last executing test programs: 12m58.289882266s ago: executing program 32 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) munlockall() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000002040)=ANY=[@ANYBLOB='dmask=00000000000000000000006,umask=00000000000000000000005,namecase=1,dmask=00000000000000000006366,errors=remount-ro,errors=remount-ro,fmask=00000000000000000000002,keep_l@st_dots,iocharset=cp737,allow_utime=00000000000000000147057,\x00'], 0x1, 0x1528, &(0x7f00000021c0)="$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") 9m13.475925033s ago: executing program 4 (id=1249): syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e4000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000125000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000d6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1862, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 8m57.65913578s ago: executing program 33 (id=1249): syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e4000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000125000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000d6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1862, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 3m26.149914465s ago: executing program 34 (id=2032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x222, &(0x7f0000000340)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYYba1cDAwDD5T8S9ByySDCJsCLNEOf6JnWpZvsqs8z7DjI5paQyMBrM4GBgY9I7ozrQz4O1mgppZXFmVnZiTk1rEdAbiTjYGBgaQ+QcmM+5nUmQEqTvz92rwA8atPN2xDIwMchv81RZ/+yNVuXFTfeT0qoiaqd1NN5euj0uK1P97xUTq/cSMsP8PDglqWeTlf5gno/R9c8OcDzV13BDXMrRe/vvufUxtcYIa02PxrkI2/gQ3rZpPzk5ulo/nple3bylWXJCV5jLx2NSLfxOOr2VgmHzhia1+zZlD8YoxnFJulXNj7rrFC3ItUz9fx4AGwnbuQfZXeQM0gBiYGRgYVBgYGJgYWBjSMnNSDTwYGBmYoRxDFqgqmGomBg6whF5yfk5KOwMjOAmAtS1nYIGbYfiYgRXOMXrMCkkxII6xRQPMRe0Qil0FyveA0suh9GNQ0kHyASzZsIBN6IfyNBpAqioSS0qKDEGqISy4mBFczEiggYEV5gmIl+cyoXruOBN6qI2CUTAKRsEoGAWjYBSMglEwCkbBiAKAAAAA///YcK9j") r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) keyctl$clear(0x3, 0xfffffffffffffffd) cachestat(r3, &(0x7f00000000c0)={0x7, 0x3}, &(0x7f0000000180), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x9f, 0x1, 0xe, [{@empty, 0x88}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@broadcast, 0x8}, {@multicast1, 0x852}]}, @cipso={0x86, 0x1c, 0x1, [{0x1, 0x5, "97884e"}, {0x5, 0x5, "c32a51"}, {0x5, 0x2}, {0xaff9f01c1ec98735, 0x2}, {0x0, 0x3, ' '}, {0x7, 0x3, 'o'}, {0x2, 0x2}]}, @ssrr={0x89, 0x3, 0xc5}]}}}}}}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x190) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3m5.705937629s ago: executing program 35 (id=2122): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x4) 3m2.934682138s ago: executing program 36 (id=2137): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wg2\x00', 0x2}, 0x18) 2m44.810307679s ago: executing program 37 (id=2149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 2m36.221421874s ago: executing program 38 (id=2221): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x4, 0x5525, &(0x7f00000014c0)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) syz_open_dev$loop(0x0, 0x0, 0x20000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40001, 0x1ee) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) fallocate(r0, 0x10, 0x0, 0x1001f3) 2m24.378774306s ago: executing program 39 (id=2209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 2m23.259969128s ago: executing program 40 (id=2257): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x130) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) 2m19.783916031s ago: executing program 41 (id=2264): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001"], 0x50}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m13.335532076s ago: executing program 4 (id=2196): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa0109058303"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) 2m11.748818834s ago: executing program 4 (id=2266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x37, 0x107, 0xfffffff3, 0x25dfdbfc, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40080d1}, 0x8050) 2m11.548637462s ago: executing program 4 (id=2267): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="009b501d4d01e77fcea978cb7f9bc8e4b8313a6f5b75fbe99f655f168883fb361a3b9f59f7998da4ce8d19dd17748a1836e8471d396358222e91d591b891b7635a553abc4e9dee9473231216df3e31316986b1495c93f92995ea51553d8fe52b0e654a2fad6c4fcc5303206bd855d68b0c11000bf7fb9793cabf8340b0b8bc026f1006708a62a64ba44e9d6b0a7c29c13d82b30999f92815780d4b7e65dcb6ed20a067898ce8368fbb972d2d"], 0x3, 0x288, &(0x7f0000001000)="$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") r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) connect$unix(r1, &(0x7f0000000400)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) execve(0x0, &(0x7f0000000dc0)={[&(0x7f0000000680)='\xff\xff', 0x0]}, 0x0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x80000000) 2m10.279207893s ago: executing program 4 (id=2268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e1", @ANYRES32, @ANYBLOB], 0x6f4}}, 0x0) 2m9.835613766s ago: executing program 4 (id=2269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) 2m6.134261989s ago: executing program 42 (id=2262): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 2m5.690601969s ago: executing program 1 (id=2265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x6) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) write(r3, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,8,84).', 0x2b) 2m4.575788773s ago: executing program 1 (id=2285): getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = msgget$private(0x0, 0x193) msgsnd(r2, 0x0, 0x8, 0x0) msgsnd(r2, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r2, &(0x7f00000000c0)={0x0, ""/158}, 0xa6, 0x1, 0x3000) 2m2.88704056s ago: executing program 43 (id=2286): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) pipe2$9p(&(0x7f0000000080), 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 2m1.56446683s ago: executing program 1 (id=2290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e1", @ANYRES32, @ANYBLOB], 0x6f4}}, 0x0) 2m0.9496346s ago: executing program 1 (id=2291): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) listen(r0, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f00000000c0)=0x7fffffff, 0x4) 2m0.532556573s ago: executing program 1 (id=2292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) 2m0.162833822s ago: executing program 1 (id=2294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 1m54.680062274s ago: executing program 44 (id=2269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) 1m53.603204561s ago: executing program 7 (id=2304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) 1m53.310425402s ago: executing program 7 (id=2305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c70800034000000081080002"], 0x168}}, 0x0) 1m53.15932573s ago: executing program 7 (id=2306): socket$netlink(0x10, 0x3, 0xa) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)) chdir(&(0x7f00000003c0)='./bus\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x61, 0x3}) 1m51.875968513s ago: executing program 7 (id=2308): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x130) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x0) 1m50.232323989s ago: executing program 7 (id=2314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) 1m49.808736705s ago: executing program 7 (id=2315): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 1m44.770245189s ago: executing program 45 (id=2294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 1m42.817176034s ago: executing program 2 (id=2326): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) dup3(r2, r0, 0x0) 1m41.178950921s ago: executing program 2 (id=2327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x8, 0xffff, 0x101, 0x6e0, 0xffffffffffffffff}) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_pidfd_open(r4, 0x0) syz_clone3(&(0x7f00000003c0)={0x1800100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, &(0x7f0000000340)=""/4, 0x0}, 0x58) 1m39.085839899s ago: executing program 2 (id=2328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) recvmmsg(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000440)=""/58, 0x3b}], 0x1}}], 0x1, 0x2000, 0x0) 1m37.709453973s ago: executing program 2 (id=2329): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) 1m36.653384566s ago: executing program 2 (id=2330): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) 1m36.50486244s ago: executing program 2 (id=2331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 1m34.26553474s ago: executing program 46 (id=2315): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 1m19.602033117s ago: executing program 47 (id=2331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 49.009667127s ago: executing program 8 (id=2391): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x51}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/26, 0x1a}], 0x119) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x4}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 45.351979106s ago: executing program 8 (id=2395): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000002000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x2, 0x2}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x20000011}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 42.623789859s ago: executing program 8 (id=2401): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}, {@noextend}], [], 0x6b}}) 39.171582205s ago: executing program 8 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 37.390777855s ago: executing program 8 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) 34.462271921s ago: executing program 8 (id=2409): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wg2\x00', 0x2}, 0x18) 23.235844472s ago: executing program 0 (id=2430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x8, 0xffff, 0x101, 0x6e0, 0xffffffffffffffff}) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_pidfd_open(r4, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f00000003c0)={0x1800100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, &(0x7f0000000340)=""/4, 0x0}, 0x58) 21.404658137s ago: executing program 0 (id=2431): socket$netlink(0x10, 0x3, 0xa) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x61, 0x3}) 20.5794549s ago: executing program 9 (id=2434): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 19.24089111s ago: executing program 48 (id=2409): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wg2\x00', 0x2}, 0x18) 18.948150951s ago: executing program 6 (id=2440): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x51}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x4}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 18.230635603s ago: executing program 9 (id=2441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) 16.461230949s ago: executing program 6 (id=2442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) 15.45978149s ago: executing program 9 (id=2445): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 14.400370385s ago: executing program 9 (id=2448): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0x0, 0x1}, {0x7, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @tick=0x9, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) syz_usb_control_io(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x7f, 0x2, "da488970", "d7690ecb"}}, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) ftruncate(r3, 0x200000000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004) syz_usb_disconnect(r0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/105, 0x92, 0x12c) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x7, 0x6, 0x8, 0x3}, {0x2, 0x3, 0x7, 0x9}, {0x9, 0xb, 0xc9, 0x6}, {0x8000, 0x0, 0x8, 0x2d}]}, 0x10) 11.03174092s ago: executing program 0 (id=2452): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 10.569673582s ago: executing program 5 (id=2453): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000002000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x2, 0x2}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x20000011}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 10.46943146s ago: executing program 3 (id=2454): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000002000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000"], 0x0, 0x34}, 0x28) 10.374036606s ago: executing program 0 (id=2455): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) 8.780743404s ago: executing program 0 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001800090400000000000009000a001000000000000000000008001e00010000000800170b4e234e2314000100fc0200000000000000000000200000"], 0x40}}, 0x891) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x3, 0x7fff0006}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0) listen(r4, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x1, 0x7, 0x4, 0x5, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000000200)={0x0, 0x0, 0x20, 0xf, 0x1}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r9, 0x82}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r1, 0xffffffffffffffff, 0x0) 8.42705684s ago: executing program 5 (id=2457): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='2', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='2', 0x1) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) 8.271608094s ago: executing program 3 (id=2458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r0, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) 8.167223419s ago: executing program 6 (id=2459): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 7.80790256s ago: executing program 5 (id=2460): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1b7b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x40080) 7.782177147s ago: executing program 6 (id=2461): syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) 6.536104124s ago: executing program 0 (id=2462): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 6.306542924s ago: executing program 3 (id=2463): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000002000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x2, 0x2}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 5.783674307s ago: executing program 5 (id=2464): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.081148139s ago: executing program 9 (id=2465): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.938509282s ago: executing program 6 (id=2466): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x51}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/26, 0x1a}], 0x119) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x4}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 2.769119881s ago: executing program 6 (id=2467): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.604064212s ago: executing program 5 (id=2468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@fallback, 0xffffffffffffffff, 0x2b, 0x4000}, 0x20) clock_adjtime(0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) 2.576770279s ago: executing program 3 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="d506"], 0x6f4}}, 0x0) 2.226448888s ago: executing program 9 (id=2470): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x402, 0x2a) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) unshare(0x62040200) 1.998832559s ago: executing program 3 (id=2471): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x5, 0x8000]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="07000002000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f00000004c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x6, 