][ T1248] usb 3-1: Product: syz [ 522.056821][ T1248] usb 3-1: Manufacturer: syz [ 522.056833][ T1248] usb 3-1: SerialNumber: syz [ 522.458907][ T1248] cdc_ether 3-1:1.0: GUID doesn't match [ 522.484439][ T1248] usb 3-1: USB disconnect, device number 11 [ 523.399616][ T38] audit: type=1326 audit(1781470620.020:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 523.399667][ T38] audit: type=1326 audit(1781470620.020:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 523.399706][ T38] audit: type=1326 audit(1781470620.020:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 523.399743][ T38] audit: type=1326 audit(1781470620.030:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 523.399780][ T38] audit: type=1326 audit(1781470620.050:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 523.399821][ T38] audit: type=1326 audit(1781470620.060:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3521d8d68e code=0x7ffc0000 [ 523.399858][ T38] audit: type=1326 audit(1781470620.060:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 523.399895][ T38] audit: type=1326 audit(1781470620.060:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 523.399932][ T38] audit: type=1326 audit(1781470620.070:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.4.566" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x7ffc0000 [ 524.350974][ T1248] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 524.514035][ T1248] usb 3-1: Invalid ep0 maxpacket: 32 [ 524.671239][ T1248] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 524.718524][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 524.845157][ T1248] usb 3-1: Invalid ep0 maxpacket: 32 [ 524.859941][ T1248] usb usb3-port1: attempt power cycle [ 525.281773][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.282823][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.289220][ T8936] bridge_slave_0: entered allmulticast mode [ 525.424322][ T8936] bridge_slave_0: entered promiscuous mode [ 525.749651][ T1248] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 525.781787][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.782065][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.782382][ T8936] bridge_slave_1: entered allmulticast mode [ 525.785609][ T8936] bridge_slave_1: entered promiscuous mode [ 525.798241][ T1248] usb 3-1: Invalid ep0 maxpacket: 32 [ 525.931158][ T1248] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 525.944757][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.970537][ T1248] usb 3-1: Invalid ep0 maxpacket: 32 [ 525.977033][ T1248] usb usb3-port1: unable to enumerate USB device [ 526.124023][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.298867][ T9065] loop4: detected capacity change from 0 to 512 [ 526.310489][ T9065] EXT4-fs: Ignoring removed nobh option [ 526.934485][ T9065] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 526.934930][ T9065] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 526.937546][ T9065] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.570: inode has both inline data and extents flags [ 526.937574][ T9065] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 526.939008][ T9065] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.570: couldn't read orphan inode 13 (err -117) [ 526.939035][ T9065] loop4: lost filesystem error report for type 5 error -117 [ 526.944724][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 526.944746][ C1] EXT4-fs (loop4): initial error at time 1781470624: ext4_orphan_get:1399: inode 13 [ 526.944769][ C1] EXT4-fs (loop4): last error at time 1781470624: ext4_orphan_get:1404 [ 526.949868][ T9065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.202943][ T8936] team0: Port device team_slave_0 added [ 527.241712][ T8936] team0: Port device team_slave_1 added [ 527.360291][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.596049][ T5624] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 527.753214][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 527.753241][ T5624] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 527.753263][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 527.753281][ T5624] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 527.755686][ T5624] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 527.755713][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.755730][ T5624] usb 3-1: Product: syz [ 527.755742][ T5624] usb 3-1: Manufacturer: syz [ 527.755754][ T5624] usb 3-1: SerialNumber: syz [ 527.790593][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.790608][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.790630][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.796950][ T5624] usb 3-1: config 0 descriptor?? [ 527.817555][ T5624] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 527.824854][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.824869][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.824891][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.093961][ T9081] loop4: detected capacity change from 0 to 32768 [ 528.142676][ T5624] scsi host1: usb-storage 3-1:0.0 [ 528.230374][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 528.300468][ T9081] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 528.592155][ T8936] hsr_slave_0: entered promiscuous mode [ 528.593517][ T8936] hsr_slave_1: entered promiscuous mode [ 528.594418][ T8936] debugfs: 'hsr0' already exists in 'hsr' [ 528.594439][ T8936] Cannot create hsr debugfs directory [ 528.641853][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 528.901067][ T6513] bridge_slave_1: left allmulticast mode [ 528.901099][ T6513] bridge_slave_1: left promiscuous mode [ 528.901424][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.904211][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 528.904226][ T38] audit: type=1326 audit(1781470626.140:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9091 comm="syz.4.573" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3521dcce59 code=0x0 [ 528.927270][ T5624] usb 3-1: USB disconnect, device number 16 [ 529.105900][ T9096] IPVS: Scheduler module ip_vs_ not found [ 529.131722][ T6513] bridge_slave_0: left allmulticast mode [ 529.131756][ T6513] bridge_slave_0: left promiscuous mode [ 529.132033][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.401122][ T6513] bridge_slave_1: left allmulticast mode [ 529.401157][ T6513] bridge_slave_1: left promiscuous mode [ 529.401429][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.501879][ T6513] bridge_slave_0: left allmulticast mode [ 529.501904][ T6513] bridge_slave_0: left promiscuous mode [ 529.502076][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.871564][ T6513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.937433][ T9100] loop2: detected capacity change from 0 to 128 [ 529.938943][ T9100] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 529.991641][ T6513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.084041][ T6513] bond0 (unregistering): Released all slaves [ 530.271429][ T5005] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 530.331519][ T6513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.411887][ T6513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.426447][ T5005] usb 3-1: unable to get BOS descriptor or descriptor too short [ 530.426970][ T5005] usb 3-1: not running at top speed; connect to a high speed hub [ 530.428470][ T5005] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.428517][ T5005] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 530.428539][ T5005] usb 3-1: config 1 interface 0 has no altsetting 0 [ 530.474773][ T6513] bond0 (unregistering): Released all slaves [ 530.482575][ T5005] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.482591][ T5005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.482601][ T5005] usb 3-1: Product: syz [ 530.482619][ T5005] usb 3-1: Manufacturer: syz [ 530.482626][ T5005] usb 3-1: SerialNumber: syz [ 530.802659][ T5005] cdc_ether 3-1:1.0: GUID doesn't match [ 530.937158][ T5005] usb 3-1: USB disconnect, device number 17 [ 530.950729][ T38] audit: type=1326 audit(1781470628.180:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.576" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x0 [ 531.610999][ T6513] hsr_slave_0: left promiscuous mode [ 531.802266][ T6513] hsr_slave_1: left promiscuous mode [ 531.803327][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.312814][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.628610][ T38] audit: type=1326 audit(1781470629.860:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 532.628760][ T38] audit: type=1326 audit(1781470629.860:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 532.636583][ T38] audit: type=1326 audit(1781470629.870:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 532.636628][ T38] audit: type=1326 audit(1781470629.870:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 532.640245][ T38] audit: type=1326 audit(1781470629.870:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 532.645022][ T38] audit: type=1326 audit(1781470629.880:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 532.645070][ T38] audit: type=1326 audit(1781470629.880:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc1963cbc2 code=0x7ffc0000 [ 532.661027][ T6513] hsr_slave_0: left promiscuous mode [ 532.701870][ T38] audit: type=1326 audit(1781470629.940:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.2.579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc195fd68e code=0x7ffc0000 [ 532.708478][ T6513] hsr_slave_1: left promiscuous mode [ 532.709607][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.748685][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.770990][ T5624] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 532.787227][ T9127] loop2: detected capacity change from 0 to 4096 [ 532.925445][ T5624] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 532.925477][ T5624] usb 5-1: config 0 interface 0 has no altsetting 0 [ 532.925507][ T5624] usb 5-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.00 [ 532.925527][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.961613][ T5624] usb 5-1: config 0 descriptor?? [ 533.055709][ T9127] ntfs3(loop2): Failed to load $Extend (-22). [ 533.055734][ T9127] ntfs3(loop2): Failed to initialize $Extend. [ 533.675931][ T6513] team0 (unregistering): Port device team_slave_1 removed [ 533.686863][ T5624] hid_parser_main: 30 callbacks suppressed [ 533.686950][ T5624] apple 0003:05AC:0218.0005: unknown main item tag 0x2 [ 533.686978][ T5624] apple 0003:05AC:0218.0005: unknown main item tag 0x6 [ 533.687089][ T5624] apple 0003:05AC:0218.0005: ignoring exceeding usage max [ 533.689754][ T5624] apple 0003:05AC:0218.0005: invalid report_count 24886 [ 533.689773][ T5624] apple 0003:05AC:0218.0005: item 0 4 1 9 parsing failed [ 533.690576][ T5624] apple 0003:05AC:0218.0005: parse failed [ 533.690684][ T5624] apple 0003:05AC:0218.0005: