last executing test programs: 1m52.645294624s ago: executing program 1 (id=7): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$drirender128(0xffffff9c, 0x0, 0x20400, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0), &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x0, 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000980)={r4, r5, r6, 0x0, 0x0, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = eventfd(0xffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x4c) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r7) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r7}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x50, &(0x7f0000000040)=0x6, 0x4) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 1m48.103968223s ago: executing program 1 (id=8): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 1m47.671015121s ago: executing program 1 (id=9): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x3e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000"], 0x50) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x110b, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x2}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a0500000000000000000001000000f5ff7caf73797a30000000004c000000090a010400000000000000000100000008000a4000000003"], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x18, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000064560000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffcf03000008000000b7040000000000008500000082000000bf9800000000000056080000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m44.924924893s ago: executing program 1 (id=20): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1m44.183785078s ago: executing program 1 (id=27): syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)={[{@eas_rw}, {@eas_no}, {@case_asis}, {@check_none}]}, 0x5, 0x9e2c, &(0x7f0000013e80)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x2000040) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x3, 0x0, 0x2000dd5, 0x88d7, 0x8e, 0x2, 0x8012, 0x1006, 0xffffffff, 0x203, 0x7, 0x10000009, 0x3, 0x5, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x3, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0xc, 0x4, 0x400002, 0x22]}) chroot(&(0x7f0000000300)='./file0/../file0/file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r3, 0x1, 0x1) 1m43.653648725s ago: executing program 1 (id=35): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1m42.536269513s ago: executing program 32 (id=35): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 10.403072974s ago: executing program 0 (id=399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020601010000000000000000010000000c0007800800120000000000050001000710970005000400000000000900020073797a300000000005000500020000000d000300686173683a6e6574"], 0x54}}, 0x4000000) 9.871958619s ago: executing program 0 (id=395): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000580)=ANY=[], 0x1, 0x553e, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 8.288045268s ago: executing program 2 (id=403): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)) 8.196045356s ago: executing program 2 (id=404): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.963876266s ago: executing program 2 (id=406): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xc2ee, 0x40080) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 5.858452389s ago: executing program 2 (id=408): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 5.683999185s ago: executing program 0 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.515473647s ago: executing program 3 (id=412): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 4.36171793s ago: executing program 3 (id=413): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x56e02a3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xfce1) 4.171732557s ago: executing program 0 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x240008c0) 3.963529065s ago: executing program 0 (id=416): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xc2ee, 0x40080) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 3.827771096s ago: executing program 4 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x34}}, 0x0) 2.043859552s ago: executing program 3 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2.043531132s ago: executing program 4 (id=419): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@minixdf}, {}, {@nodioread_nolock}, {@errors_continue}, {@lazytime}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1.679644304s ago: executing program 3 (id=420): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) syz_fuse_handle_req(r7, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r8 = socket(0x10, 0x3, 0x0) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000200)=""/100, 0x64}, {0x0}], 0x2) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r9, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x7fff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) 1.678118504s ago: executing program 0 (id=421): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1.516108888s ago: executing program 4 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 867.986264ms ago: executing program 2 (id=423): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000022c0)) 812.455779ms ago: executing program 4 (id=424): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 735.498446ms ago: executing program 2 (id=425): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000240)='\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c) tkill(r1, 0xb) 619.960136ms ago: executing program 4 (id=426): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x56e02a3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xfce1) 594.212078ms ago: executing program 3 (id=427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r1, 0x1, 0x13, 0xfffe) 180.416314ms ago: executing program 3 (id=428): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xc2ee, 0x40080) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 0s ago: executing program 4 (id=429): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000240), &(0x7f0000000340)=""/86}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 80.540669][ T5753] cgroup: Unknown subsys name 'net' [ 80.681562][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.369417][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.895552][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.904231][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.911957][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.920419][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.928281][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.935787][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.940597][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.947420][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.961230][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.971305][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.990190][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.998193][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.008928][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.019575][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.023172][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.030247][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.036195][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.044045][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.053457][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.061992][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.071514][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.079931][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.081263][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.095086][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.613794][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 85.686604][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 85.736548][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 85.827650][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 85.877204][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.884537][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.892121][ T5763] bridge_slave_0: entered allmulticast mode [ 85.900295][ T5763] bridge_slave_0: entered promiscuous mode [ 85.945127][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.952445][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.959700][ T5763] bridge_slave_1: entered allmulticast mode [ 85.967432][ T5763] bridge_slave_1: entered promiscuous mode [ 86.024868][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.032129][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.040274][ T5765] bridge_slave_0: entered allmulticast mode [ 86.047984][ T5765] bridge_slave_0: entered promiscuous mode [ 86.073502][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.080762][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.088644][ T5766] bridge_slave_0: entered allmulticast mode [ 86.096721][ T5766] bridge_slave_0: entered promiscuous mode [ 86.105481][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.112846][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.120035][ T5766] bridge_slave_1: entered allmulticast mode [ 86.127534][ T5766] bridge_slave_1: entered promiscuous mode [ 86.134808][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.142004][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.149748][ T5765] bridge_slave_1: entered allmulticast mode [ 86.157530][ T5765] bridge_slave_1: entered promiscuous mode [ 86.167205][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.179626][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.274370][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.287375][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.335486][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.343414][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.350603][ T5764] bridge_slave_0: entered allmulticast mode [ 86.359232][ T5764] bridge_slave_0: entered promiscuous mode [ 86.381225][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.393819][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.406822][ T5763] team0: Port device team_slave_0 added [ 86.414077][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.421304][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.429557][ T5764] bridge_slave_1: entered allmulticast mode [ 86.437740][ T5764] bridge_slave_1: entered promiscuous mode [ 86.481963][ T5763] team0: Port device team_slave_1 added [ 86.515101][ T5766] team0: Port device team_slave_0 added [ 86.558643][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.570526][ T5766] team0: Port device team_slave_1 added [ 86.594212][ T5765] team0: Port device team_slave_0 added [ 86.601379][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.608679][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.634729][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.650783][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.686425][ T5765] team0: Port device team_slave_1 added [ 86.706735][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.713822][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.740596][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.787185][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.794569][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.820917][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.846448][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.853518][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.879766][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.908391][ T5764] team0: Port device team_slave_0 added [ 86.918140][ T5764] team0: Port device team_slave_1 added [ 86.925228][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.932188][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.958238][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.975457][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.982828][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.010036][ T5770] Bluetooth: hci0: command tx timeout [ 87.019480][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.050654][ T5763] hsr_slave_0: entered promiscuous mode [ 87.057576][ T5763] hsr_slave_1: entered promiscuous mode [ 87.152507][ T5770] Bluetooth: hci3: command tx timeout [ 