0x20, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x2, 0x2}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x10}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 234.89088ms ago: executing program 3 (id=2472): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x51}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/26, 0x1a}], 0x119) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x4}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8}]}, 0x20}}, 0x0) 0s ago: executing program 5 (id=2473): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000300)='./file0\x00', 0x16, &(0x7f0000001440)={[{@barrier}, {@subvolid}, {@acl}, {@noflushoncommit}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x15, 0x5102, &(0x7f000000a2c0)="$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") r0 = open(0x0, 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) kernel console output (not intermixed with test programs): slaving as an active interface with an up link [ 973.615630][T13687] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 973.643605][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 975.397859][T13687] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 975.443020][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 975.482195][T13687] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 975.530272][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.559556][T13687] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 975.587638][T13687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.617425][T13870] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 976.630065][T13687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.700729][T13687] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.751000][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.758195][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.813274][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.820477][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.990343][T13636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.729993][T13636] veth0_vlan: entered promiscuous mode [ 978.764374][T13636] veth1_vlan: entered promiscuous mode [ 978.857937][T13636] veth0_macvtap: entered promiscuous mode [ 978.893253][T13636] veth1_macvtap: entered promiscuous mode [ 978.947192][ T24] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 978.950724][T13636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.037689][T13905] veth33: entered promiscuous mode [ 979.042857][T13905] veth33: entered allmulticast mode [ 979.077853][T13636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.263219][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 979.280245][ T24] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 979.299069][ T1170] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.311293][ T24] usb 4-1: config 100 has no interface number 0 [ 979.336960][ T1170] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.346412][ T24] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 979.371749][ T1170] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.393651][ T24] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 979.429696][ T24] usb 4-1: config 100 interface 173 has no altsetting 0 [ 979.461012][ T24] usb 4-1: string descriptor 0 read error: -22 [ 979.479733][ T24] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 979.488020][ T7281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.497694][ T6294] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.507466][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.521809][ T7281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.533299][T13687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.561224][T13900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 979.581912][T13900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 979.607462][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.609308][ T24] metro_usb 4-1:100.173: Metrologic USB to Serial converter detected [ 979.616079][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.682671][ T24] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 979.897891][ T24] usb 4-1: USB disconnect, device number 39 [ 979.932927][ T24] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 979.988093][ T24] metro_usb 4-1:100.173: device disconnected [ 980.190034][T13914] loop8: detected capacity change from 0 to 32768 [ 980.207700][T13914] BTRFS warning: excessive commit interval 3581, use with care [ 980.221033][T13914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2189 (13914) [ 980.320969][T13914] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 980.360248][T13914] BTRFS info (device loop8): using crc32c checksum algorithm [ 980.364019][T13916] loop0: detected capacity change from 0 to 32768 [ 980.392293][T13916] BTRFS warning: excessive commit interval 3581, use with care [ 980.410804][T13916] BTRFS info: device /dev/loop0 (7:0) using temp-fsid a0130424-c680-46bb-8316-900a566bfc2e [ 980.421518][T13916] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2190 (13916) [ 980.446907][T13932] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 980.512395][T13916] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 980.593910][T13916] BTRFS info (device loop0): using crc32c checksum algorithm [ 980.622597][T13687] veth0_vlan: entered promiscuous mode [ 980.634609][T13914] BTRFS info (device loop8): enabling ssd optimizations [ 980.673548][T13914] BTRFS info (device loop8): turning on flush-on-commit [ 980.693577][T13914] BTRFS info (device loop8): enabling free space tree [ 980.710948][T13914] BTRFS info (device loop8): force zlib compression, level 3 [ 980.719869][T13687] veth1_vlan: entered promiscuous mode [ 980.727241][T13914] BTRFS info (device loop8): max_inline set to 4096 [ 980.914316][T13916] BTRFS info (device loop0): enabling ssd optimizations [ 980.955011][T13916] BTRFS info (device loop0): turning on flush-on-commit [ 980.964948][T13916] BTRFS info (device loop0): enabling free space tree [ 981.004577][T13916] BTRFS info (device loop0): force zlib compression, level 3 [ 981.058556][T13916] BTRFS info (device loop0): max_inline set to 4096 [ 981.095162][T13687] veth0_macvtap: entered promiscuous mode [ 981.893932][T13687] veth1_macvtap: entered promiscuous mode [ 982.041112][T13687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.119099][T13687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.225055][T13388] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 982.237722][ T195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.289860][ T195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.315128][ T5627] BTRFS info (device loop0): last unmount of filesystem a0130424-c680-46bb-8316-900a566bfc2e [ 982.456135][ T1170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.491347][ T1170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.954525][T13983] veth25: entered promiscuous mode [ 982.966945][T13983] veth25: entered allmulticast mode [ 983.057795][T13389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 983.078861][T13389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 983.089386][T13389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 983.119530][T13389] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 983.139408][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.149066][T13389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 983.182191][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.224815][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.234438][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.481344][T13389] Bluetooth: hci6: command tx timeout [ 986.541393][T14015] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 987.546736][T13389] Bluetooth: hci6: command tx timeout [ 988.204494][T14052] loop3: detected capacity change from 0 to 512 [ 988.359420][T14009] loop5: detected capacity change from 0 to 32768 [ 988.427806][T14009] JBD2: Ignoring recovery information on journal [ 988.551253][T14062] loop3: detected capacity change from 0 to 512 [ 988.612656][T14009] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 988.660913][T14062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.746756][T14062] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 989.019551][ T30] audit: type=1804 audit(1785813142.149:721): pid=14076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2215" name="/newroot/392/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 989.138613][ T5641] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 989.171555][ T5641] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 989.187960][ T30] audit: type=1800 audit(1785813142.309:722): pid=14009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2203" name="file7" dev="loop5" ino=17065 res=0 errno=0 [ 989.228085][T14070] syz.5.2203 (14070) used greatest stack depth: 18856 bytes left [ 989.234098][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.320510][T13987] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.327869][T13987] bridge_slave_0: entered allmulticast mode [ 989.336008][T13987] bridge_slave_0: entered promiscuous mode [ 989.345556][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.352879][T13987] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.360225][T13987] bridge_slave_1: entered allmulticast mode [ 989.370411][T13987] bridge_slave_1: entered promiscuous mode [ 989.505784][T13987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.536052][T13464] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.568065][T13987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.572752][T13687] ocfs2: Unmounting device (7,5) on (node local) [ 989.596452][T13389] Bluetooth: hci6: command tx timeout [ 989.811628][T13464] bond0: (slave syz_tun): Releasing backup interface [ 989.926018][T14073] loop9: detected capacity change from 0 to 32768 [ 989.979649][T13987] team0: Port device team_slave_0 added [ 990.033723][T13987] team0: Port device team_slave_1 added [ 990.073494][T14073] JBD2: Ignoring recovery information on journal [ 990.305734][T14073] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 990.390925][ T195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.613152][T13987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.648970][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.737108][T13987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.784290][T13987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.812396][T13987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.894338][T13987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.914701][T13636] ocfs2: Unmounting device (7,9) on (node local) [ 991.084522][ T195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.118944][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 991.130682][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 991.140719][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 991.149383][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 991.160847][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 991.413947][ T195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.475033][T14101] loop5: detected capacity change from 0 to 32768 [ 991.557955][T13987] hsr_slave_0: entered promiscuous mode [ 991.575681][ T30] audit: type=1800 audit(1785813144.709:723): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2220" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 991.617373][T13987] hsr_slave_1: entered promiscuous mode [ 991.637731][T13987] debugfs: 'hsr0' already exists in 'hsr' [ 991.661113][T13987] Cannot create hsr debugfs directory [ 991.678659][T13389] Bluetooth: hci6: command tx timeout [ 992.368001][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.393430][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.538607][ T5632] IPVS: starting estimator thread 0... [ 992.565622][ T195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.658016][T14130] IPVS: using max 26 ests per chain, 62400 per kthread [ 993.196463][T13389] Bluetooth: hci3: command tx timeout [ 994.414587][ T195] bridge_slave_1: left allmulticast mode [ 994.449504][ T195] bridge_slave_1: left promiscuous mode [ 994.479469][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.526663][ T195] bridge_slave_0: left allmulticast mode [ 994.543128][ T195] bridge_slave_0: left promiscuous mode [ 994.550343][T14145] loop9: detected capacity change from 0 to 32768 [ 994.558949][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.575643][T14145] BTRFS warning: excessive commit interval 3581, use with care [ 994.600265][T14145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2231 (14145) [ 994.677972][T14145] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 994.699731][T14145] BTRFS info (device loop9): using crc32c checksum algorithm [ 994.846614][T14145] BTRFS info (device loop9): enabling ssd optimizations [ 994.880527][T14145] BTRFS info (device loop9): turning on flush-on-commit [ 994.909120][T14145] BTRFS info (device loop9): enabling free space tree [ 994.957327][T14145] BTRFS info (device loop9): force zlib compression, level 3 [ 994.981243][T14145] BTRFS info (device loop9): max_inline set to 4096 [ 995.276304][T13389] Bluetooth: hci3: command tx timeout [ 995.422905][T13636] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 995.527088][T14162] loop5: detected capacity change from 0 to 40427 [ 995.536752][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.538402][T14179] loop0: detected capacity change from 0 to 32768 [ 995.560584][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.575206][T14179] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2237 (14179) [ 995.594194][T14162] F2FS-fs (loop5): Invalid log blocks per segment (1) [ 995.623754][T14162] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 995.655945][ T195] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 995.691370][T14162] F2FS-fs (loop5): Image doesn't support compression [ 995.733190][T14162] F2FS-fs (loop5): build fault injection rate: 690 [ 995.760876][T14179] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 995.779519][T14162] F2FS-fs (loop5): build fault injection type: 0x35f7 [ 995.786858][ T195] bond0 (unregistering): Released all slaves [ 995.814067][T14162] F2FS-fs (loop5): invalid crc value [ 995.827575][T14179] BTRFS info (device loop0): using blake2b checksum algorithm [ 996.795090][T14162] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 996.845340][T14162] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 996.866398][T14162] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 996.880317][T14162] F2FS-fs (loop5): Start checkpoint disabled! [ 996.919652][T14202] net_ratelimit: 10 callbacks suppressed [ 996.919673][T14202] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 996.935726][T14179] BTRFS info (device loop0): enabling ssd optimizations [ 996.959682][T14162] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 996.969136][T14179] BTRFS info (device loop0): turning on async discard [ 996.980052][T14179] BTRFS info (device loop0): enabling free space tree [ 996.987400][ T5749] IPVS: starting estimator thread 0... [ 996.998251][T14162] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 997.006340][T14179] BTRFS info (device loop0): use zstd compression, level 3 [ 997.014039][T14162] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 997.086359][T14205] IPVS: using max 25 ests per chain, 60000 per kthread [ 997.252454][ T5627] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 