probe with driver apple failed with error -22 [ 533.772839][ T6513] team0 (unregistering): Port device team_slave_0 removed [ 533.845842][ T9122] loop4: detected capacity change from 0 to 16 [ 534.335423][ T38] kauditd_printk_skb: 47 callbacks suppressed [ 534.335631][ T38] audit: type=1326 audit(1781470631.490:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 534.337079][ T38] audit: type=1326 audit(1781470631.500:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 534.338015][ T38] audit: type=1326 audit(1781470631.500:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 534.339024][ T38] audit: type=1326 audit(1781470631.510:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 534.340265][ T38] audit: type=1326 audit(1781470631.530:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 534.343508][ T38] audit: type=1326 audit(1781470631.540:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.2.581" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 535.077888][ T9122] erofs (device loop4): failed to read inode meta block (nid: 18446744073575399424): -117 [ 535.107143][ T5728] usb 5-1: USB disconnect, device number 22 [ 535.478618][ T38] audit: type=1326 audit(1781470632.710:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.2.583" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc1963ce59 code=0x0 [ 535.508973][ T9141] loop4: detected capacity change from 0 to 256 [ 535.832637][ T6513] team0 (unregistering): Port device team_slave_1 removed [ 535.891891][ T6513] team0 (unregistering): Port device team_slave_0 removed [ 536.127462][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 538.283261][ T9163] loop2: detected capacity change from 0 to 131072 [ 538.795952][ T38] audit: type=1326 audit(1781470636.010:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.2.589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 538.796466][ T38] audit: type=1326 audit(1781470636.020:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.2.589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 538.797031][ T38] audit: type=1326 audit(1781470636.020:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.2.589" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 539.904794][ T9174] loop4: detected capacity change from 0 to 4096 [ 540.189551][ T9174] ntfs3(loop4): Failed to load $Extend (-22). [ 540.189576][ T9174] ntfs3(loop4): Failed to initialize $Extend. [ 540.360460][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 540.360478][ T38] audit: type=1326 audit(1781470637.590:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.2.592" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc1963ce59 code=0x0 [ 540.467401][ T5624] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 540.745354][ T5624] usb 5-1: Using ep0 maxpacket: 8 [ 540.758825][ T5624] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.769032][ T5624] usb 5-1: config 10 has too many interfaces: 157, using maximum allowed: 32 [ 540.769050][ T5624] usb 5-1: config 10 has 1 interface, different from the descriptor's value: 157 [ 540.791181][ T5624] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 540.791209][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.791227][ T5624] usb 5-1: Product: syz [ 540.791239][ T5624] usb 5-1: Manufacturer: syz [ 540.791250][ T5624] usb 5-1: SerialNumber: syz [ 541.518252][ T5624] pcwd_usb: The device isn't a Human Interface Device [ 541.630092][ T5624] usb 5-1: USB disconnect, device number 23 [ 543.099931][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 543.148757][ T4926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.178719][ T4926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.195897][ T4926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.206783][ T9202] netlink: 824 bytes leftover after parsing attributes in process `syz.2.597'. [ 543.224779][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.249856][ T4926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.260378][ T9215] loop2: detected capacity change from 0 to 64 [ 544.289035][ T9215] hfs: unable to read tree header [ 544.298397][ T9215] hfs: unable to open catalog tree [ 544.298411][ T9215] hfs: can't find a HFS filesystem on dev loop2 [ 544.395399][ T9215] loop2: detected capacity change from 0 to 1764 [ 544.403658][ T9215] iso9660: Unknown parameter '00000000000000000009' [ 545.190084][ T38] audit: type=1326 audit(1781470642.420:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.2.600" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc1963ce59 code=0x0 [ 545.340942][ T4926] Bluetooth: hci2: command tx timeout [ 546.660645][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 546.762615][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 546.768783][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 546.786555][ T9253] loop4: detected capacity change from 0 to 1024 [ 546.822155][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 546.825518][ T9253] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 546.827627][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 546.841254][ T9253] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 546.841616][ T9253] EXT4-fs (loop4): orphan cleanup on readonly fs [ 547.243153][ T9253] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 547.243298][ T9253] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 547.243477][ T9253] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.601: Failed to acquire dquot type 0 [ 547.243502][ T9253] loop4: lost filesystem error report for type 5 error -117 [ 547.244201][ T9253] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 547.244315][ T9253] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 547.244361][ T9253] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.601: Failed to acquire dquot type 0 [ 547.244383][ T9253] loop4: lost filesystem error report for type 5 error -117 [ 547.250870][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 547.250902][ C1] EXT4-fs (loop4): initial error at time 1781470644: ext4_acquire_dquot:7041 [ 547.250922][ C1] EXT4-fs (loop4): last error at time 1781470644: ext4_acquire_dquot:7041 [ 547.383653][ T4926] Bluetooth: hci2: command tx timeout [ 547.384295][ T9253] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.601: Freeing blocks not in datazone - block = 0, count = 4096 [ 547.384395][ T9253] loop4: lost filesystem error report for type 5 error -117 [ 547.435767][ T9253] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 547.435941][ T9253] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 547.435998][ T9253] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.601: Failed to acquire dquot type 0 [ 547.436018][ T9253] loop4: lost filesystem error report for type 5 error -117 [ 547.550340][ T9253] EXT4-fs (loop4): 1 orphan inode deleted [ 547.651352][ T9253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 547.660177][ T9253] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.601: iget: bad extended attribute block 6 [ 548.007860][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.223594][ T9277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'. [ 548.390317][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 549.080467][ T4926] Bluetooth: hci6: command tx timeout [ 549.461064][ T4926] Bluetooth: hci2: command tx timeout [ 549.627157][ T9291] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 551.119284][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 551.140999][ T4926] Bluetooth: hci6: command tx timeout [ 551.540974][ T4926] Bluetooth: hci2: command tx timeout [ 551.757778][ T38] audit: type=1326 audit(1781470648.960:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.2.608" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x0 [ 551.909865][ T38] audit: type=1326 audit(1781470649.140:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.4.609" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3521dcce59 code=0x0 [ 552.186037][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.186298][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.186478][ T9201] bridge_slave_0: entered allmulticast mode [ 552.192047][ T9201] bridge_slave_0: entered promiscuous mode [ 552.243185][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.243354][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.243576][ T9201] bridge_slave_1: entered allmulticast mode [ 552.256748][ T9201] bridge_slave_1: entered promiscuous mode [ 553.221230][ T4926] Bluetooth: hci6: command tx timeout [ 553.519508][ T9201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.548684][ T9201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.893234][ T9367] loop4: detected capacity change from 0 to 512 [ 554.039613][ T9201] team0: Port device team_slave_0 added [ 554.881678][ T9201] team0: Port device team_slave_1 added [ 555.301337][ T4926] Bluetooth: hci6: command tx timeout [ 555.668051][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.668067][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.668088][ T9201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.765030][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.765051][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.765073][ T9201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.221302][ T38] audit: type=1326 audit(1781470654.460:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.2.618" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc1963ce59 code=0x0 [ 557.272406][ T9201] hsr_slave_0: entered promiscuous mode [ 557.275199][ T9201] hsr_slave_1: entered promiscuous mode [ 557.276108][ T9201] debugfs: 'hsr0' already exists in 'hsr' [ 557.334792][ T9201] Cannot create hsr debugfs directory [ 557.353382][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.353543][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.353754][ T9251] bridge_slave_0: entered allmulticast mode [ 557.355769][ T9251] bridge_slave_0: entered promiscuous mode [ 557.387475][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.387826][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.388085][ T9251] bridge_slave_1: entered allmulticast mode [ 557.390217][ T9251] bridge_slave_1: entered promiscuous mode [ 557.391133][ T1248] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 557.501148][ T6513] bridge_slave_1: left allmulticast mode [ 557.501173][ T6513] bridge_slave_1: left promiscuous mode [ 557.501371][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.544533][ T1248] usb 5-1: unable to get BOS descriptor or descriptor too short [ 557.545714][ T1248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.545735][ T1248] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.548871][ T1248] usb 5-1: string descriptor 0 read error: -22 [ 557.548980][ T1248] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 557.548999][ T1248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.585657][ T1248] usb 5-1: selecting invalid altsetting 1 [ 