87.166925][ T5770] Bluetooth: hci2: command tx timeout [ 87.172835][ T5770] Bluetooth: hci1: command tx timeout [ 87.180678][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.193231][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.224195][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.303759][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.310762][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.343659][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.365695][ T5765] hsr_slave_0: entered promiscuous mode [ 87.372903][ T5765] hsr_slave_1: entered promiscuous mode [ 87.379336][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.392568][ T5765] Cannot create hsr debugfs directory [ 87.450637][ T5766] hsr_slave_0: entered promiscuous mode [ 87.457615][ T5766] hsr_slave_1: entered promiscuous mode [ 87.465807][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.473771][ T5766] Cannot create hsr debugfs directory [ 87.641457][ T5764] hsr_slave_0: entered promiscuous mode [ 87.653616][ T5764] hsr_slave_1: entered promiscuous mode [ 87.659815][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.667458][ T5764] Cannot create hsr debugfs directory [ 87.991665][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.005732][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.017392][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.028493][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.088550][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.109603][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.120992][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.131908][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.228868][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.240560][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.250951][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.273513][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.359237][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.371202][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.381941][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.404023][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.556346][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.599342][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.620414][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.663409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.670743][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.688746][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.696053][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.707878][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.721006][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.738520][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.764473][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.771761][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.792183][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.799494][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.834852][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.861092][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.868311][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.880420][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.887644][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.905367][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.918154][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.925355][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.980383][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.987618][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.076819][ T5770] Bluetooth: hci0: command tx timeout [ 89.233121][ T5770] Bluetooth: hci2: command tx timeout [ 89.235059][ T5777] Bluetooth: hci1: command tx timeout [ 89.238624][ T5770] Bluetooth: hci3: command tx timeout [ 89.505725][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.650790][ T5763] veth0_vlan: entered promiscuous mode [ 89.669623][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.688037][ T5763] veth1_vlan: entered promiscuous mode [ 89.705763][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.718932][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.779456][ T5763] veth0_macvtap: entered promiscuous mode [ 89.814174][ T5763] veth1_macvtap: entered promiscuous mode [ 89.861719][ T5764] veth0_vlan: entered promiscuous mode [ 89.873312][ T5766] veth0_vlan: entered promiscuous mode [ 89.905283][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.923525][ T5764] veth1_vlan: entered promiscuous mode [ 89.931663][ T5766] veth1_vlan: entered promiscuous mode [ 89.947254][ T5765] veth0_vlan: entered promiscuous mode [ 89.971480][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.999829][ T5765] veth1_vlan: entered promiscuous mode [ 90.010834][ T5763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.020618][ T5763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029492][ T5763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.039444][ T5763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.120686][ T5764] veth0_macvtap: entered promiscuous mode [ 90.154914][ T5764] veth1_macvtap: entered promiscuous mode [ 90.164315][ T5766] veth0_macvtap: entered promiscuous mode [ 90.193573][ T5766] veth1_macvtap: entered promiscuous mode [ 90.228646][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.240518][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.261024][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.276466][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.288069][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.297048][ T5765] veth0_macvtap: entered promiscuous mode [ 90.321490][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.332170][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.345848][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.359167][ T5765] veth1_macvtap: entered promiscuous mode [ 90.379661][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.391509][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.404041][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.411488][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.420918][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.429795][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.463746][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.474837][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.485177][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.496666][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.508836][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.547766][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.559678][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.575017][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.585968][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.596840][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.607545][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.619440][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.629609][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.641425][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.657075][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.667840][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.683469][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.709546][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.719307][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.729641][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.738726][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763892][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.774597][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.807243][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.824706][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.835661][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.846570][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.858724][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.960687][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.988037][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.008930][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.018428][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.153561][ T5770] Bluetooth: hci0: command tx timeout [ 91.173719][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.181604][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.274691][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.302306][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.318961][ T5770] Bluetooth: hci1: command tx timeout [ 91.325328][ T5777] Bluetooth: hci2: command tx timeout [ 91.330761][ T5777] Bluetooth: hci3: command tx timeout [ 91.369385][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.396660][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.439032][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.477104][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.496028][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.503989][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.573707][ T5866] syz.1.6[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.619443][ T5866] loop1: detected capacity change from 0 to 128 [ 91.632006][ T5866] ======================================================= [ 91.632006][ T5866] WARNING: The mand mount option has been deprecated and [ 91.632006][ T5866] and is ignored by this kernel. Remove the mand [ 91.632006][ T5866] option from the mount to silence this warning. [ 91.632006][ T5866] ======================================================= [ 91.742474][ T5866] hpfs: hpfs_map_sector(): read error [ 91.748178][ T5866] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 91.788675][ T5866] hpfs: hpfs_map_sector(): read error [ 91.825158][ T5866] process 'syz.1.6' launched './file0' with NULL argv: empty string added [ 92.135058][ T8] cfg80211: failed to load regulatory.db [ 92.256429][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.269165][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.402682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.202267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.210789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.232611][ T5774] Bluetooth: hci0: command tx timeout [ 93.393467][ T5774] Bluetooth: hci3: command tx timeout [ 93.398974][ T5774] Bluetooth: hci1: command tx timeout [ 93.404451][ T5777] Bluetooth: hci2: command tx timeout [ 93.633014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.641246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.792535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.800817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.032548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.040863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.943064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.861983][ T5879] loop2: detected capacity change from 0 to 4096 [ 96.974313][ T5881] loop1: detected capacity change from 0 to 8192 [ 97.000407][ T5881] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.018529][ T5881] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 97.031999][ T5881] REISERFS (device loop1): using journaled data mode [ 97.039603][ T5881] reiserfs: using flush barriers [ 97.061063][ T5881] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.079276][ T5881] REISERFS (device loop1): checking transaction log (loop1) [ 97.115763][ T5881] REISERFS (device loop1): Using r5 hash to sort names [ 97.125395][ T5881] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 97.140975][ T5881] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 97.436885][ T5890] input: syz0 as /devices/virtual/input/input5 [ 97.770639][ T5893] syzkaller0: entered promiscuous mode [ 97.792523][ T5893] syzkaller0: entered allmulticast mode [ 97.837200][ T5893] TC_ACT_REPEAT abuse ? [ 98.161394][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 98.717803][ T5905] loop0: detected capacity change from 0 to 128 [ 98.748411][ T5905] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 98.766954][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 98.770200][ T5905] hpfs: filesystem error: improperly stopped [ 98.787045][ T5905] hpfs: You really don't want any checks? You are crazy... [ 98.793276][ T5901] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.803306][ T5901] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.812040][ T5901] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.820832][ T5901] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.836406][ T5905] hpfs: hpfs_map_sector(): read error [ 98.841854][ T5905] hpfs: code page support is disabled [ 98.850052][ T5901] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.859921][ T5901] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.868901][ T5901] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.878950][ T5901] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.895114][ T5905] hpfs: hpfs_map_4sectors(): unaligned read [ 98.915945][ T5905] hpfs: hpfs_map_4sectors(): unaligned read [ 98.921907][ T5905] hpfs: filesystem error: unable to find root dir [ 98.973073][ T5905] hpfs: hpfs_map_4sectors(): unaligned read [ 98.983210][ T5905] hpfs: hpfs_map_4sectors(): unaligned read [ 98.997966][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 99.013767][ T5901] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.022575][ T5901] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.031310][ T5901] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.041572][ T5901] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.241987][ T5901] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.252474][ T5901] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.261382][ T5901] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.271198][ T5901] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.768104][ T5913] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure [ 99.788585][ T5903] Zero length message leads to an empty skb [ 100.179002][ T5917] loop1: detected capacity change from 0 to 2048 [ 100.279400][ T5917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.964921][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 101.189064][ T5763] syz-executor (5763) used greatest stack depth: 20840 bytes left [ 101.218304][ T5771] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.483683][ T2969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.822398][ T5771] usb 4-1: Using ep0 maxpacket: 8 [ 101.984377][ T2969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.090010][ T5771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.109254][ T5771] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.119540][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.135334][ T5771] usb 4-1: config 0 descriptor?? [ 102.148151][ T967] libceph: connect (1)[c::]:6789 error -101 [ 102.164958][ T967] libceph: mon0 (1)[c::]:6789 connect error [ 102.275541][ T2969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.388303][ T5771] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 102.415007][ T2969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.433548][ T967] libceph: connect (1)[c::]:6789 error -101 [ 102.439654][ T967] libceph: mon0 (1)[c::]:6789 connect error [ 102.456179][ T5949] ceph: No mds server is up or the cluster is laggy [ 102.624541][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.653248][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.945636][ T967] usb 4-1: USB disconnect, device number 2 [ 103.280431][ T5972] loop2: detected capacity change from 0 to 128 [ 103.307613][ T5972] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 103.336680][ T5972] hpfs: filesystem error: improperly stopped [ 103.359379][ T5972] hpfs: You really don't want any checks? You are crazy... [ 103.382786][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.391488][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.394098][ T5972] hpfs: hpfs_map_sector(): read error [ 103.401253][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.413777][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.421604][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.426295][ T5972] hpfs: code page support is disabled [ 103.429950][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.441831][ T5972] hpfs: hpfs_map_4sectors(): unaligned read [ 103.450911][ T5972] hpfs: hpfs_map_4sectors(): unaligned read [ 103.473771][ T5972] hpfs: filesystem error: unable to find root dir [ 103.510526][ T5977] loop0: detected capacity change from 0 to 512 [ 103.609904][ T5972] hpfs: hpfs_map_4sectors(): unaligned read [ 103.699509][ T5972] hpfs: hpfs_map_4sectors(): unaligned read [ 104.536456][ T8] libceph: connect (1)[c::]:6789 error -101 [ 104.543535][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 104.802905][ T8] libceph: connect (1)[c::]:6789 error -101 [ 104.809059][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 105.069541][ T6009] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 105.357580][ T8] libceph: connect (1)[c::]:6789 error -101 [ 105.454262][ T5995] ceph: No mds server is up or the cluster is laggy [ 105.472549][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 105.553302][ T5774] Bluetooth: hci0: command tx timeout [ 105.667099][ T6017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.708042][ T6016] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.825848][ T6021] loop3: detected capacity change from 0 to 128 [ 105.862613][ T6021] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 105.884912][ T6021] hpfs: filesystem error: improperly stopped [ 105.890963][ T6021] hpfs: You really don't want any checks? You are crazy... [ 105.899336][ T6021] hpfs: hpfs_map_sector(): read error [ 105.906062][ T6021] hpfs: code page support is disabled [ 105.913886][ T6021] hpfs: hpfs_map_4sectors(): unaligned read [ 105.920119][ T6021] hpfs: hpfs_map_4sectors(): unaligned read [ 105.928270][ T6021] hpfs: filesystem error: unable to find root dir [ 106.017913][ T6021] hpfs: hpfs_map_4sectors(): unaligned read [ 106.039375][ T6021] hpfs: hpfs_map_4sectors(): unaligned read [ 106.575142][ T2969] hsr_slave_0: left promiscuous mode [ 106.779792][ T2969] hsr_slave_1: left promiscuous mode [ 106.827903][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.837867][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.857083][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.865173][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.876781][ T2969] bridge_slave_1: left allmulticast mode [ 106.884674][ T2969] bridge_slave_1: left promiscuous mode [ 106.891626][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.906927][ T2969] bridge_slave_0: left allmulticast mode [ 106.912759][ T2969] bridge_slave_0: left promiscuous mode [ 106.919405][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.510217][ T2969] veth1_macvtap: left promiscuous mode [ 107.621696][ T2969] veth0_macvtap: left promiscuous mode [ 107.647527][ T5774] Bluetooth: hci0: command tx timeout [ 107.702765][ T2969] veth1_vlan: left promiscuous mode [ 107.722037][ T2969] veth0_vlan: left promiscuous mode [ 107.908103][ T6038] loop3: detected capacity change from 0 to 128 [ 108.441849][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 108.487109][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 108.526377][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.569198][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.968450][ T2969] bond0 (unregistering): Released all slaves [ 109.051068][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 109.432520][ T969] libceph: connect (1)[c::]:6789 error -101 [ 109.438635][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 109.590595][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.624984][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.642698][ T5974] bridge_slave_0: entered allmulticast mode [ 109.650162][ T5974] bridge_slave_0: entered promiscuous mode [ 109.687012][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.706948][ T969] libceph: connect (1)[c::]:6789 error -101 [ 109.713306][ T5774] Bluetooth: hci0: command tx timeout [ 109.731548][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 109.745487][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.777277][ T5974] bridge_slave_1: entered allmulticast mode [ 109.806461][ T5974] bridge_slave_1: entered promiscuous mode [ 109.828058][ T6066] loop0: detected capacity change from 0 to 8192 [ 109.867618][ T6066] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "smackfstransmute=" [ 110.033579][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.094891][ T6059] ceph: No mds server is up or the cluster is laggy [ 110.124201][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.365748][ T5974] team0: Port device team_slave_0 added [ 110.414714][ T5974] team0: Port device team_slave_1 added [ 110.596612][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.622856][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.648794][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.673985][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.699897][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.716510][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.742535][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.771291][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.985919][ T5974] hsr_slave_0: entered promiscuous mode [ 111.013589][ T5974] hsr_slave_1: entered promiscuous mode [ 111.036910][ T6099] loop0: detected capacity change from 0 to 512 [ 111.148268][ T6099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.163265][ T6099] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.225845][ T28] audit: type=1800 audit(1767957092.128:2): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.78" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 111.416226][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.676783][ T6116] loop2: detected capacity change from 0 to 1024 [ 111.709890][ T967] libceph: connect (1)[c::]:6789 error -101 [ 111.719726][ T6116] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 1536 [ 111.732466][ T967] libceph: mon0 (1)[c::]:6789 connect error [ 111.790061][ T5974] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.792597][ T5774] Bluetooth: hci0: command tx timeout [ 111.815554][ T5974] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.883908][ T5974] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.946450][ T5974] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.003218][ T8] libceph: connect (1)[c::]:6789 error -101 [ 112.009326][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 112.269313][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.359678][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.389121][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.397210][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.456019][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.463285][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.503810][ T6118] ceph: No mds server is up or the cluster is laggy [ 112.542831][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 112.553114][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 112.743360][ T6154] syz.2.88 uses obsolete (PF_INET,SOCK_PACKET) [ 112.871190][ T6151] loop0: detected capacity change from 0 to 4096 [ 112.902169][ T6151] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 113.014887][ T6151] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 113.122347][ T28] audit: type=1800 audit(1767957094.028:3): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 113.383859][ T6168] loop2: detected capacity change from 0 to 1024 [ 113.398926][ T6168] EXT4-fs: Ignoring removed nobh option [ 113.405415][ T6168] EXT4-fs: Ignoring removed bh option [ 113.406138][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.435347][ T6168] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.524306][ T6168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.589848][ T6177] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.713785][ T6168] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 15: block 209:freeing already freed block (bit 13); block bitmap corrupt. [ 113.906659][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.142955][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 114.149079][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 114.425677][ T5974] veth0_vlan: entered promiscuous mode [ 114.468532][ T5974] veth1_vlan: entered promiscuous mode [ 114.517783][ T8] libceph: connect (1)[c::]:6789 error -101 [ 114.524305][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 114.587183][ T5974] veth0_macvtap: entered promiscuous mode [ 