997.372710][T13389] Bluetooth: hci3: command tx timeout [ 997.493643][ T5764] IPVS: starting estimator thread 0... [ 997.503396][T14211] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 997.599679][ T7281] F2FS-fs (loop5): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xfd7/0x1840 [ 997.617613][ T7281] bio_check_eod: 5 callbacks suppressed [ 997.617632][ T7281] kworker/u8:13: attempt to access beyond end of device [ 997.617632][ T7281] loop5: rw=1, sector=77824, nr_sectors = 224 limit=40427 [ 997.636372][T14212] IPVS: using max 25 ests per chain, 60000 per kthread [ 997.655552][ T7281] CPU: 1 UID: 0 PID: 7281 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 997.655583][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 997.655602][ T7281] Workqueue: writeback wb_workfn (flush-7:5) [ 997.655640][ T7281] Call Trace: [ 997.655651][ T7281] [ 997.655661][ T7281] dump_stack_lvl+0xe8/0x150 [ 997.655703][ T7281] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 997.655744][ T7281] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 997.655786][ T7281] f2fs_balance_fs+0x349/0x870 [ 997.655828][ T7281] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 997.655869][ T7281] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 997.655915][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.655946][ T7281] ? do_raw_spin_lock+0x12b/0x2f0 [ 997.655980][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656013][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656050][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656080][ T7281] ? folio_unlock+0x101/0x160 [ 997.656111][ T7281] f2fs_write_single_data_page+0xfd7/0x1840 [ 997.656176][ T7281] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 997.656235][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656269][ T7281] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 997.656314][ T7281] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 997.656352][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656382][ T7281] ? folio_clear_dirty_for_io+0x646/0x820 [ 997.656435][ T7281] f2fs_write_data_pages+0x1d2e/0x36f0 [ 997.656524][ T7281] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 997.656581][ T7281] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 997.656648][ T7281] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 997.656705][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656735][ T7281] ? __lock_acquire+0x683/0x2cf0 [ 997.656789][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656819][ T7281] ? set_raw_inline+0x28b/0x390 [ 997.656851][ T7281] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 997.656884][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.656916][ T7281] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 997.656958][ T7281] do_writepages+0x338/0x560 [ 997.657002][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.657036][ T7281] ? reacquire_held_locks+0x104/0x190 [ 997.657061][ T7281] ? writeback_sb_inodes+0x450/0x1b00 [ 997.657106][ T7281] __writeback_single_inode+0x12e/0xf90 [ 997.657154][ T7281] writeback_sb_inodes+0x9de/0x1b00 [ 997.657221][ T7281] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 997.657306][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.657337][ T7281] ? rcu_is_watching+0x15/0xb0 [ 997.657363][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.657394][ T7281] ? queue_io+0x2d3/0x470 [ 997.657439][ T7281] wb_writeback+0x41c/0xad0 [ 997.657478][ T7281] ? queue_io+0x281/0x470 [ 997.657520][ T7281] ? __pfx_wb_writeback+0x10/0x10 [ 997.657553][ T7281] ? do_raw_spin_lock+0x12b/0x2f0 [ 997.657603][ T7281] wb_workfn+0x431/0x10f0 [ 997.657651][ T7281] ? __pfx_wb_workfn+0x10/0x10 [ 997.657680][ T7281] ? rcu_is_watching+0x15/0xb0 [ 997.657705][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.657734][ T7281] ? trace_hrtimer_start+0x82/0x200 [ 997.657777][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.657807][ T7281] ? do_raw_spin_lock+0x12b/0x2f0 [ 997.657842][ T7281] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 997.657876][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.657910][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.657950][ T7281] ? rcu_is_watching+0x15/0xb0 [ 997.657975][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.658009][ T7281] ? process_scheduled_works+0xa20/0x14e0 [ 997.658042][ T7281] process_scheduled_works+0xa8e/0x14e0 [ 997.658107][ T7281] ? __pfx_process_scheduled_works+0x10/0x10 [ 997.658146][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.658177][ T7281] ? assign_work+0x3cf/0x5d0 [ 997.658215][ T7281] worker_thread+0xa47/0xfb0 [ 997.658281][ T7281] kthread+0x388/0x470 [ 997.658321][ T7281] ? __pfx_worker_thread+0x10/0x10 [ 997.658351][ T7281] ? __pfx_kthread+0x10/0x10 [ 997.658392][ T7281] ret_from_fork+0x514/0xb70 [ 997.658441][ T7281] ? __pfx_ret_from_fork+0x10/0x10 [ 997.658480][ T7281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 997.658510][ T7281] ? __switch_to+0xc89/0x1420 [ 997.658548][ T7281] ? __pfx_kthread+0x10/0x10 [ 997.658589][ T7281] ret_from_fork_asm+0x1a/0x30 [ 997.658634][ T7281] [ 998.117053][ T7281] F2FS-fs (loop5): Stopped filesystem due to reason: 1 [ 998.895653][T14215] loop9: detected capacity change from 0 to 32768 [ 998.993844][T14215] JBD2: Ignoring recovery information on journal [ 999.073916][ T195] hsr_slave_0: left promiscuous mode [ 999.139801][ T195] hsr_slave_1: left promiscuous mode [ 999.162310][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.175701][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.189159][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.198948][T14215] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 999.213256][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.239625][ T195] batman_adv: batadv0: Interface deactivated: dummy0 [ 999.257003][ T195] batman_adv: batadv0: Removing interface: dummy0 [ 999.309590][ T195] veth1_macvtap: left promiscuous mode [ 999.330598][ T195] veth0_macvtap: left promiscuous mode [ 999.353355][ T195] veth1_vlan: left promiscuous mode [ 999.368369][ T195] veth0_vlan: left promiscuous mode [ 999.446396][T13389] Bluetooth: hci3: command tx timeout [ 1000.134372][T13636] ocfs2: Unmounting device (7,9) on (node local) [ 1000.996409][T14248] loop0: detected capacity change from 0 to 32768 [ 1001.010829][T14254] loop9: detected capacity change from 0 to 512 [ 1001.016384][ T5749] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1001.099633][ T30] audit: type=1800 audit(1785813154.239:724): pid=14257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2247" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1001.189385][ T5749] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1001.221002][ T5749] usb 6-1: config 100 has an invalid interface number: 173 but max is 0 [ 1001.242312][ T5749] usb 6-1: config 100 has no interface number 0 [ 1001.268200][ T5749] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1001.290973][ T5749] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1001.292787][ T5627] non-latin1 character 0x3ff found in JFS file name [ 1001.330080][ T5749] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1001.330263][ T5627] mount with iocharset=utf8 to access [ 1001.353422][ T5749] usb 6-1: config 100 interface 173 has no altsetting 0 [ 1001.390596][ T5749] usb 6-1: string descriptor 0 read error: -22 [ 1001.398475][ T5749] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1001.412190][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.429903][ T5627] read_mapping_page failed! [ 1001.437284][ T5627] ERROR: (device loop0): txCommit: [ 1001.437284][ T5627] [ 1001.448529][T14252] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1001.462839][ T5627] ERROR: (device loop0): remounting filesystem as read-only [ 1001.508487][ T5749] metro_usb 6-1:100.173: Metrologic USB to Serial converter detected [ 1001.532522][ T5749] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1001.734354][T14252] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 1001.762385][ T10] usb 6-1: USB disconnect, device number 17 [ 1001.793104][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1001.854322][ T195] team0 (unregistering): Port device team_slave_1 removed [ 1001.854865][ T10] metro_usb 6-1:100.173: device disconnected [ 1001.901319][ T195] team0 (unregistering): Port device team_slave_0 removed [ 1002.007323][T14262] loop9: detected capacity change from 0 to 32768 [ 1002.032484][T14262] JBD2: Ignoring recovery information on journal [ 1002.112453][T14262] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1002.200021][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1002.674638][T13636] ocfs2: Unmounting device (7,9) on (node local) [ 1003.171714][T13987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1003.189414][ T195] IPVS: stop unused estimator thread 0... [ 1003.236627][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1003.256058][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1003.270156][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1003.278830][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1003.289446][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1003.313815][T13987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.354777][T13987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1003.432896][T13987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.509083][T13987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1003.595043][T13987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1003.661149][T13987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1003.755968][T13987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.230441][T13389] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1004.255125][T13389] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1004.272919][T13389] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1004.293937][T13389] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1004.302707][T13389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1004.401869][T14107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.437396][T14107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.466564][T14107] bridge_slave_0: entered allmulticast mode [ 1004.497903][T14107] bridge_slave_0: entered promiscuous mode [ 1004.526209][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1004.546686][T14107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.577449][T14107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.606509][T14107] bridge_slave_1: entered allmulticast mode [ 1004.628330][T14107] bridge_slave_1: entered promiscuous mode [ 1004.736050][T14107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.771363][T14107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.903017][T14107] team0: Port device team_slave_0 added [ 1004.947196][T14107] team0: Port device team_slave_1 added [ 1004.962720][T14295] loop5: detected capacity change from 0 to 32768 [ 1005.004285][T14295] JBD2: Ignoring recovery information on journal [ 1005.131828][T14295] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1005.251884][T14107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.273871][T14107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.325644][T14107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.339590][T14316] loop9: detected capacity change from 0 to 32768 [ 1005.358088][ T5631] Bluetooth: hci0: command tx timeout [ 1005.391681][T14107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.422055][T14107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.452404][T14107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.556783][ T30] audit: type=1800 audit(1785813158.689:725): pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2261" name="file1" dev="loop9" ino=4 res=0 errno=0 [ 1005.669804][T14107] hsr_slave_0: entered promiscuous mode [ 1005.723500][T14107] hsr_slave_1: entered promiscuous mode [ 1005.732642][T14107] debugfs: 'hsr0' already exists in 'hsr' [ 1005.740533][T14107] Cannot create hsr debugfs directory [ 1005.770663][T13687] ocfs2: Unmounting device (7,5) on (node local) [ 1005.849556][T13636] non-latin1 character 0x3ff found in JFS file name [ 1005.860261][T13636] mount with iocharset=utf8 to access [ 1005.897566][T13636] read_mapping_page failed! [ 1005.911714][T13636] ERROR: (device loop9): txCommit: [ 1005.911714][T13636] [ 1005.929342][T13636] ERROR: (device loop9): remounting filesystem as read-only [ 1006.397490][T13389] Bluetooth: hci7: command tx timeout [ 1006.452328][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1006.485897][T13987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.791472][T13987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.839511][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.846681][ T9447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.877575][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.884739][ T9447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.299077][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1007.310863][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1007.318990][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1007.329755][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1007.340884][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1007.437323][ T5631] Bluetooth: hci0: command tx timeout [ 1007.531891][T14280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.543777][T14280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.554620][T14280] bridge_slave_0: entered allmulticast mode [ 1007.562966][T14280] bridge_slave_0: entered promiscuous mode [ 1007.581636][T14280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.595811][T14280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.611175][T14280] bridge_slave_1: entered allmulticast mode [ 1007.625049][T14280] bridge_slave_1: entered promiscuous mode [ 1007.824465][T14280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.855391][T14280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.096135][T14280] team0: Port device team_slave_0 added [ 1008.181842][T14309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.190996][T14309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.202074][T14309] bridge_slave_0: entered allmulticast mode [ 1008.210488][T14309] bridge_slave_0: entered promiscuous mode [ 1008.224832][T14280] team0: Port device team_slave_1 added [ 1008.234871][T14309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.256355][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.265820][T14309] bridge_slave_1: entered allmulticast mode [ 1008.288271][T14309] bridge_slave_1: entered promiscuous mode [ 1008.388895][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1008.425937][T14280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.433775][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.460744][T14280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.476434][ T5631] Bluetooth: hci7: command tx timeout [ 1008.490413][T14107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1008.504204][T14107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1008.514864][T14309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.528500][T14280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.535506][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.562652][T14280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.602970][T14107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1008.616725][T14107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.641511][T14309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.673051][T14107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1008.685323][T14107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.770849][T14107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1008.785226][T14107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.801229][T14309] team0: Port device team_slave_0 added [ 1008.813352][T14309] team0: Port device team_slave_1 added [ 1008.937995][T14280] hsr_slave_0: entered promiscuous mode [ 1008.945094][T14280] hsr_slave_1: entered promiscuous mode [ 1008.952323][T14280] debugfs: 'hsr0' already exists in 'hsr' [ 1008.960280][T14280] Cannot create hsr debugfs directory [ 1008.994767][T14309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.003132][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.032163][T14309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.097997][T14309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.107509][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.140163][T14309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.418391][T14309] hsr_slave_0: entered promiscuous mode [ 1009.425559][T14309] hsr_slave_1: entered promiscuous mode [ 1009.432481][T14309] debugfs: 'hsr0' already exists in 'hsr' [ 1009.438411][ T5631] Bluetooth: hci1: command tx timeout [ 1009.449367][T14309] Cannot create hsr debugfs directory [ 1009.518619][ T5631] Bluetooth: hci0: command tx timeout [ 1010.009156][T14280] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.097877][T13987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.253812][T14280] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.414501][T14280] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.437854][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.453039][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.472175][T14363] bridge_slave_0: entered allmulticast mode [ 1010.485848][T14363] bridge_slave_0: entered promiscuous mode [ 1010.496773][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.504419][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.526541][T14363] bridge_slave_1: entered allmulticast mode [ 1010.540327][T14363] bridge_slave_1: entered promiscuous mode [ 1010.556339][ T5631] Bluetooth: hci7: command tx timeout [ 1010.567731][T14107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.615421][T14280] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.712132][T14363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.764409][T14363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.864621][T14363] team0: Port device team_slave_0 added [ 1010.884413][T14363] team0: Port device team_slave_1 added [ 1010.938208][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.945375][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.972907][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.989287][T14107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.017662][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.025664][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.052586][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.177014][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.184243][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.243872][T14363] hsr_slave_0: entered promiscuous mode [ 1011.252672][T14363] hsr_slave_1: entered promiscuous mode [ 1011.260821][T14363] debugfs: 'hsr0' already exists in 'hsr' [ 1011.266872][T14363] Cannot create hsr debugfs directory [ 1011.273380][T13987] veth0_vlan: entered promiscuous mode [ 1011.308295][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.315451][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.374667][T14280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1011.388361][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1011.459391][T13987] veth1_vlan: entered promiscuous mode [ 1011.474877][T14280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1011.490303][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.513142][T14280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1011.521695][ T5631] Bluetooth: hci1: command tx timeout [ 1011.543542][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.596886][ T5631] Bluetooth: hci0: command tx timeout [ 1011.609887][T14309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.660548][T14280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1011.679306][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.818677][T14309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.977629][T14309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.102944][T14309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.128989][T13987] veth0_macvtap: entered promiscuous mode [ 1012.145916][T13987] veth1_macvtap: entered promiscuous mode [ 1012.239332][T13987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.301053][T13987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.346431][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.537959][T14280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.645654][ T5631] Bluetooth: hci7: command tx timeout [ 1012.664855][T14309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1012.681605][T14309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1012.689930][T14309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1012.701348][T14309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1012.709751][T14309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1012.721617][T14309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1012.729940][T14309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1012.741206][T14309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1012.940593][T14363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.999745][T14280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.016437][ T7282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.046764][ T7282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.056479][ T9446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.075442][ T7282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.170754][T14363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.196019][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.203181][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.267578][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.274759][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.349404][T14363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.381737][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.391012][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.398378][T14107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.458764][ T195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.570582][T14363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.600873][ T5631] Bluetooth: hci1: command tx timeout [ 1013.907830][T12564] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1014.059535][T14309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.101849][T12564] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1014.120813][T12564] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 1014.136467][T12564] usb 5-1: config 100 has no interface number 0 [ 1014.144715][T12564] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1014.155465][T12564] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1014.169608][T12564] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1014.193574][T12564] usb 5-1: config 100 interface 173 has no altsetting 0 [ 1014.221151][T12564] usb 5-1: string descriptor 0 read error: -22 [ 1014.228949][T12564] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1014.269922][T14309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.277022][T12564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.303203][T14363] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1014.322299][T14524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1014.350938][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.362719][T12564] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 1014.378682][T14363] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1014.402703][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.410834][T12564] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1014.433268][T14363] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1014.463106][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.481763][T14363] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1014.501278][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.525695][T14157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.532858][T14157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.574645][T14524] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 1014.591061][ T5632] usb 5-1: USB disconnect, device number 28 [ 1014.614469][T14107] veth0_vlan: entered promiscuous mode [ 1014.628513][ T5632] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1014.650792][ T5632] metro_usb 5-1:100.173: device disconnected [ 1014.664665][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.671905][ T9446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.706709][T14107] veth1_vlan: entered promiscuous mode [ 1014.965598][T14107] veth0_macvtap: entered promiscuous mode [ 1015.010727][T14107] veth1_macvtap: entered promiscuous mode [ 1015.149382][T14107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.256063][T14107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.336473][T14363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.419445][T14280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.449187][ T1117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.476531][T14573] loop4: detected capacity change from 0 to 512 [ 1015.492768][T14573] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1015.528768][ T9447] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.551600][T14573] EXT4-fs (loop4): 1 truncate cleaned up [ 1015.576533][T14573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.592556][T14363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.686274][ T5631] Bluetooth: hci1: command tx timeout [ 1015.700771][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.708003][ T9447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.670428][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.677696][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.738347][T13987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.783139][ T9447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.816400][ T1170] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.827759][ T9447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.054620][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.085799][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.318139][ T7282] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.497148][T14280] veth0_vlan: entered promiscuous mode [ 1017.535509][T14280] veth1_vlan: entered promiscuous mode [ 1017.590060][T14309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.749523][T14280] veth0_macvtap: entered promiscuous mode [ 1017.809587][T14280] veth1_macvtap: entered promiscuous mode [ 1017.866099][T14309] veth0_vlan: entered promiscuous mode [ 1017.942568][T14280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.980383][T14309] veth1_vlan: entered promiscuous mode [ 1018.012406][T14280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.103374][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.127439][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.149254][ T9446] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.179822][ T9446] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.203537][T14605] loop6: detected capacity change from 0 to 32768 [ 1018.226736][T14605] BTRFS warning: excessive commit interval 3581, use with care [ 1018.269853][T14605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2222 (14605) [ 1018.324280][T14309] veth0_macvtap: entered promiscuous mode [ 1018.367097][T14605] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1018.407639][T14605] BTRFS info (device loop6): using crc32c checksum algorithm [ 1018.448595][T14309] veth1_macvtap: entered promiscuous mode [ 1018.582942][T14605] BTRFS info (device loop6): enabling ssd optimizations [ 1018.591635][T14363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.616576][T14605] BTRFS info (device loop6): turning on flush-on-commit [ 1018.628069][T14605] BTRFS info (device loop6): enabling free space tree [ 1018.649112][T14605] BTRFS info (device loop6): force zlib compression, level 3 [ 1018.684122][T14605] BTRFS info (device loop6): max_inline set to 4096 [ 1018.764268][T14309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.826663][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.837595][T14309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.850292][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.045517][ T9447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.076368][ T9447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.094723][ T9447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.103002][T14107] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1019.181271][ T1117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.267221][ T9447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.335832][T14363] veth0_vlan: entered promiscuous mode [ 1019.477777][ T7282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.605168][T14363] veth1_vlan: entered promiscuous mode [ 1019.710419][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.775159][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.944798][T14363] veth0_macvtap: entered promiscuous mode [ 1020.024365][ T7282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.053884][T14363] veth1_macvtap: entered promiscuous mode [ 1020.059797][ T7282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.165762][T14363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.218288][T14363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.516927][ T9446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.596746][ T7282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.641730][ T7282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.812950][T14157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.851316][T14157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.987522][ T7282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.996416][T14157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.015993][T14157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.222694][T14657] loop6: detected capacity change from 0 to 32768 [ 1021.325630][T13389] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1021.338503][T13389] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1021.352041][T13389] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1021.370727][T13389] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1021.381947][T13389] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1021.400828][ T30] audit: type=1800 audit(1785813174.539:726): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2271" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1021.780929][T14107] read_mapping_page failed! [ 1021.810279][T14107] ERROR: (device loop6): txCommit: [ 1021.810279][T14107] [ 1021.850527][T14107] ERROR: (device loop6): remounting filesystem as read-only [ 1022.003367][ T5749] IPVS: starting estimator thread 0... [ 1022.126468][T14702] IPVS: using max 25 ests per chain, 60000 per kthread [ 1022.520847][ T24] IPVS: starting estimator thread 0... [ 