557.589418][ T1248] usb 5-1: unit 3 not found! [ 557.652938][ T6513] bridge_slave_0: left allmulticast mode [ 557.652961][ T6513] bridge_slave_0: left promiscuous mode [ 557.653191][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.768607][ T1248] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 557.768626][ T1248] usb 5-1: invalid MIXER UNIT descriptor 6 [ 558.097701][ T9404] netlink: 144 bytes leftover after parsing attributes in process `syz.2.619'. [ 558.229761][ T9406] loop2: detected capacity change from 0 to 4096 [ 558.239114][ T9406] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 558.297784][ T1248] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 558.305982][ T9406] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 558.352991][ T9406] ntfs3(loop2): Failed to load $Extend (-22). [ 558.353018][ T9406] ntfs3(loop2): Failed to initialize $Extend. [ 558.355559][ T1248] usb 5-1: USB disconnect, device number 24 [ 558.831465][ T6513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.751666][ T6513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.832888][ T6513] bond0 (unregistering): Released all slaves [ 560.365739][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.875392][ T9421] comedi comedi1: mpc624: I/O port conflict (0x100,16) [ 562.034851][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.598987][ T9427] loop4: detected capacity change from 0 to 24 [ 562.691004][ T6513] hsr_slave_0: left promiscuous mode [ 562.736783][ T6513] hsr_slave_1: left promiscuous mode [ 562.737851][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.790343][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.009639][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.009729][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.383829][ T38] audit: type=1326 audit(1781470660.620:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.2.626" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc1963ce59 code=0x0 [ 563.567957][ T9439] loop4: detected capacity change from 0 to 8 [ 563.817410][ T9441] loop4: detected capacity change from 0 to 2048 [ 563.828128][ T6513] team0 (unregistering): Port device team_slave_1 removed [ 563.921702][ T6513] team0 (unregistering): Port device team_slave_0 removed [ 563.939038][ T9441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.582110][ T9454] sctp: [Deprecated]: syz.2.633 (pid 9454) Use of int in max_burst socket option deprecated. [ 565.582110][ T9454] Use struct sctp_assoc_value instead [ 565.649486][ T9251] team0: Port device team_slave_0 added [ 565.692240][ T9251] team0: Port device team_slave_1 added [ 565.740950][ T5737] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 566.895281][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 566.907912][ T5737] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 566.922867][ T5737] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 566.922892][ T5737] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 566.922909][ T5737] usb 5-1: Product: syz [ 566.922922][ T5737] usb 5-1: Manufacturer: syz [ 566.922936][ T5737] usb 5-1: SerialNumber: syz [ 567.225943][ T5737] usb 5-1: Invalid connection information received from device [ 567.303938][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.303954][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.303977][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.325576][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.325591][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.325613][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.510231][ T9452] loop8: detected capacity change from 0 to 8 [ 567.536536][ T9452] Dev loop8: unable to read RDB block 8 [ 567.536584][ T9452] loop8: unable to read partition table [ 567.536795][ T9452] loop8: partition table beyond EOD, truncated [ 567.536826][ T9452] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 567.613255][ T5005] usb 5-1: USB disconnect, device number 25 [ 567.850291][ T9251] hsr_slave_0: entered promiscuous mode [ 567.862824][ T9251] hsr_slave_1: entered promiscuous mode [ 568.244611][ T9461] dummy0: entered allmulticast mode [ 568.723801][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.786303][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.787820][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.804731][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.806817][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.843223][ T9466] loop4: detected capacity change from 0 to 8 [ 569.175301][ T9471] loop4: detected capacity change from 0 to 512 [ 569.231676][ T9473] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 569.311113][ T6513] bridge_slave_1: left allmulticast mode [ 569.311139][ T6513] bridge_slave_1: left promiscuous mode [ 569.311335][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.431842][ T6513] bridge_slave_0: left allmulticast mode [ 569.431865][ T6513] bridge_slave_0: left promiscuous mode [ 569.432123][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.881562][ T6513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.981745][ T6513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.062970][ T6513] bond0 (unregistering): Released all slaves [ 570.081628][ T9459] dummy0: left allmulticast mode [ 570.283431][ T9473] syz_tun: entered promiscuous mode [ 570.290341][ T9473] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 570.801012][ T6513] hsr_slave_0: left promiscuous mode [ 570.842720][ T6513] hsr_slave_1: left promiscuous mode [ 570.843833][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.861807][ T4926] Bluetooth: hci1: command tx timeout [ 571.902014][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.037772][ T9493] loop2: detected capacity change from 0 to 64 [ 572.613369][ T9494] block nbd2: shutting down sockets [ 572.747886][ T9496] loop4: detected capacity change from 0 to 512 [ 572.804148][ T9496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.804290][ T9496] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 572.811649][ T6513] team0 (unregistering): Port device team_slave_1 removed [ 572.903819][ T6513] team0 (unregistering): Port device team_slave_0 removed [ 573.245069][ T9492] netlink: 52 bytes leftover after parsing attributes in process `syz.2.641'. [ 573.593779][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.814438][ T9511] loop4: detected capacity change from 0 to 8 [ 573.942753][ T4926] Bluetooth: hci1: command tx timeout [ 575.194820][ T9513] dummy0: Device is already in use. [ 575.891026][ T5601] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 575.896021][ T9533] loop4: detected capacity change from 0 to 8 [ 575.896953][ T9533] cramfs: Unknown parameter '€' [ 576.021435][ T4926] Bluetooth: hci1: command tx timeout [ 576.049563][ T5601] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 576.049586][ T5601] usb 3-1: config 0 has no interface number 0 [ 576.066683][ T5601] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 576.066711][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.066729][ T5601] usb 3-1: Product: syz [ 576.066741][ T5601] usb 3-1: Manufacturer: syz [ 576.066753][ T5601] usb 3-1: SerialNumber: syz [ 576.103974][ T5601] usb 3-1: config 0 descriptor?? [ 576.361341][ T5601] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 576.558007][ T9527] netlink: 592 bytes leftover after parsing attributes in process `syz.2.651'. [ 576.561699][ T5601] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 576.561842][ T5601] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 576.562430][ T5601] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 576.684676][ T5601] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 577.629327][ T5737] usb 3-1: USB disconnect, device number 18 [ 577.687850][ T5737] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 577.688907][ T5737] keyspan 3-1:0.133: device disconnected [ 577.901867][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.902288][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.902545][ T9463] bridge_slave_0: entered allmulticast mode [ 577.904353][ T9463] bridge_slave_0: entered promiscuous mode [ 577.908125][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.908336][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.908502][ T9463] bridge_slave_1: entered allmulticast mode [ 577.910227][ T9463] bridge_slave_1: entered promiscuous mode [ 578.039355][ T9463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.054509][ T9463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.101220][ T4926] Bluetooth: hci1: command tx timeout [ 578.133183][ T9463] team0: Port device team_slave_0 added [ 578.137968][ T9463] team0: Port device team_slave_1 added [ 578.197317][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.197334][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.197357][ T9463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.200414][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.200427][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.200460][ T9463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.371525][ T9463] hsr_slave_0: entered promiscuous mode [ 578.373385][ T9463] hsr_slave_1: entered promiscuous mode [ 578.375031][ T9463] debugfs: 'hsr0' already exists in 'hsr' [ 578.375053][ T9463] Cannot create hsr debugfs directory [ 578.410083][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.660'. [ 578.771026][ T6513] bridge_slave_1: left allmulticast mode [ 578.771061][ T6513] bridge_slave_1: left promiscuous mode [ 578.771331][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.873402][ T6513] bridge_slave_0: left allmulticast mode [ 578.873438][ T6513] bridge_slave_0: left promiscuous mode [ 578.873724][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.310158][ T9568] loop4: detected capacity change from 0 to 256 [ 579.682281][ T6513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.761509][ T6513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.822589][ T6513] bond0 (unregistering): Released all slaves [ 580.404668][ T6513] hsr_slave_0: left promiscuous mode [ 580.507164][ T6513] hsr_slave_1: left promiscuous mode [ 580.508226][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.537079][ T6513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.011931][ T9588] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 583.132123][ T2209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.786023][ T9594] loop2: detected capacity change from 0 to 128 [ 584.825049][ T6513] team0 (unregistering): Port device team_slave_1 removed [ 584.918306][ T9594] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 584.918630][ T9594] hpfs: filesystem error: improperly stopped [ 584.918647][ T9594] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 584.918659][ T9594] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 584.918683][ T9594] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 584.919722][ T6513] team0 (unregistering): Port device team_slave_0 removed [ 585.170974][ T5005] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 585.341206][ T5005] usb 3-1: Using ep0 maxpacket: 16 [ 585.344730][ T5005] usb 3-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 585.344760][ T5005] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.348498][ T5005] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.348549][ T5005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.348566][ T5005] usb 3-1: Product: syz [ 585.348579][ T5005] usb 3-1: Manufacturer: syz [ 585.348591][ T5005] usb 3-1: SerialNumber: syz [ 585.515739][ T5005] usb 3-1: 0:2 : does not exist [ 585.775537][ T5005] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 585.943254][ T5005] usb 3-1: USB disconnect, device number 19 [ 586.090570][ T5624] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 586.180874][ T5727] udevd[5727]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.288408][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 586.292990][ T5624] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 586.293019][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.293038][ T5624] usb 5-1: Product: syz [ 586.293050][ T5624] usb 5-1: Manufacturer: syz [ 586.293064][ T5624] usb 5-1: SerialNumber: syz [ 586.303343][ T5624] usb 5-1: config 0 descriptor?? [ 586.612621][ T5624] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 586.612701][ T5624] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 587.538153][ T5624] usb 5-1: USB disconnect, device number 26 [ 588.076861][ T9201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.168718][ T9201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.184138][ T9201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.246042][ T9611] loop2: detected capacity change from 0 to 4096 [ 588.259482][ T9611] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 588.649324][ T9615] netlink: 5 bytes leftover after parsing attributes in process `syz.4.679'. [ 589.314823][ T9619] netlink: 'syz.4.679': attribute type 10 has an invalid length. [ 589.365230][ T9201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.729856][ T38] audit: type=1326 audit(1781470686.960:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.4.679" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x7fc00000 [ 590.148291][ T9619] veth0_vlan: left promiscuous mode [ 590.171644][ T9619] veth0_vlan: entered promiscuous mode [ 590.195283][ T9619] team0: Device veth0_vlan failed to register rx_handler [ 590.244821][ T9201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 590.261648][ T38] audit: type=1326 audit(1781470687.500:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.261778][ T38] audit: type=1326 audit(1781470687.500:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.263563][ T38] audit: type=1326 audit(1781470687.500:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.263707][ T38] audit: type=1326 audit(1781470687.500:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.263840][ T38] audit: type=1326 audit(1781470687.500:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.263970][ T38] audit: type=1326 audit(1781470687.500:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.264857][ T38] audit: type=1326 audit(1781470687.500:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.265062][ T38] audit: type=1326 audit(1781470687.500:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.265991][ T38] audit: type=1326 audit(1781470687.500:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.2.680" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 590.296727][ T9201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.318310][ T9201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 590.383914][ T9624] loop4: detected capacity change from 0 to 2048 [ 590.385161][ T9624] udf: Unknown parameter 'x0000000000000005' [ 590.400313][ T9201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.641104][ T5624] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 591.308424][ T5624] usb 3-1: device descriptor read/64, error -71 [ 591.770481][ T5624] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 592.640650][ T5624] usb 3-1: device descriptor read/64, error -71 [ 592.749024][ T5624] usb usb3-port1: attempt power cycle [ 593.028076][ T9251] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.054776][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.082203][ T5624] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 593.106620][ T5624] usb 3-1: device descriptor read/8, error -71 [ 593.158615][ T9251] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 593.197147][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.210013][ T9251] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.372564][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.377249][ T9251] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.433460][ T9251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.822477][ T9661] netlink: 27 bytes leftover after parsing attributes in process `syz.4.687'. [ 594.267510][ T4926] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 594.270300][ T9667] netlink: 'syz.2.688': attribute type 21 has an invalid length. [ 594.270324][ T9667] IPv6: NLM_F_CREATE should be specified when creating new route [ 594.274415][ T9667] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 594.276089][ T9201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.567518][ T9201] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.626979][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.627952][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.697953][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.698142][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.786265][ T5624] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 594.933313][ T5624] usb 3-1: Using ep0 maxpacket: 8 [ 594.946744][ T5624] usb 3-1: config index 0 descriptor too short (expected 58148, got 36) [ 594.946760][ T5624] usb 3-1: config 23 has too many interfaces: 194, using maximum allowed: 32 [ 594.946770][ T5624] usb 3-1: config 23 has an invalid descriptor of length 0, skipping remainder of the config [ 594.946779][ T5624] usb 3-1: config 23 has 0 interfaces, different from the descriptor's value: 194 [ 594.946799][ T5624] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 594.946810][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.102615][ T5005] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 595.268495][ T5005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.268519][ T5005] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 595.268573][ T5005] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 595.273650][ T5005] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 595.273675][ T5005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.273693][ T5005] usb 5-1: Product: syz [ 595.273705][ T5005] usb 5-1: Manufacturer: syz [ 595.273718][ T5005] usb 5-1: SerialNumber: syz [ 595.287217][ T5005] usb 5-1: config 0 descriptor?? [ 595.328791][ T5005] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 595.328876][ T5005] uvcvideo 5-1:0.0: No valid video chain found. [ 595.490926][ T5624] usb 3-1: string descriptor 0 read error: -71 [ 595.496742][ T5624] usb 3-1: USB disconnect, device number 24 [ 595.515927][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.671118][ T1176] bridge_slave_1: left allmulticast mode [ 595.671151][ T1176] bridge_slave_1: left promiscuous mode [ 595.671478][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.801963][ T1176] bridge_slave_0: left allmulticast mode [ 595.801987][ T1176] bridge_slave_0: left promiscuous mode [ 595.802171][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.889565][ T9671] loop4: detected capacity change from 0 to 8192 [ 595.932930][ T1248] usb 5-1: USB disconnect, device number 27 [ 598.446297][ T9687] loop4: detected capacity change from 0 to 512 [ 598.473835][ T9687] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 598.486605][ T9687] EXT4-fs (loop4): mount failed [ 598.804869][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.065988][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.601166][ T5728] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 600.713173][ T1176] bond0 (unregistering): Released all slaves [ 601.338325][ T5728] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 601.338442][ T5728] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.338497][ T5728] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 601.338562][ T5728] usb 3-1: config 1 interface 0 has no altsetting 0 [ 601.665076][ T5728] usb 3-1: string descriptor 0 read error: -71 [ 601.665238][ T5728] usb 3-1: New USB device found, idVendor=856d, idProduct=2baa, bcdDevice= 2.69 [ 601.665259][ T5728] usb 3-1: New USB device strings: Mfr=35, Product=106, SerialNumber=148 [ 601.752080][ T38] kauditd_printk_skb: 47 callbacks suppressed [ 601.752096][ T38] audit: type=1326 audit(1781470698.990:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.754697][ T38] audit: type=1326 audit(1781470698.990:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.754751][ T38] audit: type=1326 audit(1781470698.990:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.755258][ T38] audit: type=1326 audit(1781470698.990:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.755298][ T38] audit: type=1326 audit(1781470698.990:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.755613][ T38] audit: type=1326 audit(1781470698.990:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.756134][ T38] audit: type=1326 audit(1781470698.990:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.756174][ T38] audit: type=1326 audit(1781470698.990:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.756688][ T38] audit: type=1326 audit(1781470698.990:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.756734][ T38] audit: type=1326 audit(1781470698.990:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.2.695" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 601.759216][ T9702] tls_set_device_offload_rx: netdev not found [ 601.926916][ T9707] loop2: detected capacity change from 0 to 256 [ 601.954038][ T9707] exfat: Deprecated parameter 'utf8' [ 601.954059][ T9707] exfat: Deprecated parameter 'utf8' [ 601.954128][ T9707] exfat: Deprecated parameter 'utf8' [ 601.967284][ T9707] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 602.075082][ T5728] usb 3-1: can't set config #1, error -71 [ 602.102407][ T5728] usb 3-1: USB disconnect, device number 25 [ 602.511023][ T5728] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 602.610946][ T1176] hsr_slave_0: left promiscuous mode [ 602.637975][ T9704] loop4: detected capacity change from 0 to 32768 [ 602.651169][ T1176] hsr_slave_1: left promiscuous mode [ 602.652221][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.671233][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 