114.612803][ T5974] veth1_macvtap: entered promiscuous mode [ 114.644014][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.659594][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.670138][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.681548][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.691497][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.702156][ T5755] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.711707][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.738837][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.773025][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.796614][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.819320][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.851990][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.878169][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.903466][ T6192] ceph: No mds server is up or the cluster is laggy [ 114.914480][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.933454][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.952471][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.964819][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.003711][ T5755] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 115.025877][ T5974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.042331][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.063186][ T5755] usb 1-1: config 0 descriptor?? [ 115.082404][ T5974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.082511][ T5974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.082558][ T5974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.362208][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.403956][ T6220] trusted_key: syz.2.100 sent an empty control message without MSG_MORE. [ 115.416221][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.514686][ T5755] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.532061][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.550884][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.588574][ T5755] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 115.747161][ T5755] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 116.036380][ T6222] fido_id (6222) used greatest stack depth: 20648 bytes left [ 116.131003][ T6230] loop3: detected capacity change from 0 to 1024 [ 116.189683][ T6230] EXT4-fs: Ignoring removed nobh option [ 116.212375][ T6230] EXT4-fs: Ignoring removed bh option [ 116.262757][ T6230] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.348988][ T6199] cp2112 0003:10C4:EA90.0001: Unsupported transaction 0 [ 116.387926][ T6243] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 116.400983][ T6243] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 116.413511][ T6230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.428205][ T6199] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 116.647711][ T5755] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 117.186267][ T5755] usb 1-1: USB disconnect, device number 2 [ 118.115301][ T6246] loop2: detected capacity change from 0 to 40427 [ 118.235451][ T6246] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 118.765089][ T6246] F2FS-fs (loop2): invalid crc value [ 119.970242][ T6246] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.978846][ T6255] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 120.010895][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.359346][ T6246] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.735362][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 122.903159][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.917736][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 122.946478][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 122.980213][ T6312] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 122.985293][ T6310] loop4: detected capacity change from 0 to 1024 [ 123.017210][ T6310] EXT4-fs: Ignoring removed nobh option [ 123.037440][ T6310] EXT4-fs: Ignoring removed bh option [ 123.049145][ T6310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.126861][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.248259][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.271319][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 123.361042][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 123.371207][ T6310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.408746][ T5860] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 123.508302][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.776299][ T6307] ceph: No mds server is up or the cluster is laggy [ 123.969866][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 124.023520][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 124.088850][ T5860] usb 4-1: config 0 descriptor?? [ 124.908224][ T6314] loop0: detected capacity change from 0 to 40427 [ 125.074447][ T6314] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 125.152945][ T6314] F2FS-fs (loop0): invalid crc value [ 125.513662][ T5860] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 126.215951][ T6314] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.777039][ T6330] loop3: detected capacity change from 0 to 128 [ 126.895912][ T5860] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 126.917000][ T6330] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 126.957202][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.007694][ T6314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.265517][ T5860] cp2112 0003:10C4:EA90.0002: error requesting version [ 127.329250][ T6330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.379969][ T5860] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 127.423058][ T5860] usb 4-1: USB disconnect, device number 3 [ 127.757365][ T6334] fido_id[6334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 128.653021][ T6345] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 128.882509][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 128.977584][ T6333] loop2: detected capacity change from 0 to 32768 [ 129.059209][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 129.066498][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 129.109147][ T6333] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.243704][ T6333] XFS (loop2): Ending clean mount [ 129.312003][ T6371] loop0: detected capacity change from 0 to 1024 [ 129.329759][ T6333] XFS (loop2): Quotacheck needed: Please wait. [ 129.337202][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 129.347789][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 129.373309][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 129.386063][ T6371] EXT4-fs: Ignoring removed nobh option [ 129.428690][ T6371] EXT4-fs: Ignoring removed bh option [ 129.461318][ T6333] XFS (loop2): Quotacheck: Done. [ 129.496378][ T6371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.565810][ T6371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.660046][ T5766] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.695497][ T6371] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 15: block 209:freeing already freed block (bit 13); block bitmap corrupt. [ 129.785627][ T6356] ceph: No mds server is up or the cluster is laggy [ 129.848105][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.293245][ T5755] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.323000][ T6399] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 130.422528][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.525547][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.632886][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.724418][ T5755] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 130.787117][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.972404][ T5755] usb 3-1: config 0 descriptor?? [ 132.023874][ T6404] loop3: detected capacity change from 0 to 40427 [ 132.089278][ T6404] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 132.146038][ T6404] F2FS-fs (loop3): invalid crc value [ 132.502313][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 133.009202][ T6404] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.214706][ T5755] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 133.289181][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.307576][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.340669][ T6404] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.008885][ T5755] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 134.187477][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 134.195185][ T27] usb 1-1: can't read configurations, error -71 [ 134.304349][ T5755] cp2112 0003:10C4:EA90.0003: error requesting version [ 134.323359][ T5755] cp2112: probe of 0003:10C4:EA90.0003 failed with error -71 [ 134.346619][ T5755] usb 3-1: USB disconnect, device number 2 [ 134.454039][ T6417] fido_id[6417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 134.654984][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 134.661090][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 134.864958][ T6431] loop2: detected capacity change from 0 to 1024 [ 134.891976][ T6431] EXT4-fs: Ignoring removed nobh option [ 134.918228][ T6431] EXT4-fs: Ignoring removed bh option [ 134.948650][ T6431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.004019][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 135.021783][ T6431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.042614][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 135.268660][ T6431] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 15: block 209:freeing already freed block (bit 13); block bitmap corrupt. [ 135.369323][ T6427] ceph: No mds server is up or the cluster is laggy [ 136.103125][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.772435][ T5771] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.964959][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.976015][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.986141][ T5771] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 136.995482][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.006822][ T5771] usb 5-1: config 0 descriptor?? [ 137.434893][ T5771] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 137.449113][ T5771] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 137.633317][ T5771] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 138.240766][ T6468] cp2112 0003:10C4:EA90.0004: Unsupported transaction 0 [ 138.248111][ T6468] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 138.262037][ T5771] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 138.284341][ T5771] usb 5-1: USB disconnect, device number 2 [ 138.926025][ T6486] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 139.044568][ T6488] loop3: detected capacity change from 0 to 128 [ 139.055954][ T6488] EXT4-fs: Ignoring removed nobh option [ 139.490901][ T6488] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.534352][ T6488] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.017864][ T6483] loop2: detected capacity change from 0 to 4096 [ 140.956647][ T6492] loop4: detected capacity change from 0 to 40427 [ 141.020575][ T6492] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 141.059731][ T6492] F2FS-fs (loop4): invalid crc value [ 141.570774][ T5764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.682382][ T6492] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.968879][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.136313][ T6492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.981204][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.793168][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 144.150869][ T9] usb 1-1: device descriptor read/64, error -71 [ 144.577889][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 144.904763][ T9] usb 1-1: device descriptor read/64, error -71 [ 145.172852][ T9] usb usb1-port1: attempt power cycle [ 147.049421][ T6541] loop4: detected capacity change from 0 to 4096 [ 147.139946][ T6541] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 147.206196][ T6541] ntfs3: loop4: Failed to load $Extend (-22). [ 147.232409][ T6541] ntfs3: loop4: Failed to initialize $Extend. [ 147.285765][ T6523] loop2: detected capacity change from 0 to 32768 [ 147.404488][ T6541] overlayfs: upper fs does not support tmpfile. [ 147.406128][ T6523] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 