1022.534619][T14716] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1022.616345][T14717] IPVS: using max 27 ests per chain, 64800 per kthread [ 1022.844700][ T9446] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.328993][ T9446] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.458885][T14710] loop2: detected capacity change from 0 to 32768 [ 1023.526610][ T5631] Bluetooth: hci8: command tx timeout [ 1023.543314][T14710] JBD2: Ignoring recovery information on journal [ 1023.766774][T14710] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1023.852722][ T9446] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.416813][ T9446] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.600144][T13389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1024.623428][T13389] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1024.634534][T13389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1024.646827][T13389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1024.658207][T13389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1024.872093][T14309] ocfs2: Unmounting device (7,2) on (node local) [ 1025.598881][T13389] Bluetooth: hci8: command tx timeout [ 1025.705513][ T9446] bridge_slave_1: left allmulticast mode [ 1025.717656][ T9446] bridge_slave_1: left promiscuous mode [ 1025.724121][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.739789][ T9446] bridge_slave_0: left allmulticast mode [ 1025.745480][ T9446] bridge_slave_0: left promiscuous mode [ 1025.753521][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.864729][T14773] loop2: detected capacity change from 0 to 2048 [ 1025.958123][T14773] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1025.971574][ T7561] udevd[7561]: incorrect nilfs2 checksum on /dev/loop2 [ 1026.248968][T14781] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1026.435622][T14773] fuse: Bad value for 'fd' [ 1026.551860][ T9446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.595169][ T9446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.637501][ T9446] bond0 (unregistering): Released all slaves [ 1026.716400][T13389] Bluetooth: hci3: command tx timeout [ 1027.489311][T14678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.536352][T14678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.564039][T14678] bridge_slave_0: entered allmulticast mode [ 1027.633584][T14678] bridge_slave_0: entered promiscuous mode [ 1027.686297][T13389] Bluetooth: hci8: command tx timeout [ 1027.810833][T14809] netlink: 'syz.2.2297': attribute type 2 has an invalid length. [ 1027.836804][T14678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.858894][T14678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.885399][T14678] bridge_slave_1: entered allmulticast mode [ 1027.926907][T14678] bridge_slave_1: entered promiscuous mode [ 1027.991295][ T9446] hsr_slave_0: left promiscuous mode [ 1028.016939][ T9446] hsr_slave_1: left promiscuous mode [ 1028.042239][ T9446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.064255][ T9446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.086702][ T9446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.095863][ T9446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.170907][ T9446] veth1_macvtap: left promiscuous mode [ 1028.187978][ T9446] veth0_macvtap: left promiscuous mode [ 1028.207286][ T9446] veth1_vlan: left promiscuous mode [ 1028.213213][ T9446] veth0_vlan: left promiscuous mode [ 1029.303862][T13389] Bluetooth: hci3: command tx timeout [ 1029.775406][T13389] Bluetooth: hci8: command tx timeout [ 1030.036802][T14826] syz.2.2299: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1030.098778][T14826] CPU: 1 UID: 0 PID: 14826 Comm: syz.2.2299 Not tainted syzkaller #0 PREEMPT(full) [ 1030.098815][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1030.098833][T14826] Call Trace: [ 1030.098843][T14826] [ 1030.098859][T14826] dump_stack_lvl+0xe8/0x150 [ 1030.098911][T14826] warn_alloc+0x24c/0x270 [ 1030.098958][T14826] ? __pfx_warn_alloc+0x10/0x10 [ 1030.098997][T14826] ? trace_kmalloc+0x2a/0xf0 [ 1030.099039][T14826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.099073][T14826] ? alloc_pages_mpol+0x24a/0x380 [ 1030.099126][T14826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.099166][T14826] __vmalloc_node_range_noprof+0x1175/0x1730 [ 1030.099241][T14826] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1030.099279][T14826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.099322][T14826] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1030.099366][T14826] __vmalloc_noprof+0xd2/0x120 [ 1030.099403][T14826] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1030.099453][T14826] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 1030.099492][T14826] ? bpf_prog_alloc+0x2a/0x1a0 [ 1030.099526][T14826] bpf_prog_alloc+0x3c/0x1a0 [ 1030.099562][T14826] bpf_prog_load+0x7f8/0x1c00 [ 1030.099614][T14826] ? __pfx_bpf_prog_load+0x10/0x10 [ 1030.099685][T14826] __sys_bpf+0xd0d/0xd90 [ 1030.099734][T14826] ? __pfx___sys_bpf+0x10/0x10 [ 1030.099774][T14826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.099804][T14826] ? do_futex+0x3e7/0x4e0 [ 1030.099864][T14826] ? rcu_is_watching+0x15/0xb0 [ 1030.099890][T14826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1030.099927][T14826] __x64_sys_bpf+0xba/0xd0 [ 1030.099961][T14826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.099989][T14826] do_syscall_64+0x174/0x580 [ 1030.100023][T14826] ? trace_irq_disable+0x3b/0x140 [ 1030.100065][T14826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.100091][T14826] RIP: 0033:0x7feb1dd9e019 [ 1030.100115][T14826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.100137][T14826] RSP: 002b:00007feb1ec05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1030.100164][T14826] RAX: ffffffffffffffda RBX: 00007feb1e025fa0 RCX: 00007feb1dd9e019 [ 1030.100184][T14826] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 1030.100201][T14826] RBP: 00007feb1de3500c R08: 0000000000000000 R09: 0000000000000000 [ 1030.100217][T14826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.100232][T14826] R13: 00007feb1e026038 R14: 00007feb1e025fa0 R15: 00007fff4c6c49c8 [ 1030.100268][T14826] [ 1030.103416][T14826] Mem-Info: [ 1030.393668][T14826] active_anon:47624 inactive_anon:0 isolated_anon:0 [ 1030.393668][T14826] active_file:0 inactive_file:65024 isolated_file:0 [ 1030.393668][T14826] unevictable:768 dirty:262 writeback:0 [ 1030.393668][T14826] slab_reclaimable:12583 slab_unreclaimable:127631 [ 1030.393668][T14826] mapped:62661 shmem:40244 pagetables:1709 [ 1030.393668][T14826] sec_pagetables:0 bounce:0 [ 1030.393668][T14826] kernel_misc_reclaimable:0 [ 1030.393668][T14826] free:1173370 free_pcp:14942 free_cma:0 [ 1030.548894][T14826] Node 0 active_anon:186596kB inactive_anon:0kB active_file:0kB inactive_file:259888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:253144kB dirty:1044kB writeback:0kB shmem:155240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15684kB pagetables:6724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1030.634821][T14826] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1030.747507][T14826] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.801133][ T9446] team0 (unregistering): Port device team_slave_1 removed [ 1030.873034][T14826] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1030.886628][T14826] Node 0 DMA32 free:733544kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:182396kB inactive_anon:0kB active_file:0kB inactive_file:259888kB unevictable:1536kB writepending:1044kB zspages:0kB present:3129332kB managed:2548556kB mlocked:0kB bounce:0kB free_pcp:74092kB local_pcp:7872kB free_cma:0kB [ 1030.938659][ T9446] team0 (unregistering): Port device team_slave_0 removed [ 1030.956246][T14826] lowmem_reserve[]: 0 0 0 0 0 [ 1030.973063][T14826] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1031.048325][T14826] lowmem_reserve[]: 0 0 0 0 0 [ 1031.063800][T14826] Node 1 Normal free:3939376kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1031.185957][T14826] lowmem_reserve[]: 0 0 0 0 0 [ 1031.212737][T14826] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1031.256924][T14826] Node 0 DMA32: 155*4kB (UME) 44*8kB (UME) 26*16kB (UME) 10*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UE) 2*1024kB (ME) 0*2048kB 176*4096kB (M) = 726316kB [ 1031.325315][T14826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1031.360746][T13389] Bluetooth: hci3: command tx timeout [ 1031.380537][T14826] Node 1 Normal: 0*4kB 2*8kB (UM) 4*16kB (UM) 7*32kB (UM) 6*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3939376kB [ 1031.397736][T14826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1031.411522][T14826] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1031.435912][T14826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1031.466350][T14826] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1031.479275][T14826] 101153 total pagecache pages [ 1031.492335][T14826] 0 pages in swap cache [ 1031.511307][T14826] Free swap = 124996kB [ 1031.515513][T14826] Total swap = 124996kB [ 1031.532582][T14826] 2097051 pages RAM [ 1031.549648][T14826] 0 pages HighMem/MovableOnly [ 1031.566036][T14826] 428233 pages reserved [ 1031.591982][T14826] 0 pages cma reserved [ 1032.068055][T14678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.095538][T14843] batman_adv: batadv0: Adding interface: dummy0 [ 1032.141515][T14843] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.266318][T14843] batman_adv: batadv0: Interface activated: dummy0 [ 1032.366978][T14846] batadv0: mtu less than device minimum [ 1032.405949][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.417861][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.429693][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.441571][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.453395][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.465231][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.477181][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.489019][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.500893][T14846] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1032.596065][ T5631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1032.606607][ T5631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1032.615835][ T5631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1032.635073][ T5631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1032.635541][T14678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.660013][T14853] fuse: Unknown parameter '0x0000000000000004' [ 1032.677648][ T5631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1032.889761][T14678] team0: Port device team_slave_0 added [ 1033.018598][T14678] team0: Port device team_slave_1 added [ 1033.228097][T14678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.263085][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.426301][T14678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.436256][T13389] Bluetooth: hci3: command tx timeout [ 1033.473805][T14678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.504732][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.626339][T14678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.695999][T14875] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2305'. [ 1033.706717][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2305'. [ 1034.286923][T14885] overlayfs: missing 'lowerdir' [ 1034.716379][T13389] Bluetooth: hci9: command tx timeout [ 1034.905806][T14678] hsr_slave_0: entered promiscuous mode [ 1034.929155][T14678] hsr_slave_1: entered promiscuous mode [ 1034.935729][T14678] debugfs: 'hsr0' already exists in 'hsr' [ 1035.070990][T14678] Cannot create hsr debugfs directory [ 1036.253051][T14746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.268704][T14746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.281926][T14746] bridge_slave_0: entered allmulticast mode [ 1036.297948][T14746] bridge_slave_0: entered promiscuous mode [ 1036.322441][T14746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.339912][T14746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.348181][T14892] loop7: detected capacity change from 0 to 32768 [ 1036.359980][T14746] bridge_slave_1: entered allmulticast mode [ 1036.394953][T14746] bridge_slave_1: entered promiscuous mode [ 1036.403661][T14892] JBD2: Ignoring recovery information on journal [ 1036.512651][T14892] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1036.796652][T13389] Bluetooth: hci9: command tx timeout [ 1036.840550][T14280] ocfs2: Unmounting device (7,7) on (node local) [ 1037.242210][T14746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.285253][T14746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.513651][T14746] team0: Port device team_slave_0 added [ 1037.683409][T14746] team0: Port device team_slave_1 added [ 1037.980842][T14746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.016128][T14746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.078244][T14746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.116084][T14746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.129469][T14746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.156932][T14746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.497299][T14746] hsr_slave_0: entered promiscuous mode [ 1038.532617][T14746] hsr_slave_1: entered promiscuous mode [ 1038.548439][T14746] debugfs: 'hsr0' already exists in 'hsr' [ 1038.559263][T14746] Cannot create hsr debugfs directory [ 1038.876352][T13389] Bluetooth: hci9: command tx timeout [ 1039.262816][T14962] fuse: Unknown parameter '0x0000000000000004' [ 1039.467400][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.487546][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.512095][T14852] bridge_slave_0: entered allmulticast mode [ 1039.534620][T14852] bridge_slave_0: entered promiscuous mode [ 1039.599461][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.623483][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.640447][T14852] bridge_slave_1: entered allmulticast mode [ 1039.660442][T14852] bridge_slave_1: entered promiscuous mode [ 1039.738638][T14678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1039.772857][T14678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1039.876048][T14678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1039.915993][T14678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1040.061604][T14678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1040.096002][T14678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1040.124129][T14852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.183361][T14678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1040.247008][T14678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1040.353948][T14852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.711015][T14746] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.786856][T14852] team0: Port device team_slave_0 added [ 1040.849061][T14852] team0: Port device team_slave_1 added [ 1040.958133][T13389] Bluetooth: hci9: command tx timeout [ 1041.015399][T14997] netlink: 'syz.2.2319': attribute type 2 has an invalid length. [ 1041.148348][T14746] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.192935][T14852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.209256][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.268743][T14852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.312804][T14852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.330466][T14852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.441958][T14852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.630795][T14746] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.649654][T15010] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 