602.684538][ T5728] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 602.684562][ T5728] usb 3-1: config 0 has no interface number 0 [ 602.684602][ T5728] usb 3-1: config 0 interface 184 has no altsetting 0 [ 602.693501][ T5728] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 602.693534][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.693554][ T5728] usb 3-1: Product: syz [ 602.693567][ T5728] usb 3-1: Manufacturer: syz [ 602.693581][ T5728] usb 3-1: SerialNumber: syz [ 602.747963][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.759298][ T5728] usb 3-1: config 0 descriptor?? [ 603.062675][ T9704] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 603.062696][ T9704] gfs2: fsid=.: Now mounting FS (format 0)... [ 603.142902][ T9704] gfs2: fsid=.: can't read superblock: -22 [ 603.362423][ T5728] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 603.362452][ T5728] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 603.362471][ T5728] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 603.362720][ T5728] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 603.654917][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.696'. [ 603.662053][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 603.703113][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 604.015136][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.070137][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.082825][ T9251] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.087185][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.115646][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.131738][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.639609][ T5624] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 604.731305][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.731626][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.791071][ T5624] usb 5-1: Using ep0 maxpacket: 8 [ 604.793136][ T5624] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 604.793165][ T5624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 604.793186][ T5624] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.793205][ T5624] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.793239][ T5624] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 604.793260][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.795483][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.795641][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.475668][ T5624] usb 5-1: GET_CAPABILITIES returned 0 [ 605.475716][ T5624] usbtmc 5-1:16.0: can't read capabilities [ 605.581940][ T5005] usb 3-1: USB disconnect, device number 26 [ 605.720663][ T9718] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 605.744489][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 605.745024][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 605.854530][ T5728] usb 5-1: USB disconnect, device number 28 [ 606.267915][ T4926] Bluetooth: hci3: command tx timeout [ 607.346821][ T9743] netlink: 128 bytes leftover after parsing attributes in process `syz.4.701'. [ 607.828628][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 608.000364][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 608.034515][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.168415][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.175275][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 608.341116][ T4926] Bluetooth: hci3: command tx timeout [ 608.387726][ T9754] loop4: detected capacity change from 0 to 256 [ 608.607346][ T9760] loop2: detected capacity change from 0 to 2048 [ 608.612286][ T9760] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 608.614742][ T9760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.823545][ T9767] loop2: detected capacity change from 0 to 32768 [ 609.958713][ T9767] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 610.925323][ T4926] Bluetooth: hci2: command tx timeout [ 610.925874][ T4926] Bluetooth: hci3: command tx timeout [ 610.956629][ T5616] ocfs2: Unmounting device (7,2) on (node local) [ 612.460997][ T38] kauditd_printk_skb: 12 callbacks suppressed [ 612.461015][ T38] audit: type=1800 audit(1781470709.690:219): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.710" name="file1" dev="tmpfs" ino=1649 res=0 errno=0 [ 612.990759][ T5630] Bluetooth: hci3: command tx timeout [ 612.991022][ T5630] Bluetooth: hci2: command tx timeout [ 615.064472][ T4926] Bluetooth: hci2: command tx timeout [ 615.232341][ T2209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 616.150507][ T9463] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.207913][ T9825] loop4: detected capacity change from 0 to 32768 [ 616.695088][ T9463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.827239][ T9463] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.990120][ T9463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.006552][ T9825] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 617.194132][ T4926] Bluetooth: hci2: command tx timeout [ 617.316247][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 617.691344][ T9463] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 617.736813][ T9463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.336799][ T9463] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.650398][ T9463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.811994][ T9845] loop4: detected capacity change from 0 to 512 [ 618.884451][ T9845] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 619.020299][ T9845] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 619.020352][ T9845] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 619.020370][ T9845] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.719: Failed to acquire dquot type 1 [ 619.020389][ T9845] loop4: lost filesystem error report for type 5 error -5 [ 619.021065][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 619.021084][ C0] EXT4-fs (loop4): last error at time 1781470716: ext4_acquire_dquot:7041 [ 619.173319][ T9845] EXT4-fs (loop4): 1 truncate cleaned up [ 619.199702][ T9845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 619.230675][ T9845] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 619.243833][ T9845] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 619.243858][ T9845] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.719: Failed to acquire dquot type 1 [ 619.508196][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 620.367050][ T9880] loop4: detected capacity change from 0 to 512 [ 620.374856][ T5005] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 620.496395][ T9880] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.723: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 620.496448][ T9880] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 620.497074][ T9880] EXT4-fs error (device loop4): ext4_quota_enable:7235: comm syz.4.723: Bad quota inode: 4, type: 1 [ 620.497097][ T9880] loop4: lost filesystem error report for type 5 error -117 [ 620.497578][ T9880] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 620.504356][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 620.504377][ C0] EXT4-fs (loop4): initial error at time 1781470717: ext4_ext_check_inode:521: inode 4 [ 620.504402][ C0] EXT4-fs (loop4): last error at time 1781470717: ext4_quota_enable:7235 [ 620.507704][ T9880] EXT4-fs (loop4): mount failed [ 620.551085][ T5005] usb 3-1: device descriptor read/64, error -71 [ 620.769936][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.770293][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.770589][ T9715] bridge_slave_0: entered allmulticast mode [ 620.804456][ T9715] bridge_slave_0: entered promiscuous mode [ 620.816082][ T5005] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 620.909151][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.909358][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.917534][ T9715] bridge_slave_1: entered allmulticast mode [ 620.928974][ T9715] bridge_slave_1: entered promiscuous mode [ 620.962691][ T5005] usb 3-1: device descriptor read/64, error -71 [ 621.077999][ T5005] usb usb3-port1: attempt power cycle [ 621.204794][ T9715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.323738][ T9884] loop4: detected capacity change from 0 to 32768 [ 621.470276][ T9884] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 621.500987][ T5005] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 621.523092][ T5005] usb 3-1: device descriptor read/8, error -71 [ 621.761762][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 621.811089][ T5005] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 621.844100][ T5005] usb 3-1: device descriptor read/8, error -71 [ 621.918976][ T9715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.961475][ T5005] usb usb3-port1: unable to enumerate USB device [ 623.035905][ T9715] team0: Port device team_slave_0 added [ 623.066134][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.066504][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.066797][ T9742] bridge_slave_0: entered allmulticast mode [ 623.077190][ T9742] bridge_slave_0: entered promiscuous mode [ 623.316817][ T9715] team0: Port device team_slave_1 added [ 623.721353][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.721631][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.721935][ T9742] bridge_slave_1: entered allmulticast mode [ 623.725521][ T9742] bridge_slave_1: entered promiscuous mode [ 624.089550][ T9905] FAULT_INJECTION: forcing a failure. [ 624.089550][ T9905] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 624.089611][ T9905] CPU: 1 UID: 0 PID: 9905 Comm: syz.4.729 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 624.089630][ T9905] Tainted: [L]=SOFTLOCKUP [ 624.089635][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.089646][ T9905] Call Trace: [ 624.089655][ T9905] [ 624.089733][ T9905] dump_stack_lvl+0xe8/0x150 [ 624.089822][ T9905] should_fail_ex+0x467/0x600 [ 624.089882][ T9905] prepare_alloc_pages+0x223/0x690 [ 624.089935][ T9905] __alloc_frozen_pages_noprof+0x12f/0x380 [ 624.089954][ T9905] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 624.090004][ T9905] ? __pfx_policy_nodemask+0x10/0x10 [ 624.090054][ T9905] ? __lock_acquire+0x683/0x2ce0 [ 624.090118][ T9905] alloc_pages_mpol+0xce/0x280 [ 624.090161][ T9905] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 624.090179][ T9905] vma_alloc_folio_noprof+0xe1/0x1e0 [ 624.090197][ T9905] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 624.090214][ T9905] ? __pte_offset_map+0x29/0x200 [ 624.090255][ T9905] do_pte_missing+0x835/0x28f0 [ 624.090319][ T9905] ? handle_mm_fault+0xe9/0x1520 [ 624.090336][ T9905] handle_mm_fault+0xe0b/0x1520 [ 624.090354][ T9905] ? handle_mm_fault+0xe9/0x1520 [ 624.090370][ T9905] ? __pfx_handle_mm_fault+0x10/0x10 [ 624.090384][ T9905] ? follow_page_pte+0xaf1/0xe80 [ 624.090428][ T9905] ? __pfx_follow_page_pte+0x10/0x10 [ 624.090449][ T9905] __get_user_pages+0x166b/0x2590 [ 624.090484][ T9905] __gup_longterm_locked+0xd52/0x15c0 [ 624.090500][ T9905] ? lock_acquire+0x106/0x350 [ 624.090521][ T9905] ? sanity_check_pinned_pages+0x810/0x8d0 [ 624.090577][ T9905] gup_fast_fallback+0x1cf7/0x2040 [ 624.090612][ T9905] ? __pfx_gup_fast_fallback+0x10/0x10 [ 624.090624][ T9905] ? rcu_is_watching+0x15/0xb0 [ 624.090668][ T9905] ? rds_info_getsockopt+0x248/0x580 [ 624.090710][ T9905] ? trace_kmalloc+0x2a/0xf0 [ 624.090774][ T9905] ? pin_user_pages_fast+0x4d/0xb0 [ 624.090789][ T9905] iov_iter_extract_pages+0x369/0x5f0 [ 624.090846][ T9905] rds_info_getsockopt+0x27c/0x580 [ 624.090858][ T9905] ? kstrtouint+0x6e/0xe0 [ 624.090900][ T9905] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 624.090922][ T9905] ? __might_fault+0xaf/0x130 [ 624.090937][ T9905] ? __might_fault+0xaf/0x130 [ 624.090953][ T9905] rds_getsockopt+0x38b/0x600 [ 624.090973][ T9905] ? __pfx_rds_getsockopt+0x10/0x10 [ 624.090996][ T9905] do_sock_getsockopt+0x6ae/0x7e0 [ 624.091018][ T9905] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 624.091044][ T9905] ? __fget_files+0x3a8/0x420 [ 624.091085][ T9905] ? __fget_files+0x2a/0x420 [ 624.091103][ T9905] __x64_sys_getsockopt+0x1aa/0x250 [ 624.091122][ T9905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.091137][ T9905] do_syscall_64+0x174/0x580 [ 624.091153][ T9905] ? trace_irq_disable+0x3b/0x140 [ 624.091216][ T9905] ? clear_bhb_loop+0x40/0x90 [ 624.091232][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.091244][ T9905] RIP: 0033:0x7f3521dcce59 [ 624.091293][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.091305][ T9905] RSP: 002b:00007f3520026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 624.091325][ T9905] RAX: ffffffffffffffda RBX: 00007f3522045fa0 RCX: 00007f3521dcce59 [ 624.091334][ T9905] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 624.091342][ T9905] RBP: 00007f3520026090 R08: 0000200000000400 R09: 0000000000000000 [ 624.091350][ T9905] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 624.091358][ T9905] R13: 00007f3522046038 R14: 00007f3522045fa0 R15: 00007ffd43f43228 [ 624.091380][ T9905] [ 624.432585][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.432669][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.669239][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.669254][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.669277][ T9715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.707540][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.765694][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.765712][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.765735][ T9715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.831147][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.944740][ T9909] loop4: detected capacity change from 0 to 256 [ 625.223116][ T5601] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 625.372527][ T5601] usb 5-1: Using ep0 maxpacket: 16 [ 625.375864][ T5601] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 625.375886][ T5601] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 625.375900][ T5601] usb 5-1: config 0 has no interface number 0 [ 625.378714][ T5601] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 625.378739][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.378755][ T5601] usb 5-1: Product: syz [ 625.378768][ T5601] usb 5-1: Manufacturer: syz [ 625.378779][ T5601] usb 5-1: SerialNumber: syz [ 625.388610][ T5601] usb 5-1: config 0 descriptor?? [ 625.402278][ T5601] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 625.710748][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 625.980154][ T9913] loop2: detected capacity change from 0 to 32768 [ 626.006104][ T9742] team0: Port device team_slave_0 added [ 626.139964][ T9742] team0: Port device team_slave_1 added [ 626.353568][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 626.459021][ T9715] hsr_slave_0: entered promiscuous mode [ 626.460684][ T9715] hsr_slave_1: entered promiscuous mode [ 626.471129][ T9715] debugfs: 'hsr0' already exists in 'hsr' [ 626.471156][ T9715] Cannot create hsr debugfs directory [ 626.575788][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.575803][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.575836][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.676045][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.676059][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.676077][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.810223][ T9463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.953550][ T5601] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 626.953572][ T5601] uvcvideo 5-1:0.105: No valid video chain found. [ 626.998598][ T5601] usb 5-1: USB disconnect, device number 29 [ 627.251933][ T9915] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 627.251933][ T9915] [ 627.306295][ T9742] hsr_slave_0: entered promiscuous mode [ 627.308330][ T9742] hsr_slave_1: entered promiscuous mode [ 627.309988][ T9742] debugfs: 'hsr0' already exists in 'hsr' [ 627.310013][ T9742] Cannot create hsr debugfs directory [ 627.379642][ T9915] ERROR: (device loop2): remounting filesystem as read-only [ 627.709915][ T9463] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.802516][ T9933] loop4: detected capacity change from 0 to 32768 [ 627.938991][ T9933] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 628.413947][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.415766][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.789782][ T5612] ocfs2: Unmounting device (7,4) on (node local) [ 629.090062][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 630.216925][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 630.328020][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 630.349068][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 630.386272][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 630.389383][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 630.681453][ T1176] bridge_slave_1: left allmulticast mode [ 630.681486][ T1176] bridge_slave_1: left promiscuous mode [ 630.681703][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.861989][ T1176] bridge_slave_0: left allmulticast mode [ 630.862014][ T1176] bridge_slave_0: left promiscuous mode [ 630.862209][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.111251][ T1176] bridge_slave_1: left allmulticast mode [ 631.111286][ T1176] bridge_slave_1: left promiscuous mode [ 631.111482][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.236003][ T1176] bridge_slave_0: left allmulticast mode [ 631.236026][ T1176] bridge_slave_0: left promiscuous mode [ 631.236190][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.202028][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.281607][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.302991][ T1176] bond0 (unregistering): Released all slaves [ 632.581174][ T4926] Bluetooth: hci5: command tx timeout [ 632.911782][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.992015][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.013690][ T1176] bond0 (unregistering): Released all slaves [ 633.523496][ T9977] loop4: detected capacity change from 0 to 256 [ 633.524157][ T9977] exfat: Deprecated parameter 'utf8' [ 634.138753][ T9977] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 634.868149][ T4926] Bluetooth: hci5: command tx timeout [ 636.331509][ T5601] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 636.510941][ T5601] usb 5-1: Using ep0 maxpacket: 8 [ 636.523455][ T5601] usb 5-1: unable to get BOS descriptor or descriptor too short [ 636.524629][ T5601] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 636.524652][ T5601] usb 5-1: config 0 has no interface number 0 [ 636.524692][ T5601] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 48, changing to 9 [ 636.524715][ T5601] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 8240, setting to 1024 [ 636.524738][ T5601] usb 5-1: config 0 interface 88 has no altsetting 0 [ 636.594354][ T5601] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 636.594381][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 636.594398][ T5601] usb 5-1: Product: syz [ 636.594411][ T5601] usb 5-1: Manufacturer: syz [ 636.594422][ T5601] usb 5-1: SerialNumber: syz [ 636.638146][ T5601] usb 5-1: config 0 descriptor?? [ 636.905228][ T4926] Bluetooth: hci5: command tx timeout [ 636.924728][ T5601] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input9 [ 636.982456][ T1176] hsr_slave_0: left promiscuous mode [ 637.023365][ T1176] hsr_slave_1: left promiscuous mode [ 637.024017][ T5601] usb 5-1: USB disconnect, device number 30 [ 637.024186][ C1] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 637.031900][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.066719][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.192827][ T5885] udevd[5885]: Error opening device "/dev/input/event4": No such file or directory [ 637.192957][ T5885] udevd[5885]: Unable to EVIOCGABS device "/dev/input/event4" [ 637.193060][ T5885] udevd[5885]: Unable to EVIOCGABS device "/dev/input/event4" [ 637.278938][ T1176] hsr_slave_0: left promiscuous mode [ 637.311005][ T1176] hsr_slave_1: left promiscuous mode [ 637.312087][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.353661][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.272705][T10007] loop4: detected capacity change from 0 to 512 [ 638.687375][T10010] IPVS: set_ctl: invalid protocol: 1 172.20.20.27:21 [ 638.981259][ T4926] Bluetooth: hci5: command tx timeout [ 640.253893][T10026] netlink: 277 bytes leftover after parsing attributes in process `syz.4.746'. [ 640.253928][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 640.305110][T10026] netlink: 48 bytes leftover after parsing attributes in process `syz.4.746'. [ 640.311899][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 640.911835][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 640.971955][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 641.165877][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 643.777647][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.777938][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.778313][ T9958] bridge_slave_0: entered allmulticast mode [ 643.812025][ T9958] bridge_slave_0: entered promiscuous mode [ 643.860200][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.860367][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.860573][ T9958] bridge_slave_1: entered allmulticast mode [ 643.866775][ T9958] bridge_slave_1: entered promiscuous mode [ 645.301324][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.322339][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.497917][ T9958] team0: Port device team_slave_0 added [ 645.567978][ T9958] team0: Port device team_slave_1 added [ 647.947803][ T2209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 