147.435296][ T6541] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.464025][ T6553] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 147.647267][ T6523] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.126389][ T6560] loop3: detected capacity change from 0 to 40427 [ 149.345025][ T6560] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 149.442500][ T6560] F2FS-fs (loop3): invalid crc value [ 150.179887][ T6560] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.632516][ T6560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.567675][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 153.022580][ T6603] capability: warning: `syz.0.180' uses 32-bit capabilities (legacy support in use) [ 153.499945][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.682319][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 153.729620][ T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.758265][ T27] usb 3-1: config 0 has no interface number 0 [ 153.765078][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 153.790976][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 153.802934][ T27] usb 3-1: config 0 interface 184 has no altsetting 0 [ 153.815684][ T6625] ceph: No mds server is up or the cluster is laggy [ 154.072759][ T969] libceph: connect (1)[c::]:6789 error -101 [ 154.078881][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 154.854416][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 155.001108][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.009459][ T27] usb 3-1: Product: syz [ 155.013758][ T27] usb 3-1: Manufacturer: syz [ 155.018393][ T27] usb 3-1: SerialNumber: syz [ 155.034381][ T27] usb 3-1: config 0 descriptor?? [ 155.053944][ T27] smsc75xx v1.0.0 [ 155.661990][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 155.692584][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.695288][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 155.746450][ T6662] tipc: Started in network mode [ 155.751838][ T6662] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 155.775428][ T6662] tipc: Enabled bearer , priority 10 [ 156.206316][ T969] libceph: connect (1)[c::]:6789 error -22 [ 156.222823][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 156.261999][ T969] libceph: connect (1)[c::]:6789 error -22 [ 156.278479][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 156.304462][ T6675] ceph: No mds server is up or the cluster is laggy [ 156.729268][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 156.748145][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 156.776238][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 156.797813][ T27] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 156.835820][ T27] usb 3-1: USB disconnect, device number 3 [ 156.895967][ T5755] tipc: Node number set to 1 [ 157.325678][ T6706] loop0: detected capacity change from 0 to 1024 [ 157.397532][ T6709] loop3: detected capacity change from 0 to 2048 [ 157.437839][ T6709] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.526104][ T6711] warning: `syz.2.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.573668][ T6709] EXT4-fs: Mount option(s) incompatible with ext2 [ 157.623438][ T969] libceph: connect (1)[c::]:6789 error -22 [ 157.629469][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 157.709902][ T6714] ceph: No mds server is up or the cluster is laggy [ 157.730488][ T1125] hfsplus: b-tree write err: -5, ino 4 [ 157.815765][ T6721] ptrace attach of "./syz-executor exec"[5764] was attempted by " ./file1 xk\x1bW d^X͞\x0c\x0by&^Y1e+XriJB[zk/9^$Cqe[rĖӼ{y7/k<'q,\x22^O\x22F'_Me#k%gKeiԑz+'2-z~pyz\x5caxzrjԙ9P\x0d7g~z7zEq92}ҟmwЕ/P=Сcr,Fof RDlv\x0d XKj @4>\x07o,Dn7\x22Z:[f7T:r7ve$<\x22%:$@+׮Gą랅Ns͙+=e6?b3 nnfv2017}=OV`6s}x_n]ocڸlI?qz8L4>vg?]\x1b膴G [ 158.507876][ T6737] netlink: 64 bytes leftover after parsing attributes in process `syz.4.215'. [ 159.908262][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 159.922489][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 160.182869][ T9] libceph: connect (1)[c::]:6789 error -101 [ 160.199691][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 160.890175][ T6760] ceph: No mds server is up or the cluster is laggy [ 160.908600][ T5755] libceph: connect (1)[c::]:6789 error -101 [ 160.940875][ T5755] libceph: mon0 (1)[c::]:6789 connect error [ 162.017408][ T6807] loop3: detected capacity change from 0 to 128 [ 162.217397][ T6807] FAT-fs (loop3): bogus logical sector size 0 [ 162.760988][ T6807] FAT-fs (loop3): Can't find a valid FAT filesystem [ 163.344282][ T6814] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 163.355205][ T6814] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 163.489645][ T5782] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.538558][ T6807] loop3: detected capacity change from 0 to 8 [ 163.545184][ T5782] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.573043][ T5782] Buffer I/O error on dev loop3, logical block 0, async page read [ 163.588123][ T6818] loop2: detected capacity change from 0 to 2048 [ 163.600926][ T6807] Major/Minor mismatch, trying to mount newer 256.0 filesystem [ 163.672132][ T6807] Please update your kernel [ 163.690787][ T9] libceph: connect (1)[c::]:6789 error -22 [ 163.710741][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 163.841027][ T6827] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.983656][ T9] libceph: connect (1)[c::]:6789 error -22 [ 164.007003][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 164.391974][ T6819] ceph: No mds server is up or the cluster is laggy [ 164.581210][ T9] libceph: connect (1)[c::]:6789 error -22 [ 164.655574][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 165.127249][ T6838] loop3: detected capacity change from 0 to 1024 [ 165.241618][ T6838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.484553][ T6849] EXT4-fs error (device loop3): ext4_xattr_block_find:1891: inode #15: comm syz.3.240: corrupted xattr block 113: invalid header [ 165.573076][ T6849] EXT4-fs (loop3): Remounting filesystem read-only [ 165.916796][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.237345][ T6832] loop0: detected capacity change from 0 to 32768 [ 166.313091][ T6855] netlink: 'syz.3.244': attribute type 10 has an invalid length. [ 166.380514][ T28] audit: type=1800 audit(1767957147.288:4): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 166.408477][ T6827] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 166.448129][ T6827] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 166.471695][ T28] audit: type=1800 audit(1767957147.378:5): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 166.518489][ T6827] Remounting filesystem read-only [ 166.566955][ T12] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 166.587201][ T12] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 166.630834][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 166.648810][ T6860] loop3: detected capacity change from 0 to 128 [ 166.682392][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 166.691341][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 166.711047][ T12] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 166.718135][ T12] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 166.735098][ T6860] FAT-fs (loop3): Directory bread(block 162) failed [ 166.741798][ T6860] FAT-fs (loop3): Directory bread(block 163) failed [ 166.761110][ T12] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 166.792980][ T12] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 166.800364][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 166.812346][ T6860] FAT-fs (loop3): Directory bread(block 164) failed [ 166.819020][ T6860] FAT-fs (loop3): Directory bread(block 165) failed [ 166.852716][ T6860] FAT-fs (loop3): Directory bread(block 166) failed [ 166.859443][ T6860] FAT-fs (loop3): Directory bread(block 167) failed [ 166.884522][ T12] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 166.891634][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 166.917097][ T6860] FAT-fs (loop3): Directory bread(block 168) failed [ 166.927481][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 166.955520][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 166.975695][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 167.010776][ T12] NILFS (loop2): discard dirty page: offset=98304, ino=3 [ 167.019435][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 167.052437][ T6860] FAT-fs (loop3): Directory bread(block 169) failed [ 167.077962][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 167.134615][ T6860] FAT-fs (loop3): Directory bread(block 162) failed [ 167.151869][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.184532][ T6860] FAT-fs (loop3): Directory bread(block 163) failed [ 167.193603][ T6860] syz.3.245: attempt to access beyond end of device [ 167.193603][ T6860] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 167.209216][ T6860] syz.3.245: attempt to access beyond end of device [ 167.209216][ T6860] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 167.223128][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.230403][ T12] NILFS (loop2): discard dirty page: offset=102400, ino=3 [ 167.251371][ T6865] syz.3.245: attempt to access beyond end of device [ 167.251371][ T6865] loop3: rw=3, sector=234, nr_sectors = 6 limit=128 [ 167.259352][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.485151][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.565815][ T6865] syz.3.245: attempt to access beyond end of device [ 167.565815][ T6865] loop3: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 167.711580][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.738543][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.787892][ T12] NILFS (loop2): discard dirty page: offset=106496, ino=3 [ 167.822276][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.873045][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.880351][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.977853][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 167.985248][ T12] NILFS (loop2): discard dirty page: offset=110592, ino=3 [ 167.993113][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.000379][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.007744][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.015055][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.022349][ T12] NILFS (loop2): discard dirty page: offset=114688, ino=3 [ 168.029547][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.064569][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.071859][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.118439][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.146890][ T12] NILFS (loop2): discard dirty page: offset=118784, ino=3 [ 168.181127][ T6875] loop3: detected capacity change from 0 to 16 [ 168.202786][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.210160][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.232107][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.257462][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.283130][ T6875] erofs: (device loop3): mounted with root inode @ nid 36. [ 168.292352][ T12] NILFS (loop2): discard dirty page: offset=122880, ino=3 [ 168.306240][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.322281][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.332305][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.339567][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.389226][ T12] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 168.406820][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.434657][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.462257][ T12] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 168.481542][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.561868][ T5766] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 168.596078][ T5825] libceph: connect (1)[c::]:6789 error -22 [ 168.602104][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 168.644817][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 168.651786][ T5766] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 168.659392][ T5766] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 168.666983][ T5766] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 168.676234][ T5766] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 168.694667][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 