1041.772970][T15010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.798721][T15010] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1041.925594][T14746] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.998235][T14852] hsr_slave_0: entered promiscuous mode [ 1042.005430][T14852] hsr_slave_1: entered promiscuous mode [ 1042.019428][T14852] debugfs: 'hsr0' already exists in 'hsr' [ 1042.036273][T14852] Cannot create hsr debugfs directory [ 1042.718270][T13389] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1042.731965][T13389] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1042.740401][T13389] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1042.752757][T13389] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1042.760859][T13389] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1042.882817][T15025] loop2: detected capacity change from 0 to 512 [ 1043.188062][T14678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.223108][T14746] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1043.444803][T14746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.479295][T14746] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1043.538137][T14746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1043.568697][T14746] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1043.611705][T14746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1043.662953][T15033] veth3: entered promiscuous mode [ 1043.668256][T15033] veth3: entered allmulticast mode [ 1043.860165][T14852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.936239][T14746] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1043.987416][T14746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1044.372939][T14852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.397027][T15053] fuse: Unknown parameter '0x0000000000000004' [ 1044.487949][T14678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.571247][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.578429][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.631596][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.638756][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.762943][T14852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.800766][T13389] Bluetooth: hci10: command tx timeout [ 1045.116945][T14852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.792100][T13389] Bluetooth: hci10: command tx timeout [ 1048.774298][T14852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1048.834439][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1048.874827][T14852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1048.957794][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.984947][T14852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1049.039157][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.081957][T14746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.137000][T14852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1049.179031][T14852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.339518][T14746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.589307][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.596573][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.741709][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.748939][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.792517][T15021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.799900][T15021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.808690][T15021] bridge_slave_0: entered allmulticast mode [ 1049.828691][T15021] bridge_slave_0: entered promiscuous mode [ 1049.837264][T13389] Bluetooth: hci10: command tx timeout [ 1049.855102][T15021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.878086][T15021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.891473][T15021] bridge_slave_1: entered allmulticast mode [ 1049.900469][T15021] bridge_slave_1: entered promiscuous mode [ 1050.025891][T15021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.065685][T15021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.170646][T14678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.183550][T15021] team0: Port device team_slave_0 added [ 1050.200746][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1050.215099][T15021] team0: Port device team_slave_1 added [ 1050.320386][T15021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.327829][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.359045][T15021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.387548][T15021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.394641][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.425640][T15021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.625047][T15021] hsr_slave_0: entered promiscuous mode [ 1050.632174][T15021] hsr_slave_1: entered promiscuous mode [ 1050.640357][T15021] debugfs: 'hsr0' already exists in 'hsr' [ 1050.646122][T15021] Cannot create hsr debugfs directory [ 1050.728149][T14852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.887001][T14678] veth0_vlan: entered promiscuous mode [ 1050.944290][T14678] veth1_vlan: entered promiscuous mode [ 1050.955134][T14852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.104503][T14157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.111746][T14157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.175026][T14157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.182299][T14157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.389644][T15021] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.500036][T14678] veth0_macvtap: entered promiscuous mode [ 1051.602033][T15021] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.619731][T14678] veth1_macvtap: entered promiscuous mode [ 1051.630496][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1051.670521][T14746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.745404][T15021] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.813306][T14678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.916944][T13389] Bluetooth: hci10: command tx timeout [ 1051.924041][T15021] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.952312][T14678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.986821][ T6294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.351657][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.380499][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.525299][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.537524][ T6294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.556341][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.576722][ T6295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.763385][T15021] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1052.823437][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1052.881069][T15021] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1052.945527][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1052.987059][ T6295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.026102][T15021] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1053.074627][ T5631] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1053.090660][ T5631] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1053.099391][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.111313][ T5631] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1053.121286][ T5631] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1053.130573][ T5631] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1053.170191][T15021] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1053.213373][T15021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.244786][T14746] veth0_vlan: entered promiscuous mode [ 1053.349380][T14746] veth1_vlan: entered promiscuous mode [ 1053.540576][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1053.639864][T14852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.742531][T14746] veth0_macvtap: entered promiscuous mode [ 1053.762894][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.770716][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.800941][T14746] veth1_macvtap: entered promiscuous mode [ 1053.902150][T14746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.955107][T14746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.064688][T15021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.087797][ T6294] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.102963][ T6294] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.112203][ T6294] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.124957][ T6294] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.209429][T14852] veth0_vlan: entered promiscuous mode [ 1055.045697][T15217] veth3: entered promiscuous mode [ 1055.050854][T15217] veth3: entered allmulticast mode [ 1055.197130][T13389] Bluetooth: hci11: command tx timeout [ 1055.242691][T14852] veth1_vlan: entered promiscuous mode [ 1057.226098][T15021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.276754][T13389] Bluetooth: hci11: command tx timeout [ 1057.295279][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.302531][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.341965][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.362191][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.449657][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.456941][ T6294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.495025][ T6294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.516298][ T6294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.529624][T14852] veth0_macvtap: entered promiscuous mode [ 1057.546041][T14852] veth1_macvtap: entered promiscuous mode [ 1057.578905][T14852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.593827][T14852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.710701][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1057.837676][ T6294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.844680][T15238] fuse: Unknown parameter 'grou00000000000000000000' [ 1057.969601][ T1117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.165384][ T7282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.547206][ T1117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.808037][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.830142][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.999711][T15186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.013021][T15186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.023399][T15186] bridge_slave_0: entered allmulticast mode [ 1059.028467][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1059.035501][T15186] bridge_slave_0: entered promiscuous mode [ 1059.095758][T15186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.103529][T15186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.112438][T15186] bridge_slave_1: entered allmulticast mode [ 1059.134017][T15186] bridge_slave_1: entered promiscuous mode [ 1059.206864][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1059.218949][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.237001][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.249040][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.266195][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.286967][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1059.306382][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.333084][T15186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.347183][ T10] usb 4-1: config 0 descriptor?? [ 1059.360992][T13389] Bluetooth: hci11: command tx timeout [ 1059.392085][ T10] hub 4-1:0.0: USB hub found [ 1059.455171][T15186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.592165][ T10] hub 4-1:0.0: 1 port detected [ 1059.705452][T15186] team0: Port device team_slave_0 added [ 1059.733200][T15186] team0: Port device team_slave_1 added [ 1059.872516][T15186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.892562][T15281] warn_alloc: 2 callbacks suppressed [ 1059.892581][T15281] syz.8.2339: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 1059.904526][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.951498][T15281] ,cpuset=/,mems_allowed=0-1 [ 1059.961433][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.8.2339 Not tainted syzkaller #0 PREEMPT(full) [ 1059.961465][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1059.961481][T15281] Call Trace: [ 1059.961491][T15281] [ 1059.961502][T15281] dump_stack_lvl+0xe8/0x150 [ 1059.961551][T15281] warn_alloc+0x24c/0x270 [ 1059.961598][T15281] ? __pfx_warn_alloc+0x10/0x10 [ 1059.961641][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.961673][T15281] ? alloc_pages_mpol+0x24a/0x380 [ 1059.961722][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.961758][T15281] __vmalloc_node_range_noprof+0x1175/0x1730 [ 1059.961828][T15281] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1059.961861][T15281] ? alloc_pages_mpol+0x24a/0x380 [ 1059.961911][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.961942][T15281] ? rcu_is_watching+0x15/0xb0 [ 1059.961971][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962002][T15281] ? rcu_is_watching+0x15/0xb0 [ 1059.962030][T15281] ? bpf_check+0xb9/0x5480 [ 1059.962067][T15281] __kvmalloc_node_noprof+0x5cd/0x860 [ 1059.962107][T15281] ? bpf_check+0xb9/0x5480 [ 1059.962140][T15281] ? ktime_get+0x45/0x220 [ 1059.962174][T15281] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1059.962210][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962241][T15281] ? lockdep_hardirqs_on+0x7a/0x110 [ 1059.962276][T15281] ? bpf_check+0xb9/0x5480 [ 1059.962313][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962349][T15281] bpf_check+0xb9/0x5480 [ 1059.962388][T15281] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 1059.962427][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962468][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962509][T15281] ? ktime_get_with_offset+0x93/0x2d0 [ 1059.962547][T15281] ? ktime_get_with_offset+0x93/0x2d0 [ 1059.962585][T15281] ? __pfx_bpf_check+0x10/0x10 [ 1059.962618][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962648][T15281] ? __asan_memset+0x22/0x50 [ 1059.962681][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962711][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.962742][T15281] ? security_bpf_prog_load+0x125/0x3c0 [ 1059.962777][T15281] bpf_prog_load+0x1577/0x1c00 [ 1059.962830][T15281] ? __pfx_bpf_prog_load+0x10/0x10 [ 1059.962904][T15281] __sys_bpf+0xd0d/0xd90 [ 1059.962952][T15281] ? __pfx___sys_bpf+0x10/0x10 [ 1059.962992][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.963022][T15281] ? do_futex+0x3e7/0x4e0 [ 1059.963083][T15281] ? rcu_is_watching+0x15/0xb0 [ 1059.963109][T15281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1059.963148][T15281] __x64_sys_bpf+0xba/0xd0 [ 1059.963182][T15281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.963211][T15281] do_syscall_64+0x174/0x580 [ 1059.963245][T15281] ? trace_irq_disable+0x3b/0x140 [ 1059.963288][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.963315][T15281] RIP: 0033:0x7f026a39e019 [ 1059.963339][T15281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.963361][T15281] RSP: 002b:00007f026b31a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1059.963387][T15281] RAX: ffffffffffffffda RBX: 00007f026a625fa0 RCX: 00007f026a39e019 [ 1059.963407][T15281] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 1059.963425][T15281] RBP: 00007f026a43500c R08: 0000000000000000 R09: 0000000000000000 [ 1059.963442][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.963458][T15281] R13: 00007f026a626038 R14: 00007f026a625fa0 R15: 00007fff0e17b408 [ 1059.963498][T15281] [ 1059.981906][T15186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.019795][T15281] Mem-Info: [ 1060.117144][T15186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.182411][T15281] active_anon:17768 inactive_anon:0 isolated_anon:0 [ 1060.182411][T15281] active_file:0 inactive_file:65041 isolated_file:0 [ 1060.182411][T15281] unevictable:768 dirty:124 writeback:0 [ 1060.182411][T15281] slab_reclaimable:13068 slab_unreclaimable:136987 [ 1060.182411][T15281] mapped:67355 shmem:9511 pagetables:1795 [ 1060.182411][T15281] sec_pagetables:0 bounce:0 [ 1060.182411][T15281] kernel_misc_reclaimable:0 [ 1060.182411][T15281] free:1153248 free_pcp:19824 free_cma:0 [ 1060.239069][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.310422][T15281] Node 0 active_anon:71036kB inactive_anon:0kB active_file:0kB inactive_file:259960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:269356kB dirty:524kB writeback:0kB shmem:36436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17088kB pagetables:6928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1060.322565][T15186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.403115][T15281] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1060.513053][T15281] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1060.545932][T15281] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1060.595028][T15021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.601346][T15281] Node 0 DMA32 free:663528kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71236kB inactive_anon:0kB active_file:0kB inactive_file:259960kB unevictable:1536kB writepending:524kB zspages:0kB present:3129332kB managed:2548556kB mlocked:0kB bounce:0kB free_pcp:73568kB local_pcp:46148kB free_cma:0kB [ 1060.610224][ T10] usb 4-1: USB disconnect, device number 40 [ 1060.700030][T15281] lowmem_reserve[]: 0 0 0 0 0 [ 1060.719864][T15281] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1060.761312][T15186] hsr_slave_0: entered promiscuous mode [ 1060.768410][T15281] lowmem_reserve[]: 0 0 0 0 0 [ 1060.773259][T15281] Node 1 Normal free:3938568kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 1060.813157][T15186] hsr_slave_1: entered promiscuous mode [ 1060.835676][T15186] debugfs: 'hsr0' already exists in 'hsr' [ 1060.845928][T15281] lowmem_reserve[]: 0 0 0 0 0 [ 1060.850883][T15281] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1060.874392][T15186] Cannot create hsr debugfs directory [ 1060.901477][T15281] Node 0 DMA32: 368*4kB (UME) 1061*8kB (ME) 646*16kB (UM) 387*32kB (M) 138*64kB (ME) 33*128kB (UME) 38*256kB (ME) 28*512kB (M) 15*1024kB (ME) 8*2048kB (ME) 137*4096kB (M) = 662696kB [ 1060.969402][T15281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1060.982241][T15281] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 3*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938620kB [ 1061.013792][T15281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1061.035172][T15281] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1061.064547][T15281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1061.110713][T15281] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1061.147175][T15281] 74529 total pagecache pages [ 1061.157382][T15281] 0 pages in swap cache [ 1061.169877][T15281] Free swap = 124996kB [ 1061.178678][T15281] Total swap = 124996kB [ 1061.189337][T15281] 2097051 pages RAM [ 1061.213898][T15281] 0 pages HighMem/MovableOnly [ 1061.224012][T15281] 428233 pages reserved [ 1061.235945][T15281] 0 pages cma reserved [ 1061.436786][T13389] Bluetooth: hci11: command tx timeout [ 1065.059179][T15323] veth3: entered promiscuous mode [ 1065.064268][T15323] veth3: entered allmulticast mode [ 1065.292413][ T6294] bridge_slave_1: left allmulticast mode [ 1067.033692][T13389] Bluetooth: hci2: command 0x0406 tx timeout [ 1067.044988][ T6294] bridge_slave_1: left promiscuous mode [ 1067.057681][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.223910][ T6294] bridge_slave_0: left allmulticast mode [ 1067.246510][ T6294] bridge_slave_0: left promiscuous mode [ 1067.256742][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.605017][T13389] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1069.636545][T13389] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1069.650429][T13389] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1069.660599][T13389] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1069.669621][T13389] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1070.270659][ T6294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.319890][ T6294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.376700][ T6294] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1070.402305][ T6294] net_ratelimit: 11 callbacks suppressed [ 1070.402328][ T6294] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 1070.431878][ T6294] bond0 (unregistering): Released all slaves [ 1070.742488][T15186] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.364991][T15186] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.484542][T15021] veth0_vlan: entered promiscuous mode [ 1071.756874][T13389] Bluetooth: hci12: command tx timeout [ 1071.881043][T15186] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.979417][T15021] veth1_vlan: entered promiscuous mode [ 1071.988645][ T5772] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1073.836336][T13389] Bluetooth: hci12: command tx timeout [ 1073.855778][ T6294] hsr_slave_0: left promiscuous mode [ 1073.893788][ T6294] hsr_slave_1: left promiscuous mode [ 1073.910400][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 1073.919343][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.939397][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.955885][ T6294] batadv0: mtu less than device minimum [ 1073.967882][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.981984][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1073.995841][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.007798][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.019780][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.031556][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.043080][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.054626][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.067942][ T6294] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1074.095370][ T5772] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1074.108103][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.120040][ T5772] usb 4-1: config 0 descriptor?? [ 1074.125211][ T6294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.135873][ T5772] hub 4-1:0.0: USB hub found [ 1074.247923][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.290697][ T6294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.519868][ T5772] hub 4-1:0.0: 1 port detected [ 1074.526914][ T6294] batman_adv: batadv0: Interface deactivated: dummy0 [ 1074.533732][ T6294] batman_adv: batadv0: Removing interface: dummy0 [ 1074.559869][ T6294] veth1_macvtap: left promiscuous mode [ 1074.565450][ T6294] veth0_macvtap: left promiscuous mode [ 1074.571116][ T6294] veth1_vlan: left promiscuous mode [ 1074.580516][ T6294] veth0_vlan: left promiscuous mode [ 1075.446034][T12564] usb 4-1: USB disconnect, device number 41 [ 1075.916341][T13389] Bluetooth: hci12: command tx timeout [ 1076.004023][T15398] loop0: detected capacity change from 0 to 32768 [ 1076.059576][T15398] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1076.074711][T15398] JBD2: Ignoring recovery information on journal [ 1076.128215][ T6294] team0 (unregistering): Port device team_slave_1 removed [ 1076.164708][T15398] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1076.182108][ T6294] team0 (unregistering): Port device team_slave_0 removed [ 1076.624436][T15186] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.746527][T15394] veth3: entered promiscuous mode [ 1076.751609][T15394] veth3: entered allmulticast mode [ 1077.298257][T14852] ocfs2: Unmounting device (7,0) on (node local) [ 1077.469161][T15021] veth0_macvtap: entered promiscuous mode [ 1077.518937][T15021] veth1_macvtap: entered promiscuous mode [ 1077.867244][ T6294] IPVS: stop unused estimator thread 0... [ 1077.969006][T15021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.999638][T13389] Bluetooth: hci12: command tx timeout [ 1078.178768][T15021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.231990][T15186] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1078.267145][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.295739][T15186] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1078.352461][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.374015][T15186] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1078.419274][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.463495][T15186] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1078.495897][T15186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.667915][T15415] loop8: detected capacity change from 0 to 32768 [ 1078.728531][T15415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2365 (15415) [ 1078.869181][T15347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.880593][T15347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.885512][T15415] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1078.888632][T15347] bridge_slave_0: entered allmulticast mode [ 1078.911269][T15347] bridge_slave_0: entered promiscuous mode [ 1078.951982][T15415] BTRFS info (device loop8): using crc32c checksum algorithm [ 1078.965065][ T6295] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.018584][ T9446] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.735927][T15415] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1080.769386][T15347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.888123][ T5772] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 1080.903942][T15415] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1080.904304][T15415] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1080.926695][T15347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.948155][T15415] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1080.950281][T15415] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1080.977916][T15415] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1081.004574][T15347] bridge_slave_1: entered allmulticast mode [ 1081.037528][T15347] bridge_slave_1: entered promiscuous mode [ 1081.099655][ T5772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1081.112318][T15415] BTRFS error (device loop8): open_ctree failed: -12 [ 1081.116933][ T5772] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 1081.157813][ T5772] usb 1-1: config 100 has no interface number 0 [ 1081.174944][ T5772] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1081.227555][ T5772] usb 1-1: config 100 interface 173 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.252379][ T1170] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.318984][ T5772] usb 1-1: config 100 interface 173 has no altsetting 0 [ 1081.359926][ T5772] usb 1-1: string descriptor 0 read error: -22 [ 1081.367755][ T5772] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1081.412543][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.456648][T15436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1081.490949][T15347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.527633][ T5772] metro_usb 1-1:100.173: required endpoints missing [ 1081.555833][T15347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.764219][ T5772] usb 1-1: USB disconnect, device number 49 [ 1081.775655][T15347] team0: Port device team_slave_0 added [ 1081.806218][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.826940][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.850823][T15347] team0: Port device team_slave_1 added [ 1081.879560][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.099493][T15347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.106592][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.156231][T15347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.411790][T15347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.434928][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.160545][T15347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.226933][T15218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.250168][T15460] veth5: entered promiscuous mode [ 1083.255196][T15460] veth5: entered allmulticast mode [ 1083.355850][T15218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.638513][T15462] dummy_hcd dummy_hcd.0: remove, state 1 [ 1083.644639][T15462] usb usb1: USB disconnect, device number 1 [ 1084.641887][T15462] dummy_hcd dummy_hcd.0: stopped [ 1084.646907][T15462] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1085.074717][T15347] hsr_slave_0: entered promiscuous mode [ 1085.111220][T15347] hsr_slave_1: entered promiscuous mode [ 1085.154309][T15347] debugfs: 'hsr0' already exists in 'hsr' [ 1085.185295][T15347] Cannot create hsr debugfs directory [ 1085.533933][T15186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.844549][T15186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.001854][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.009084][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.087946][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.095174][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.378512][T15472] loop8: detected capacity change from 0 to 32768 [ 1086.425332][T15472] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2375 (15472) [ 1086.540327][T15472] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1086.581626][T15472] BTRFS info (device loop8): using blake2b checksum algorithm [ 1086.796715][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 1086.797180][T15472] BTRFS info (device loop8): enabling ssd optimizations [ 1086.839883][T15472] BTRFS info (device loop8): turning on async discard [ 1086.856260][T15472] BTRFS info (device loop8): enabling free space tree [ 1086.902939][T15472] BTRFS info (device loop8): use zstd compression, level 3 [ 1087.188518][T14746] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1087.308274][T15476] loop9: detected capacity change from 0 to 32768 [ 1087.373444][T15476] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2323 (15476) [ 1087.563654][T15476] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1087.647939][T15476] BTRFS info (device loop9): using crc32c checksum algorithm [ 1087.914949][T15476] BTRFS info (device loop9): setting nodatasum [ 1087.942603][T15476] BTRFS info (device loop9): enabling ssd optimizations [ 1088.002301][T15476] BTRFS info (device loop9): disabling tree log [ 1088.035874][T15476] BTRFS info (device loop9): turning on async discard [ 1088.061386][T15476] BTRFS info (device loop9): enabling free space tree [ 1088.116598][T15476] BTRFS info (device loop9): enabling auto defrag [ 1091.055502][T15021] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1092.331543][T15552] veth7: entered promiscuous mode [ 1092.336682][T15552] veth7: entered allmulticast mode [ 