648.004594][T10078] loop2: detected capacity change from 0 to 128 [ 648.385973][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.385990][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.386012][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.492982][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.492994][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.493008][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.637062][ T38] audit: type=1326 audit(1781470746.850:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.772474][ T38] audit: type=1326 audit(1781470746.870:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.772533][ T38] audit: type=1326 audit(1781470746.950:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.775143][ T38] audit: type=1326 audit(1781470747.010:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.775190][ T38] audit: type=1326 audit(1781470747.010:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.775235][ T38] audit: type=1326 audit(1781470747.010:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.775272][ T38] audit: type=1326 audit(1781470747.010:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.775538][ T38] audit: type=1326 audit(1781470747.010:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.797337][ T38] audit: type=1326 audit(1781470747.030:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 649.797393][ T38] audit: type=1326 audit(1781470747.030:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.756" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1963ce59 code=0x7ffc0000 [ 650.189843][ T9958] hsr_slave_0: entered promiscuous mode [ 650.192789][ T9958] hsr_slave_1: entered promiscuous mode [ 651.281233][T10123] loop2: detected capacity change from 0 to 4096 [ 651.340266][T10123] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 652.890492][T10123] ntfs3(loop2): Failed to load $Extend (-2). [ 652.890551][T10123] ntfs3(loop2): Failed to initialize $Extend. [ 653.267951][T10137] loop4: detected capacity change from 0 to 2048 [ 653.529902][T10137] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 654.237976][T10161] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 654.458353][T10137] syz.4.761: attempt to access beyond end of device [ 654.458353][T10137] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 654.849665][T10171] loop2: detected capacity change from 0 to 512 [ 655.240365][T10179] loop4: detected capacity change from 0 to 64 [ 655.835924][T10196] loop4: detected capacity change from 0 to 164 [ 655.957384][ T9715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 655.998544][ T9715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.135943][T10199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.136458][T10199] batadv_slave_1: entered promiscuous mode [ 656.150958][ T5728] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 656.310964][ T5728] usb 5-1: Using ep0 maxpacket: 8 [ 656.312689][ T5728] usb 5-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 656.312738][ T5728] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 656.312757][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.329255][ T5728] usb 5-1: config 0 descriptor?? [ 656.344218][ T5728] rndis_host 5-1:0.0: rndis: master #0/ffff888022aea000 slave #1/0000000000000000 [ 656.371652][ T9715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 656.526740][ T9715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 656.558756][ T9715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 657.620455][ T9715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.590444][ T5728] usb 5-1: USB disconnect, device number 31 [ 659.351603][ T9715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 659.408818][ T9715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.428822][T10235] netlink: 164 bytes leftover after parsing attributes in process `syz.4.771'. [ 659.650114][ T38] kauditd_printk_skb: 111 callbacks suppressed [ 659.650130][ T38] audit: type=1326 audit(1781470756.880:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10234 comm="syz.4.771" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3521dcce59 code=0x0 [ 660.349541][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.439127][ T9715] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.485533][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.485780][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.523029][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.523254][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.911174][ T1176] bridge_slave_1: left allmulticast mode [ 661.911208][ T1176] bridge_slave_1: left promiscuous mode [ 661.911473][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.970521][T10270] loop4: detected capacity change from 0 to 4096 [ 662.094043][T10274] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 662.123884][ T1176] bridge_slave_0: left allmulticast mode [ 662.123916][ T1176] bridge_slave_0: left promiscuous mode [ 662.124150][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.505433][T10281] sctp: [Deprecated]: syz.4.776 (pid 10281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.505433][T10281] Use struct sctp_sack_info instead [ 662.551407][T10281] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 663.751687][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.881598][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.942747][ T1176] bond0 (unregistering): Released all slaves [ 663.982564][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 664.708089][ T1176] hsr_slave_0: left promiscuous mode [ 664.741843][ T1176] hsr_slave_1: left promiscuous mode [ 664.742910][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.783049][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.436763][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 665.485570][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 665.499274][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 665.520285][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 665.524858][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.653268][ T5601] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 665.741509][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 665.803014][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 665.830962][ T5601] usb 3-1: Using ep0 maxpacket: 16 [ 665.833997][ T5601] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 665.834030][ T5601] usb 3-1: can't read configurations, error -61 [ 665.981161][ T5601] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 666.172662][ T5601] usb 3-1: Using ep0 maxpacket: 16 [ 666.182182][ T5601] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 666.182217][ T5601] usb 3-1: can't read configurations, error -61 [ 666.182575][ T5601] usb usb3-port1: attempt power cycle [ 666.257792][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 666.550983][ T5601] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 666.621948][ T5601] usb 3-1: Using ep0 maxpacket: 16 [ 666.626329][ T5601] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 666.626361][ T5601] usb 3-1: can't read configurations, error -61 [ 666.801019][ T5601] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 666.874664][ T5601] usb 3-1: Using ep0 maxpacket: 16 [ 666.882820][ T5601] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 666.882855][ T5601] usb 3-1: can't read configurations, error -61 [ 666.883189][ T5601] usb usb3-port1: unable to enumerate USB device [ 667.706295][ T5630] Bluetooth: hci1: command tx timeout [ 669.023421][ T4926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 669.065546][ T4926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 669.069519][ T4926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 669.076727][ T4926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 669.085220][ T4926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 669.544687][ T37] kernel read not supported for file [fscontext] (pid: 37 comm: kworker/1:1) [ 669.793966][ T5630] Bluetooth: hci1: command tx timeout [ 670.714335][T10397] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001 [ 671.007496][ T5601] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 671.099404][T10322] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.103349][T10322] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.103653][T10322] bridge_slave_0: entered allmulticast mode [ 671.109766][T10322] bridge_slave_0: entered promiscuous mode [ 671.138133][T10322] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.138427][T10322] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.138685][T10322] bridge_slave_1: entered allmulticast mode [ 671.150658][T10322] bridge_slave_1: entered promiscuous mode [ 671.178002][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.178032][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.178066][ T5601] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 671.178085][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.221051][ T5630] Bluetooth: hci3: command tx timeout [ 671.259959][ T5601] usb 5-1: config 0 descriptor?? [ 671.862804][ T5630] Bluetooth: hci1: command tx timeout [ 672.025033][ T5601] waltop 0003:172F:0501.0006: item fetching failed at offset 5/7 [ 672.025775][ T5601] waltop 0003:172F:0501.0006: probe with driver waltop failed with error -22 [ 673.304047][ T5630] Bluetooth: hci3: command tx timeout [ 673.476275][T10322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.596686][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.597303][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.598692][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 673.598741][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 673.598753][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 673.768782][T10322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.941149][ T5630] Bluetooth: hci1: command tx timeout [ 674.216938][T10322] team0: Port device team_slave_0 added [ 674.236616][T10322] team0: Port device team_slave_1 added [ 674.885219][T10322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.885229][T10322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.885243][T10322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.205622][T10322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.205638][T10322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.205660][T10322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.381862][ T5630] Bluetooth: hci3: command tx timeout [ 675.545170][T10322] hsr_slave_0: entered promiscuous mode [ 675.551936][T10322] hsr_slave_1: entered promiscuous mode [ 675.557083][T10322] debugfs: 'hsr0' already exists in 'hsr' [ 675.557106][T10322] Cannot create hsr debugfs directory [ 675.616584][ T9958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 675.670324][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.709924][ T9958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 