168.701435][ T5766] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 168.714242][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.725596][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.739850][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.751413][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 168.761194][ T5766] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 168.777980][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.788497][ T6891] loop0: detected capacity change from 0 to 1024 [ 168.800086][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.809136][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.828804][ T6891] EXT4-fs: Ignoring removed orlov option [ 168.902747][ T5825] libceph: connect (1)[c::]:6789 error -22 [ 168.921759][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 168.950240][ T6891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.023121][ T6891] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.199343][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.346884][ T6886] ceph: No mds server is up or the cluster is laggy [ 169.578736][ T5825] libceph: connect (1)[c::]:6789 error -22 [ 169.586993][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 169.914790][ T6921] loop3: detected capacity change from 0 to 512 [ 169.996514][ T6921] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 170.017461][ T6921] FAT-fs (loop3): Filesystem has been set read-only [ 170.043392][ T6921] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003) [ 170.060643][ T6921] FAT-fs (loop3): error, invalid access to FAT (entry 0x22000003) [ 171.055268][ T6943] loop2: detected capacity change from 0 to 4096 [ 171.079465][ T6943] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 171.142489][ T6943] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 171.166057][ T6943] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 171.206479][ T6928] loop3: detected capacity change from 0 to 32768 [ 171.233127][ T6943] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 171.262369][ T6928] jbd2_journal_init_inode: Cannot locate journal superblock [ 171.269790][ T6928] (syz.3.261,6928,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 171.274361][ T6943] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 171.318506][ T6932] loop0: detected capacity change from 0 to 32768 [ 171.324628][ T6928] (syz.3.261,6928,1):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 171.335133][ T6943] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 171.335199][ T6943] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 171.335263][ T6943] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 171.384459][ T6943] ntfs: volume version 3.1. [ 171.415758][ T6928] (syz.3.261,6928,0):ocfs2_check_volume:2488 ERROR: status = -22 [ 171.458586][ T6928] (syz.3.261,6928,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 171.519175][ T6928] (syz.3.261,6928,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 173.350085][ T6977] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 175.210211][ T7002] loop0: detected capacity change from 0 to 2048 [ 175.259056][ T7002] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 175.269303][ T7002] UDF-fs: Scanning with blocksize 512 failed [ 175.311130][ T7002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.334329][ T7004] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.898221][ T7017] loop4: detected capacity change from 0 to 32768 [ 177.913225][ T7017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.294 (7017) [ 177.950105][ T7017] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.023383][ T7017] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 178.050097][ T7017] BTRFS info (device loop4): using free space tree [ 178.172526][ T7017] BTRFS info (device loop4): enabling ssd optimizations [ 178.191989][ T7017] BTRFS info (device loop4): auto enabling async discard [ 178.464592][ T7021] loop0: detected capacity change from 0 to 32768 [ 178.745517][ T7021] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.768899][ T5974] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.838819][ T7076] loop3: detected capacity change from 0 to 47 [ 178.891724][ T7021] XFS (loop0): Ending clean mount [ 178.918471][ T7021] XFS (loop0): Quotacheck needed: Please wait. [ 179.207036][ T7021] XFS (loop0): Quotacheck: Done. [ 179.515768][ T7081] MINIX-fs: deleted inode referenced: 9 [ 179.522554][ T7081] MINIX-fs: deleted inode referenced: 9 [ 180.022960][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.599868][ T7095] loop0: detected capacity change from 0 to 256 [ 180.627486][ T7095] exfat: Deprecated parameter 'namecase' [ 180.714603][ T7095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 180.836806][ T7095] autofs4:pid:7095:autofs_fill_super: could not open pipe file descriptor [ 180.891827][ T7099] loop4: detected capacity change from 0 to 512 [ 180.993773][ T7099] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.086349][ T7091] loop2: detected capacity change from 0 to 32768 [ 181.102451][ T7099] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 181.158950][ T7099] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.315: attempt to clear invalid blocks 2 len 1 [ 181.273235][ T7099] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 181.326478][ T7087] loop3: detected capacity change from 0 to 40427 [ 181.333436][ T7099] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.315: invalid indirect mapped block 1819239214 (level 0) [ 181.372307][ T7087] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 181.380132][ T7087] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 181.393237][ T7099] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.315: invalid indirect mapped block 1819239214 (level 1) [ 181.441459][ T7099] EXT4-fs (loop4): 1 truncate cleaned up [ 181.450225][ T7099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.464809][ T7087] F2FS-fs (loop3): invalid crc value [ 181.501538][ T7087] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.699502][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.751864][ T7087] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 181.772133][ T7087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 183.723193][ T5825] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.916936][ T5825] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 183.932287][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.955158][ T5825] usb 1-1: Product: syz [ 183.959396][ T5825] usb 1-1: Manufacturer: syz [ 183.984562][ T5825] usb 1-1: SerialNumber: syz [ 184.002073][ T5825] usb 1-1: config 0 descriptor?? [ 184.705531][ T5825] usb 1-1: USB disconnect, device number 8 [ 185.121810][ T7144] loop4: detected capacity change from 0 to 40427 [ 185.150535][ T7144] F2FS-fs (loop4): build fault injection attr: rate: 691, type: 0x7ffff [ 185.160809][ T7144] F2FS-fs (loop4): Image doesn't support compression [ 185.175768][ T7144] F2FS-fs (loop4): invalid crc value [ 185.194593][ T7144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.338699][ T7144] F2FS-fs (loop4): Start checkpoint disabled! [ 185.356635][ T7144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 185.394315][ T7161] loop2: detected capacity change from 0 to 512 [ 185.431751][ T7144] F2FS-fs (loop4): access invalid blkaddr:4043309056 [ 185.458718][ T7144] CPU: 0 PID: 7144 Comm: syz.4.332 Not tainted syzkaller #0 [ 185.466094][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.476223][ T7144] Call Trace: [ 185.479552][ T7144] [ 185.482550][ T7144] dump_stack_lvl+0x16c/0x230 [ 185.487300][ T7144] ? show_regs_print_info+0x20/0x20 [ 185.492563][ T7144] ? __lock_acquire+0x1260/0x7c80 [ 185.497647][ T7144] ? f2fs_get_next_page_offset+0x690/0x690 [ 185.503535][ T7144] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 185.508984][ T7144] f2fs_map_blocks+0xda2/0x3da0 [ 185.513891][ T7144] ? verify_lock_unused+0x140/0x140 [ 185.519167][ T7144] ? f2fs_get_block_locked+0xe0/0xe0 [ 185.524486][ T7144] ? __lock_acquire+0x7c80/0x7c80 [ 185.529543][ T7144] ? xas_descend+0x3a4/0x490 [ 185.534178][ T7144] ? xa_load+0x2c0/0x2e0 [ 185.538452][ T7144] ? xa_load+0x64/0x2e0 [ 185.542645][ T7144] ? page_index+0xe7/0x470 [ 185.547110][ T7144] f2fs_mpage_readpages+0x9f5/0x1ec0 [ 185.552467][ T7144] ? detach_page_private+0x4c0/0x4c0 [ 185.557792][ T7144] ? __mod_lruvec_page_state+0xa5/0x420 [ 185.563393][ T7144] ? f2fs_readahead+0x167/0x300 [ 185.568276][ T7144] ? f2fs_dirty_data_folio+0x810/0x810 [ 185.573778][ T7144] read_pages+0x177/0x840 [ 185.578167][ T7144] ? folio_put+0xd0/0xd0 [ 185.582468][ T7144] ? page_cache_ra_unbounded+0x770/0x770 [ 185.588138][ T7144] ? filemap_add_folio+0x192/0x3c0 [ 185.593290][ T7144] page_cache_ra_unbounded+0x692/0x770 [ 185.598808][ T7144] f2fs_readdir+0x44c/0x8c0 [ 185.603365][ T7144] ? f2fs_fill_dentries+0xbb0/0xbb0 [ 185.608600][ T7144] ? mutex_lock_nested+0x20/0x20 [ 185.613564][ T7144] ? end_current_label_crit_section+0x149/0x170 [ 185.619853][ T7144] ? down_read_killable+0x1d0/0x340 [ 185.625112][ T7144] ? fsnotify_perm+0x271/0x5e0 [ 185.629911][ T7144] iterate_dir+0x1c2/0x580 [ 185.634360][ T7144] __se_sys_getdents64+0xe9/0x260 [ 185.639419][ T7144] ? __x64_sys_getdents64+0x80/0x80 [ 185.644646][ T7144] ? filldir+0x680/0x680 [ 185.648932][ T7144] ? lockdep_hardirqs_on+0x98/0x150 [ 185.654163][ T7144] do_syscall_64+0x55/0xb0 [ 185.658607][ T7144] ? clear_bhb_loop+0x40/0x90 [ 185.663329][ T7144] ? clear_bhb_loop+0x40/0x90 [ 185.668075][ T7144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.674023][ T7144] RIP: 0033:0x7f1d8358f749 [ 185.678484][ T7144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.698130][ T7144] RSP: 002b:00007f1d843af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 185.706600][ T7144] RAX: ffffffffffffffda RBX: 00007f1d837e5fa0 RCX: 00007f1d8358f749 [ 185.714609][ T7144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 185.722607][ T7144] RBP: 00007f1d83613f91 R08: 0000000000000000 R09: 0000000000000000 [ 185.730607][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.738624][ T7144] R13: 00007f1d837e6038 R14: 00007f1d837e5fa0 R15: 00007ffe21bf8c38 [ 185.746632][ T7144] [ 185.774317][ T7161] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.791867][ T7144] syz.4.332: attempt to access beyond end of device [ 185.791867][ T7144] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 185.806750][ T7161] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 185.819111][ T7144] syz.4.332: attempt to access beyond end of device [ 185.819111][ T7144] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 185.859702][ T7164] loop3: detected capacity change from 0 to 2048 [ 185.881629][ T7144] syz.4.332: attempt to access beyond end of device [ 185.881629][ T7144] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 186.007898][ T7164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.200688][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.355148][ T49] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xe97/0x17f0 [ 186.457985][ T49] kworker/u4:3: attempt to access beyond end of device [ 186.457985][ T49] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 186.570678][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 186.811413][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 186.953643][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 187.374872][ T7189] loop2: detected capacity change from 0 to 512 [ 187.385334][ T7189] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 187.398703][ T7189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.425985][ T7189] EXT4-fs (loop2): 1 truncate cleaned up [ 187.433231][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.598628][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.757954][ T7202] autofs4:pid:7202:autofs_fill_super: called with bogus options [ 187.992803][ C1] Unknown status report in ack skb [ 188.181123][ T7215] loop0: detected capacity change from 0 to 65 [ 188.222442][ T7215] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 188.230380][ T7215] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 188.586083][ T7204] loop2: detected capacity change from 0 to 32768 [ 188.628601][ T7204] JBD2: Ignoring recovery information on journal [ 188.771282][ T7204] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 188.877263][ T7230] loop3: detected capacity change from 0 to 136 [ 189.099853][ T7235] loop4: detected capacity change from 0 to 512 [ 189.126007][ T7235] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.176457][ T7235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.186903][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 189.288439][ T7235] EXT4-fs (loop4): 1 truncate cleaned up [ 189.318308][ T7235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.399212][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.703163][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.923488][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.004565][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.167545][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.286711][ T7254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.358197][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.530749][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.697687][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.745102][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.930590][ T9] usb 1-1: Product: syz [ 190.940027][ T9] usb 1-1: Manufacturer: syz [ 190.957965][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 190.963418][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 190.982654][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 190.988636][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 191.029374][ T7254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.138124][ T7254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.243337][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 191.243750][ T5771] usb 1-1: USB disconnect, device number 9 [ 191.250719][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 191.262029][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 191.273797][ T7244] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 191.302988][ T7254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.456075][ T7254] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.501270][ T7254] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.513529][ T7240] syz.3.367: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 191.538725][ T7254] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.555467][ T7254] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.576273][ T7240] CPU: 0 PID: 7240 Comm: syz.3.367 Not tainted syzkaller #0 [ 191.583616][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.593692][ T7240] Call Trace: [ 191.597002][ T7240] [ 191.599946][ T7240] dump_stack_lvl+0x16c/0x230 [ 191.604654][ T7240] ? show_regs_print_info+0x20/0x20 [ 191.609913][ T7240] ? load_image+0x3b0/0x3b0 [ 191.614443][ T7240] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 191.620915][ T7240] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 191.627440][ T7240] warn_alloc+0x210/0x300 [ 191.631797][ T7240] ? zone_watermark_ok_safe+0x230/0x230 [ 191.637438][ T7240] ? _raw_spin_unlock+0x28/0x40 [ 191.642351][ T7240] ? netlink_rcv_skb+0x216/0x480 [ 191.647323][ T7240] __vmalloc_node_range+0x662/0x1320 [ 191.652636][ T7240] ? __asan_memset+0x22/0x40 [ 191.657306][ T7240] ? free_vm_area+0x50/0x50 [ 191.661864][ T7240] ? kvmalloc_node+0x70/0x180 [ 191.666589][ T7240] ? rcu_is_watching+0x15/0xb0 [ 191.671390][ T7240] ? kvmalloc_node+0x70/0x180 [ 191.676130][ T7240] ? trace_kmalloc+0x1f/0xa0 [ 191.680792][ T7240] kvmalloc_node+0x13f/0x180 [ 191.685440][ T7240] ? hash_netport4_resize+0x232/0x1b50 [ 191.690983][ T7240] hash_netport4_resize+0x232/0x1b50 [ 191.696394][ T7240] ? hash_netport4_uadt+0xc1f/0xed0 [ 191.701667][ T7240] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 191.707718][ T7240] ? hash_netport4_uadt+0xed0/0xed0 [ 191.713003][ T7240] ? hash_netport4_kadt+0x560/0x560 [ 191.718303][ T7240] ? _local_bh_enable+0xa0/0xa0 [ 191.723221][ T7240] call_ad+0x43f/0xae0 [ 191.727412][ T7240] ? ip_set_ad+0x930/0x930 [ 191.731899][ T7240] ? __nla_parse+0x40/0x50 [ 191.736402][ T7240] ip_set_ad+0x787/0x930 [ 191.740732][ T7240] ? trace_raw_output_contention_end+0xd0/0xd0 [ 191.746957][ T7240] ? ip_set_dump_done+0x1e0/0x1e0 [ 191.752039][ T7240] ? rcu_is_watching+0x15/0xb0 [ 191.756912][ T7240] nfnetlink_rcv_msg+0xb49/0x1130 [ 191.762023][ T7240] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.768158][ T7240] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 191.773464][ T7240] ? nfnetlink_unbind+0x160/0x160 [ 191.778580][ T7240] ? __dev_queue_xmit+0x1a64/0x35a0 [ 191.783863][ T7240] ? __netlink_deliver_tap+0x5ab/0x830 [ 191.789383][ T7240] ? netlink_deliver_tap+0x19c/0x1b0 [ 191.794725][ T7240] ? netlink_unicast+0x72c/0x8d0 [ 191.799726][ T7240] ? netlink_sendmsg+0x8c1/0xbe0 [ 191.804765][ T7240] ? ____sys_sendmsg+0x5bf/0x950 [ 191.809763][ T7240] ? ___sys_sendmsg+0x220/0x290 [ 191.814670][ T7240] ? __se_sys_sendmsg+0x1a5/0x270 [ 191.819760][ T7240] ? do_syscall_64+0x55/0xb0 [ 191.824425][ T7240] netlink_rcv_skb+0x216/0x480 [ 191.829247][ T7240] ? nfnetlink_unbind+0x160/0x160 [ 191.834352][ T7240] ? netlink_ack+0x1110/0x1110 [ 191.839176][ T7240] ? apparmor_capable+0x137/0x1a0 [ 191.844249][ T7240] ? bpf_lsm_capable+0x9/0x10 [ 191.848981][ T7240] ? security_capable+0x89/0xb0 [ 191.853906][ T7240] nfnetlink_rcv+0x274/0x2180 [ 191.858667][ T7240] ? __local_bh_enable_ip+0x12e/0x1c0 [ 191.864083][ T7240] ? lockdep_hardirqs_on+0x98/0x150 [ 191.869375][ T7240] ? __local_bh_enable_ip+0x12e/0x1c0 [ 191.874821][ T7240] ? _local_bh_enable+0xa0/0xa0 [ 191.879734][ T7240] ? __dev_queue_xmit+0x245/0x35a0 [ 191.884905][ T7240] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 191.890517][ T7240] ? __dev_queue_xmit+0x245/0x35a0 [ 191.895699][ T7240] ? ref_tracker_free+0x634/0x7d0 [ 191.900773][ T7240] ? __copy_skb_header+0xa7/0x550 [ 191.901513][ T7262] input: syz0 as /devices/virtual/input/input7 [ 191.905822][ T7240] ? refcount_inc+0x70/0x70 [ 191.905878][ T7240] ? __skb_clone+0x63/0x790 [ 191.905908][ T7240] ? __skb_clone+0x480/0x790 [ 191.905944][ T7240] ? __netlink_deliver_tap+0x7e8/0x830 [ 191.905964][ T7240] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.905985][ T7240] ? __lock_acquire+0x7c80/0x7c80 [ 191.941611][ T7240] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.946881][ T7240] netlink_unicast+0x751/0x8d0 [ 191.951730][ T7240] netlink_sendmsg+0x8c1/0xbe0 [ 191.956565][ T7240] ? netlink_getsockopt+0x580/0x580 [ 191.961821][ T7240] ? aa_sock_msg_perm+0x94/0x150 [ 191.966828][ T7240] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 191.972158][ T7240] ? security_socket_sendmsg+0x80/0xa0 [ 191.977662][ T7240] ? netlink_getsockopt+0x580/0x580 [ 191.982911][ T7240] ____sys_sendmsg+0x5bf/0x950 [ 191.987825][ T7240] ? __asan_memset+0x22/0x40 [ 191.992467][ T7240] ? __sys_sendmsg_sock+0x30/0x30 [ 191.997541][ T7240] ? __import_iovec+0x5f2/0x860 [ 192.002463][ T7240] ? import_iovec+0x73/0xa0 [ 192.007031][ T7240] ___sys_sendmsg+0x220/0x290 [ 192.011777][ T7240] ? __sys_sendmsg+0x270/0x270 [ 192.016616][ T7240] ? debug_mutex_init+0x38/0x70 [ 192.021539][ T7240] __se_sys_sendmsg+0x1a5/0x270 [ 192.026481][ T7240] ? __x64_sys_sendmsg+0x80/0x80 [ 192.031489][ T7240] ? lockdep_hardirqs_on+0x98/0x150 [ 192.036749][ T7240] do_syscall_64+0x55/0xb0 [ 192.041207][ T7240] ? clear_bhb_loop+0x40/0x90 [ 192.045934][ T7240] ? clear_bhb_loop+0x40/0x90 [ 192.050670][ T7240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.056613][ T7240] RIP: 0033:0x7f605ed8f749 [ 192.061079][ T7240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.080744][ T7240] RSP: 002b:00007f605fb52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.089218][ T7240] RAX: ffffffffffffffda RBX: 00007f605efe5fa0 RCX: 00007f605ed8f749 [ 192.097246][ T7240] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 192.105275][ T7240] RBP: 00007f605ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.113310][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.121334][ T7240] R13: 00007f605efe6038 R14: 00007f605efe5fa0 R15: 00007ffd4838f578 [ 192.129389][ T7240] [ 192.142833][ T7240] Mem-Info: [ 192.146102][ T7240] active_anon:6393 inactive_anon:0 isolated_anon:0 [ 192.146102][ T7240] active_file:1327 inactive_file:39968 isolated_file:0 [ 192.146102][ T7240] unevictable:768 dirty:32 writeback:0 [ 192.146102][ T7240] slab_reclaimable:10623 slab_unreclaimable:94287 [ 192.146102][ T7240] mapped:24644 shmem:1374 pagetables:697 [ 192.146102][ T7240] sec_pagetables:0 bounce:0 [ 192.146102][ T7240] kernel_misc_reclaimable:0 [ 192.146102][ T7240] free:1358143 free_pcp:11439 free_cma:0 [ 192.191430][ T7240] Node 0 active_anon:25572kB inactive_anon:0kB active_file:5308kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98476kB dirty:124kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11764kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no [ 192.259618][ T7240] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 192.303170][ T7240] Node 0 DMA free:15264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 192.338813][ T967] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.397733][ T7240] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 192.417278][ T7240] Node 0 DMA32 free:1530300kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:25624kB inactive_anon:0kB active_file:5308kB inactive_file:158352kB unevictable:1536kB writepending:124kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:25084kB local_pcp:4464kB free_cma:0kB [ 192.502615][ T7240] lowmem_reserve[]: 0 0 1 1 1 [ 192.522852][ T7240] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.553139][ T967] usb 5-1: Using ep0 maxpacket: 16 [ 192.569240][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 192.589232][ T967] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 192.615701][ T7240] lowmem_reserve[]: 0 0 0 0 0 [ 192.622085][ T7240] Node 1 Normal free:3886736kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21248kB local_pcp:9696kB free_cma:0kB [ 192.659652][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.688977][ T967] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.703906][ T7240] lowmem_reserve[]: 0 0 0 0 0 [ 192.709485][ T7240] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) [ 192.711426][ T967] usb 5-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 192.757016][ T7240] = 15264kB [ 192.761128][ T7240] Node 0 DMA32: 1*4kB (M) 3*8kB (UE) 145*16kB (UE) 58*32kB (UME) 115*64kB (UME) 99*128kB (UME) 33*256kB (M) 13*512kB (ME) 7*1024kB (UME) 3*2048kB (U) 358*4096kB (UM) = 1519020kB [ 192.779639][ T7240] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 192.792444][ T7240] Node 1 Normal: 294*4kB (UME) 65*8kB (UME) 39*16kB (UME) 92*32kB (UME) 20*64kB (UME) 8*128kB (UE) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 946*4096kB (M) = 3886736kB [ 192.805700][ T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.825958][ T967] usb 5-1: Product: syz [ 192.830300][ T967] usb 5-1: Manufacturer: syz [ 192.835697][ T7240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.916235][ T7240] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.926110][ T7240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.928317][ T967] usb 5-1: SerialNumber: syz [ 192.942161][ T7240] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.951642][ T7240] 45518 total pagecache pages [ 192.957255][ T7240] 0 pages in swap cache [ 192.961575][ T7240] Free swap = 124372kB [ 192.966598][ T7240] Total swap = 124996kB [ 192.971243][ T7240] 2097051 pages RAM [ 192.977760][ T7240] 0 pages HighMem/MovableOnly [ 193.001965][ T7240] 416127 pages reserved [ 193.006420][ T967] usb 5-1: config 0 descriptor?? [ 193.029458][ T7240] 0 pages cma reserved [ 193.088720][ T967] io_ti 5-1:0.0: required endpoints missing [ 193.280285][ T967] usb 5-1: USB disconnect, device number 3 [ 193.974170][ T7284] sctp: [Deprecated]: syz.0.383 (pid 7284) Use of int in max_burst socket option. [ 193.974170][ T7284] Use struct sctp_assoc_value instead [ 194.518791][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525349][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.764151][ T7313] loop0: detected capacity change from 0 to 40427 [ 196.785668][ T7313] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 196.802608][ T7313] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.857500][ T7313] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.971406][ T7313] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 196.980825][ T7313] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.020205][ T7324] loop3: detected capacity