675.735479][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.797804][ T9958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 675.826357][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.856105][ T9958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 675.875123][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 676.059625][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.060047][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.060345][T10351] bridge_slave_0: entered allmulticast mode [ 676.065064][T10351] bridge_slave_0: entered promiscuous mode [ 676.092129][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.092419][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.092701][T10351] bridge_slave_1: entered allmulticast mode [ 676.095306][T10351] bridge_slave_1: entered promiscuous mode [ 676.345542][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.381773][T10483] loop4: detected capacity change from 0 to 1024 [ 781.440808][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 781.440825][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6513/2:b..l [ 781.440845][ C1] rcu: (detected by 1, t=10502 jiffies, g=53849, q=90 ncpus=2) [ 781.440859][ C1] task:kworker/u8:18 state:R running task stack:21920 pid:6513 tgid:6513 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 781.440889][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 781.440913][ C1] Call Trace: [ 781.440917][ C1] [ 781.440925][ C1] __schedule+0x1709/0x5530 [ 781.440951][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 781.440973][ C1] ? __pfx___schedule+0x10/0x10 [ 781.440991][ C1] preempt_schedule_irq+0x4d/0xa0 [ 781.441057][ C1] irqentry_exit+0x14f/0x8f0 [ 781.441097][ C1] ? trace_irq_disable+0x3b/0x140 [ 781.441122][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 781.441156][ C1] RIP: 0010:lock_release+0x2d7/0x3c0 [ 781.441176][ C1] Code: 9a d4 10 00 00 00 00 eb b5 e8 65 f9 8e 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 35 54 d4 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 da c2 92 09 cc 48 8d 3d 52 74 ef [ 781.441184][ C1] RSP: 0018:ffffc900040c7a08 EFLAGS: 00000282 [ 781.441193][ C1] RAX: 52b030569fee1300 RBX: 0000000000000287 RCX: 0000000000000046 [ 781.441199][ C1] RDX: 00000000d11a8e8b RSI: ffffffff8d8bb0c7 RDI: ffffffff8baa3c80 [ 781.441206][ C1] RBP: ffff88802dddcad0 R08: ffffffff8187a18c R09: 0000000000000000 [ 781.441212][ C1] R10: 0000000000000000 R11: ffffffff8dfcb040 R12: 0000000000000006 [ 781.441218][ C1] R13: 0000000000000006 R14: ffffffff8de611a0 R15: ffff88802dddbe00 [ 781.441228][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 781.441272][ C1] __local_bh_enable_ip+0x98/0x2b0 [ 781.441284][ C1] ? __alloc_skb+0x189/0x7a0 [ 781.441297][ C1] __alloc_skb+0x1ad/0x7a0 [ 781.441310][ C1] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 781.441352][ C1] ? process_one_work+0x8cd/0x12b0 [ 781.441391][ C1] process_one_work+0x93a/0x12b0 [ 781.441413][ C1] ? __pfx_process_one_work+0x10/0x10 [ 781.441425][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 781.441462][ C1] ? assign_work+0x3cf/0x5d0 [ 781.441477][ C1] worker_thread+0xb05/0x10d0 [ 781.441491][ C1] ? __kthread_parkme+0x71/0x1f0 [ 781.441508][ C1] kthread+0x388/0x470 [ 781.441523][ C1] ? __pfx_worker_thread+0x10/0x10 [ 781.441531][ C1] ? __pfx_kthread+0x10/0x10 [ 781.441542][ C1] ret_from_fork+0x514/0xb70 [ 781.441558][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 781.441569][ C1] ? __switch_to+0xc89/0x1420 [ 781.441581][ C1] ? __pfx_kthread+0x10/0x10 [ 781.441592][ C1] ret_from_fork_asm+0x1a/0x30 [ 781.441614][ C1] [ 781.441618][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g53849 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 781.441629][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=28574 [ 781.441635][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g53849 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 781.441644][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 781.441649][ C1] rcu: RCU grace-period kthread stack dump: [ 781.441652][ C1] task:rcu_preempt state:I stack:27784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 781.441687][ C1] Call Trace: [ 781.441690][ C1] [ 781.441696][ C1] __schedule+0x1709/0x5530 [ 781.441715][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 781.441729][ C1] ? __pfx___schedule+0x10/0x10 [ 781.441744][ C1] ? schedule+0x90/0x360 [ 781.441756][ C1] schedule+0x164/0x360 [ 781.441767][ C1] schedule_timeout+0x152/0x2c0 [ 781.441810][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 781.441823][ C1] ? __pfx_process_timeout+0x10/0x10 [ 781.441837][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 781.441849][ C1] ? prepare_to_swait_event+0x322/0x350 [ 781.441863][ C1] rcu_gp_fqs_loop+0x30c/0x11c0 [ 781.441920][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 781.441934][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 781.441945][ C1] ? rcu_gp_init+0x1372/0x1610 [ 781.441956][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.441970][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 781.441985][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.441999][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 781.442012][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.442024][ C1] ? __kthread_parkme+0x71/0x1f0 [ 781.442034][ C1] ? __kthread_parkme+0x196/0x1f0 [ 781.442046][ C1] kthread+0x388/0x470 [ 781.442057][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 781.442068][ C1] ? __pfx_kthread+0x10/0x10 [ 781.442079][ C1] ret_from_fork+0x514/0xb70 [ 781.442092][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 781.442103][ C1] ? __switch_to+0xc89/0x1420 [ 781.442113][ C1] ? __pfx_kthread+0x10/0x10 [ 781.442125][ C1] ret_from_fork_asm+0x1a/0x30 [ 781.442144][ C1] [ 781.442147][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 781.442153][ C1] Sending NMI from CPU 1 to CPUs 0: [ 781.442195][ C0] NMI backtrace for cpu 0 [ 781.442219][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 781.442270][ C0] Tainted: [L]=SOFTLOCKUP [ 781.442282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.442302][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 781.442344][ C0] Code: 5b 60 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 b2 19 00 fb f4 8c cd 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 781.442355][ C0] RSP: 0018:ffffffff8dc07de0 EFLAGS: 00000242 [ 781.442368][ C0] RAX: 00000000009676c1 RBX: ffffffff819955ec RCX: 0000000080000001 [ 781.442378][ C0] RDX: 0000000000000001 RSI: ffffffff8d654f7c RDI: ffffffff8baa3c80 [ 781.442389][ C0] RBP: ffffffff8dc07eb8 R08: ffff8880b8633d5b R09: 1ffff110170c67ab [ 781.442400][ C0] R10: dffffc0000000000 R11: ffffed10170c67ac R12: 0000000000000000 [ 781.442409][ C0] R13: 1ffffffff1b9fde8 R14: 1ffffffff1b80fc4 R15: dffffc0000000000 [ 781.442420][ C0] FS: 0000000000000000(0000) GS:ffff888125ece000(0000) knlGS:0000000000000000 [ 781.442432][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.442443][ C0] CR2: 00007f17d365d000 CR3: 0000000038188000 CR4: 00000000003526f0 [ 781.442456][ C0] Call Trace: [ 781.442462][ C0] [ 781.442467][ C0] default_idle+0x9/0x20 [ 781.442519][ C0] default_idle_call+0x72/0xb0 [ 781.442541][ C0] do_idle+0x1cc/0x540 [ 781.442590][ C0] ? __pfx_do_idle+0x10/0x10 [ 781.442617][ C0] cpu_startup_entry+0x43/0x60 [ 781.442636][ C0] rest_init+0x2de/0x300 [ 781.442651][ C0] start_kernel+0x392/0x3e0 [ 781.442730][ C0] x86_64_start_reservations+0x24/0x30 [ 781.442801][ C0] x86_64_start_kernel+0x137/0x1b0 [ 781.442823][ C0] common_startup_64+0x13e/0x157 [ 781.442870][ C0] [ 838.472995][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.473357][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.490967][ T4926] Bluetooth: hci3: command tx timeout [ 838.837666][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 838.888056][T10483] hfsplus: failed to load catalog file [ 839.555132][ T1176] bridge_slave_1: left allmulticast mode [ 839.555164][ T1176] bridge_slave_1: left promiscuous mode [ 839.555539][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.885433][ T1176] bridge_slave_0: left allmulticast mode [ 839.885467][ T1176] bridge_slave_0: left promiscuous mode [ 839.885764][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.056621][T10485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 840.062096][T10485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 840.068859][T10485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 840.070010][T10485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 840.124946][T10485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 840.672598][T10485] Bluetooth: hci5: command 0x0406 tx timeout [ 840.672651][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 840.744456][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 841.388230][ T4926] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 841.489998][ T4926] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 841.537637][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 841.544106][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 841.545060][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 841.573346][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 841.614370][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 841.769745][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 841.774260][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 841.776852][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to send rpc fd=3 want=160 sent=0 n=-1 (errno 32: Broken pipe) [ 842.174688][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.251948][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.266954][ T4926] Bluetooth: hci2: command tx timeout [ 842.378487][ T9467] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 842.440050][ T9467] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 842.446884][ T9467] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 842.449573][ T1176] bond0 (unregistering): Released all slaves [ 842.452301][ T9467] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 842.457006][ T9467] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 842.806234][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.862536][ T4926] Bluetooth: hci7: command tx timeout [ 845.911001][ T1176] hsr_slave_0: left promiscuous mode [ 845.951015][ T1176] hsr_slave_1: left promiscuous mode [ 845.952163][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.992193][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.461546][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 846.504613][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 846.873798][T10418] bond0: (slave syz_tun): Releasing backup interface [ 846.988874][ T37] usb 5-1: USB disconnect, device number 32 [ 847.568322][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 848.164847][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14