change from 0 to 32768 [ 198.839379][ T7324] (syz.3.400,7324,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.883400][ T7324] (syz.3.400,7324,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 199.079345][ T7324] JBD2: Ignoring recovery information on journal [ 199.467250][ T7324] JBD2: journal reset failed [ 199.471961][ T7324] (syz.3.400,7324,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 199.502554][ T7324] (syz.3.400,7324,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 200.297128][ T7354] loop4: detected capacity change from 0 to 256 [ 200.327121][ T7354] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.354333][ T7354] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 200.412030][ T7354] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x262da998, utbl_chksum : 0xe619d30d) [ 200.573014][ T7354] exFAT-fs (loop4): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5) [ 200.612944][ T7354] exFAT-fs (loop4): Filesystem has been set read-only [ 202.814086][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 202.859784][ T7379] loop4: detected capacity change from 0 to 512 [ 202.871942][ T7379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.893403][ T7379] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 202.907285][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 203.000075][ T7379] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 203.021242][ T7379] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 203.041422][ T7379] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 203.055141][ T7379] EXT4-fs (loop4): orphan cleanup on readonly fs [ 203.068842][ T7379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.419: bg 0: block 34: padding at end of block bitmap is not set [ 203.091266][ T7379] __quota_error: 12 callbacks suppressed [ 203.091284][ T7379] Quota error (device loop4): write_blk: dquota write failed [ 203.132398][ T7379] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 203.142528][ T7379] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.419: Failed to acquire dquot type 1 [ 203.158513][ T7379] EXT4-fs (loop4): 1 truncate cleaned up [ 203.194226][ T7379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.222798][ T7379] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 203.459477][ T5974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.262802][ T967] libceph: connect (1)[c::]:6789 error -101 [ 204.268941][ T967] libceph: mon0 (1)[c::]:6789 connect error [ 204.531838][ T7402] loop3: detected capacity change from 0 to 128 [ 204.565345][ T9] libceph: connect (1)[c::]:6789 error -101 [ 204.586152][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 205.434257][ C0] ------------[ cut here ]------------ [ 205.439915][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 205.449949][ C0] Modules linked in: [ 205.454053][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 205.461212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.471492][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 205.478023][ C0] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6 [ 205.497719][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.503988][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 205.510201][ C0] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffffffff8ca93440 [ 205.518384][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.526584][ C0] RBP: 0000000000000000 R08: ffffffff8ca93440 R09: 0000000000000003 [ 205.534758][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ccba3c0 [ 205.542883][ C0] R13: dffffc0000000000 R14: ffff88805ccba8b0 R15: ffff88801f38d024 [ 205.551029][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 205.560133][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.566954][ C0] CR2: 0000001b2d418ff8 CR3: 000000001e334000 CR4: 00000000003506f0 [ 205.575106][ C0] Call Trace: [ 205.578506][ C0] [ 205.581502][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 205.587288][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 205.593015][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 205.600166][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 205.605970][ C0] __iterate_interfaces+0x243/0x500 [ 205.611329][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 205.617812][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 205.625219][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 205.631661][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 205.638919][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 205.644321][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 205.649744][ C0] ? hw_scan_work+0xf40/0xf40 [ 205.654717][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 205.659955][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 205.666293][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 205.671574][ C0] handle_softirqs+0x280/0x820 [ 205.676571][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 205.681552][ C0] ? do_softirq+0x180/0x180 [ 205.686241][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 205.691576][ C0] __irq_exit_rcu+0xc7/0x190 [ 205.696381][ C0] ? irq_exit_rcu+0x20/0x20 [ 205.701022][ C0] irq_exit_rcu+0x9/0x20 [ 205.705443][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 205.711219][ C0] [ 205.714365][ C0] [ 205.717412][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.723623][ C0] RIP: 0010:sched_core_balance+0xa83/0xff0 [ 205.729628][ C0] Code: 00 48 8b 7c 24 28 e8 8c 49 13 09 e9 50 02 00 00 4c 8b 64 24 20 48 8b 7c 24 30 e8 78 49 13 09 e8 43 23 2e 00 fb 80 7c 24 18 00 <4c> 8b 74 24 50 0f 85 5f 03 00 00 ff c3 83 e3 0f 4c 39 fb 0f 86 5b [ 205.749505][ C0] RSP: 0018:ffffffff8ca079a0 EFLAGS: 00000246 [ 205.755796][ C0] RAX: dd589193ab4e1c00 RBX: 0000000000000001 RCX: dd589193ab4e1c00 [ 205.763971][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 205.772073][ C0] RBP: ffffffff8ca07b40 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 205.780281][ C0] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: ffff88801a24a920 [ 205.788447][ C0] R13: dffffc0000000000 R14: ffff8880b8e3c000 R15: 0000000000000001 [ 205.796733][ C0] ? sched_core_balance+0xcb/0xff0 [ 205.802000][ C0] ? put_prev_task_balance+0x120/0x120 [ 205.807836][ C0] ? put_prev_task_balance+0x120/0x120 [ 205.813525][ C0] __balance_callbacks+0x103/0x190 [ 205.818775][ C0] __schedule+0x1716/0x44d0 [ 205.823584][ C0] ? asan.module_dtor+0x20/0x20 [ 205.828584][ C0] ? flush_smp_call_function_queue+0x117/0x240 [ 205.834993][ C0] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 205.841250][ C0] schedule_idle+0x4e/0x80 [ 205.845866][ C0] do_idle+0x4ac/0x510 [ 205.850180][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 205.855643][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 205.861442][ C0] cpu_startup_entry+0x43/0x60 [ 205.866425][ C0] rest_init+0x2e2/0x300 [ 205.870819][ C0] ? time_init+0x40/0x40 [ 205.875234][ C0] arch_call_rest_init+0xe/0x10 [ 205.880267][ C0] start_kernel+0x459/0x4e0 [ 205.884945][ C0] x86_64_start_reservations+0x2a/0x30 [ 205.890588][ C0] x86_64_start_kernel+0x60/0x60 [ 205.895751][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 205.902072][ C0] [ 205.905240][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.912540][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 205.919564][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.929626][ C0] Call Trace: [ 205.932912][ C0] [ 205.935761][ C0] dump_stack_lvl+0x16c/0x230 [ 205.940455][ C0] ? show_regs_print_info+0x20/0x20 [ 205.945671][ C0] ? load_image+0x3b0/0x3b0 [ 205.950201][ C0] panic+0x2c0/0x710 [ 205.954111][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 205.958629][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 205.964884][ C0] __warn+0x2e0/0x470 [ 205.968883][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 205.974614][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 205.980341][ C0] report_bug+0x2be/0x4f0 [ 205.984674][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 205.990405][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 205.996132][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 206.001860][ C0] handle_bug+0xcf/0x120 [ 206.006149][ C0] exc_invalid_op+0x1a/0x50 [ 206.010670][ C0] asm_exc_invalid_op+0x1a/0x20 [ 206.015530][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 206.021877][ C0] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6 [ 206.041490][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 206.047583][ C0] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffffffff8ca93440 [ 206.055589][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.063629][ C0] RBP: 0000000000000000 R08: ffffffff8ca93440 R09: 0000000000000003 [ 206.071608][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ccba3c0 [ 206.079589][ C0] R13: dffffc0000000000 R14: ffff88805ccba8b0 R15: ffff88801f38d024 [ 206.087571][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 206.093184][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 206.098922][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 206.104652][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 206.110217][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 206.115695][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 206.122477][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 206.128041][ C0] __iterate_interfaces+0x243/0x500 [ 206.133265][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 206.139514][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 206.146733][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 206.152985][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 206.160021][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 206.165237][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 206.170448][ C0] ? hw_scan_work+0xf40/0xf40 [ 206.175137][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 206.180259][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 206.186341][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 206.191467][ C0] handle_softirqs+0x280/0x820 [ 206.196253][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 206.201025][ C0] ? do_softirq+0x180/0x180 [ 206.205539][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 206.210750][ C0] __irq_exit_rcu+0xc7/0x190 [ 206.215351][ C0] ? irq_exit_rcu+0x20/0x20 [ 206.219867][ C0] irq_exit_rcu+0x9/0x20 [ 206.224112][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 206.229763][ C0] [ 206.232697][ C0] [ 206.235635][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.241634][ C0] RIP: 0010:sched_core_balance+0xa83/0xff0 [ 206.247473][ C0] Code: 00 48 8b 7c 24 28 e8 8c 49 13 09 e9 50 02 00 00 4c 8b 64 24 20 48 8b 7c 24 30 e8 78 49 13 09 e8 43 23 2e 00 fb 80 7c 24 18 00 <4c> 8b 74 24 50 0f 85 5f 03 00 00 ff c3 83 e3 0f 4c 39 fb 0f 86 5b [ 206.267110][ C0] RSP: 0018:ffffffff8ca079a0 EFLAGS: 00000246 [ 206.273204][ C0] RAX: dd589193ab4e1c00 RBX: 0000000000000001 RCX: dd589193ab4e1c00 [ 206.281209][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 206.289185][ C0] RBP: ffffffff8ca07b40 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 206.297168][ C0] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: ffff88801a24a920 [ 206.305148][ C0] R13: dffffc0000000000 R14: ffff8880b8e3c000 R15: 0000000000000001 [ 206.313180][ C0] ? sched_core_balance+0xcb/0xff0 [ 206.318314][ C0] ? put_prev_task_balance+0x120/0x120 [ 206.323794][ C0] ? put_prev_task_balance+0x120/0x120 [ 206.329264][ C0] __balance_callbacks+0x103/0x190 [ 206.334421][ C0] __schedule+0x1716/0x44d0 [ 206.338957][ C0] ? asan.module_dtor+0x20/0x20 [ 206.343823][ C0] ? flush_smp_call_function_queue+0x117/0x240 [ 206.350001][ C0] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 206.356096][ C0] schedule_idle+0x4e/0x80 [ 206.360549][ C0] do_idle+0x4ac/0x510 [ 206.364634][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 206.369844][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 206.375495][ C0] cpu_startup_entry+0x43/0x60 [ 206.380275][ C0] rest_init+0x2e2/0x300 [ 206.384547][ C0] ? time_init+0x40/0x40 [ 206.388803][ C0] arch_call_rest_init+0xe/0x10 [ 206.393668][ C0] start_kernel+0x459/0x4e0 [ 206.398196][ C0] x86_64_start_reservations+0x2a/0x30 [ 206.403676][ C0] x86_64_start_kernel+0x60/0x60 [ 206.408627][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 206.414721][ C0] [ 206.418349][ C0] Kernel Offset: disabled [ 206.422738][ C0] Rebooting in 86400 seconds..