1092.783489][T15347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1092.881775][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.955402][T15347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1092.990572][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.056763][T15347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1093.163634][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.223374][T15347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1093.303977][T15566] loop8: detected capacity change from 0 to 2048 [ 1093.310219][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1093.708054][T15566] loop8: p1 < > p4 [ 1093.708054][T15566] p4: [ 1093.744670][T15566] loop8: p4 size 722688 extends beyond EOD, truncated [ 1094.149778][T15347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.294702][T15347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.336570][T15186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.412764][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.420031][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.501362][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.508550][ T6294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.569014][T15554] loop9: detected capacity change from 0 to 32768 [ 1094.639705][T15554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2381 (15554) [ 1094.860356][T15554] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1094.921369][T15554] BTRFS info (device loop9): using crc32c checksum algorithm [ 1095.251256][T15554] BTRFS info (device loop9): setting nodatasum [ 1095.296418][T15554] BTRFS info (device loop9): enabling ssd optimizations [ 1095.338147][T15554] BTRFS info (device loop9): disabling tree log [ 1095.356228][T15554] BTRFS info (device loop9): turning on async discard [ 1095.418171][T15554] BTRFS info (device loop9): enabling free space tree [ 1095.442345][T15554] BTRFS info (device loop9): enabling auto defrag [ 1095.656873][T15021] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1096.113636][T15590] loop0: detected capacity change from 0 to 32768 [ 1096.193456][T15590] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2386 (15590) [ 1096.229681][T15626] fuse: Unknown parameter 'fd0x0000000000000004' [ 1096.341947][T15590] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1096.382437][ T4987] loop8: p1 < > p4 [ 1096.382437][ T4987] p4: [ 1096.420593][T15590] BTRFS info (device loop0): using blake2b checksum algorithm [ 1096.460547][ T4987] loop8: p4 size 722688 extends beyond EOD, truncated [ 1096.640049][T15186] veth0_vlan: entered promiscuous mode [ 1097.075251][T15651] 9p: Bad value for 'rfdno' [ 1097.543796][T15186] veth1_vlan: entered promiscuous mode [ 1098.202282][T15186] veth0_macvtap: entered promiscuous mode [ 1098.272485][T15186] veth1_macvtap: entered promiscuous mode [ 1098.456510][T15186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.457388][T15590] BTRFS error (device loop0): open_ctree failed: -4 [ 1100.250496][T15327] udevd[15327]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 1100.495118][T15440] udevd[15440]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1100.497732][T15186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.639209][T15336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.761951][ T9446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.405841][ T9446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.807185][ T7281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.005640][T15347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.201132][T15676] Bluetooth: MGMT ver 1.23 [ 1102.248699][ T9446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.335383][ T9446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.647886][ T5749] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1102.986412][ T7281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.025495][ T7281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.167059][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 1103.206420][ T5749] usb 4-1: no configurations [ 1103.234404][ T5749] usb 4-1: can't read configurations, error -22 [ 1103.396510][ T5749] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1103.716558][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 1103.744669][ T5749] usb 4-1: no configurations [ 1103.770062][ T5749] usb 4-1: can't read configurations, error -22 [ 1103.812540][ T5749] usb usb4-port1: attempt power cycle [ 1104.197320][ T5749] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1104.219787][T15347] veth0_vlan: entered promiscuous mode [ 1104.272003][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 1104.341715][ T5749] usb 4-1: no configurations [ 1104.360297][T15347] veth1_vlan: entered promiscuous mode [ 1104.388556][ T5749] usb 4-1: can't read configurations, error -22 [ 1104.557328][ T5749] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1106.483948][T15347] veth0_macvtap: entered promiscuous mode [ 1106.565520][T15347] veth1_macvtap: entered promiscuous mode [ 1107.099992][T15716] 9p: Bad value for 'rfdno' [ 1107.564112][T15347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.752725][ T5749] usb 4-1: device descriptor read/8, error -71 [ 1107.838302][T15347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.880562][ T5749] usb usb4-port1: unable to enumerate USB device [ 1108.038211][ T9446] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.117515][ T9446] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.269349][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.323928][T13389] Bluetooth: hci6: command 0x0406 tx timeout [ 1108.685824][T15726] overlayfs: missing 'lowerdir' [ 1109.383466][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2405'. [ 1109.506629][ T6294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.831202][ T6294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.087315][T15734] veth3: entered promiscuous mode [ 1110.100348][T15734] veth3: entered allmulticast mode [ 1110.619317][ T6294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.634258][ T5749] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1110.838855][T15740] fuse: Unknown parameter 'fd0x0000000000000004' [ 1110.850599][ T5749] usb 6-1: Using ep0 maxpacket: 8 [ 1111.908723][ T5749] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1112.446804][ T5749] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1112.454443][ T5749] usb 6-1: can't read configurations, error -71 [ 1112.529327][T15218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.577724][T15218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.204408][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.216626][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.910099][T15769] loop3: detected capacity change from 0 to 128 [ 1117.717822][T15777] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci12/hci12:200/input49 [ 1118.086530][T15781] overlayfs: missing 'lowerdir' [ 1119.637189][T15795] veth5: entered promiscuous mode [ 1119.642350][T15795] veth5: entered allmulticast mode [ 1121.170761][T15808] fuse: Bad value for 'fd' [ 1121.369587][T15812] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1121.835284][T15824] fuse: Unknown parameter 'fd0x0000000000000004' [ 1122.037957][ T185] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1122.187422][ T185] usb 4-1: device descriptor read/64, error -71 [ 1122.586277][ T185] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1122.741514][ T185] usb 4-1: device descriptor read/64, error -71 [ 1122.855982][T15840] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 1122.887612][ T185] usb usb4-port1: attempt power cycle [ 1123.706260][ T185] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 1123.727752][ T185] usb 4-1: device descriptor read/8, error -71 [ 1125.716212][ T185] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 1125.803580][ T185] usb 4-1: device descriptor read/8, error -71 [ 1125.952711][ T185] usb usb4-port1: unable to enumerate USB device [ 1126.673113][T15859] veth7: entered promiscuous mode [ 1126.678345][T15859] veth7: entered allmulticast mode [ 1127.596395][T15850] Bluetooth: hci7: command 0x0406 tx timeout [ 1127.602536][T15850] Bluetooth: hci0: command 0x0406 tx timeout [ 1130.921647][T15866] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1130.941565][T15866] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1130.954987][T15866] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1130.969357][T15866] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1130.984789][T15866] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1131.071702][T15887] net_ratelimit: 31 callbacks suppressed [ 1131.071721][T15887] socket: no more sockets [ 1131.216272][ T5749] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 1131.414905][ T5749] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1131.465602][ T5749] usb 4-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.543653][ T5749] usb 4-1: config 100 has 0 interfaces, different from the descriptor's value: 1 [ 1131.605236][ T5749] usb 4-1: string descriptor 0 read error: -22 [ 1131.637510][ T5749] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1131.684221][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.983408][ T5749] usb 4-1: USB disconnect, device number 50 [ 1132.833841][T15917] veth3: entered promiscuous mode [ 1132.839105][T15917] veth3: entered allmulticast mode [ 1132.908860][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 1133.344763][ T5631] Bluetooth: hci13: command tx timeout [ 1134.137487][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1134.506527][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1134.850208][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1135.073243][ T24] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1135.082698][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.090943][ T24] usb 10-1: Product: syz [ 1135.097680][ T24] usb 10-1: Manufacturer: syz [ 1135.102484][ T24] usb 10-1: SerialNumber: syz [ 1135.386348][T13389] Bluetooth: hci13: command tx timeout [ 1135.936760][ T24] usb 10-1: config 0 descriptor?? [ 1135.989709][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1137.320647][T15949] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1137.427710][ T24] gspca_zc3xx: reg_w_i err -71 [ 1137.438971][T13389] Bluetooth: hci13: command tx timeout [ 1138.097753][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1138.164004][ T24] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1138.267710][ T24] usb 10-1: USB disconnect, device number 2 [ 1138.350493][T15960] netlink: 'syz.6.2442': attribute type 2 has an invalid length. [ 1138.382617][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.804082][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1138.972739][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1139.067373][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1139.147740][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1139.247039][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1139.327051][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1139.577836][ T24] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1139.616230][T13389] Bluetooth: hci13: command tx timeout [ 1140.242980][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1140.315086][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1140.329235][ T24] usb 7-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.391464][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1140.403697][ T24] usb 7-1: config 100 has 0 interfaces, different from the descriptor's value: 1 [ 1140.443228][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2448'. [ 1140.489928][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1140.515641][ T24] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1140.556060][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.887998][ T5632] usb 7-1: USB disconnect, device number 17 [ 1141.009146][T15983] veth5: entered promiscuous mode [ 1141.014203][T15983] veth5: entered allmulticast mode [ 1142.092247][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.587632][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.936227][ T5862] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1145.003728][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.108324][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 1145.175657][ T5862] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1145.237350][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.301759][ T5862] usb 6-1: config 0 descriptor?? [ 1145.342278][T16013] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1146.023353][ T5862] ath6kl: Failed to submit usb control message: -71 [ 1146.069890][ T5862] ath6kl: unable to send the bmi data to the device: -71 [ 1146.139572][ T5862] ath6kl: Unable to send get target info: -71 [ 1146.177753][ T5862] ath6kl: Failed to init ath6kl core: -71 [ 1146.219964][ T5862] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1146.359616][ T5862] usb 6-1: USB disconnect, device number 20 [ 1148.743272][ T5631] Bluetooth: hci8: command 0x0406 tx timeout [ 1148.752183][ T31] INFO: task syz.8.2209:14030 blocked for more than 146 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1148.894195][ T31] Not tainted syzkaller #0 [ 1148.922111][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1148.984413][ T31] task:syz.8.2209 state:D stack:27576 pid:14030 tgid:14029 ppid:13388 task_flags:0x400140 flags:0x00080002 [ 1149.093805][ T31] Call Trace: [ 1149.113560][ T31] [ 1149.150262][ T31] __schedule+0x17d9/0x56c0 [ 1149.207041][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1149.243050][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1149.282743][ T31] ? __pfx___schedule+0x10/0x10 [ 1149.302590][ T31] ? schedule+0x90/0x2b0 [ 1149.323940][ T31] schedule+0x164/0x2b0 [ 1149.341883][ T31] schedule_preempt_disabled+0x13/0x30 [ 1149.386046][ T31] __mutex_lock+0x7bf/0x1550 [ 1149.408706][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1149.431186][ T31] ? write_versions+0x95/0xe30 [ 1149.436018][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1149.489635][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.511796][ T31] write_versions+0x95/0xe30 [ 1149.536272][ T31] ? __pfx_write_versions+0x10/0x10 [ 1149.563817][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.609463][ T31] ? _copy_from_user+0x94/0xb0 [ 1149.626819][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.651946][ T31] ? simple_transaction_get+0x12d/0x160 [ 1149.691022][ T31] nfsctl_transaction_write+0x10f/0x160 [ 1149.711930][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1149.736219][ T31] vfs_write+0x296/0xba0 [ 1149.755771][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1149.791909][ T31] ? __fget_files+0x2a/0x420 [ 1149.816229][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.846291][ T31] ? __fget_files+0x3a2/0x420 [ 1149.863732][ T31] ? __fget_files+0x2a/0x420 [ 1149.883021][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.906292][ T31] ksys_write+0x150/0x270 [ 1149.922067][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1149.943241][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.967182][ T31] do_syscall_64+0x174/0x580 [ 1149.987419][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.019404][ T31] RIP: 0033:0x7f894439e019 [ 1150.041135][ T31] RSP: 002b:00007f89452cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1150.073574][ T31] RAX: ffffffffffffffda RBX: 00007f8944625fa0 RCX: 00007f894439e019 [ 1150.106221][ T31] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1150.141387][ T31] RBP: 00007f894443500c R08: 0000000000000000 R09: 0000000000000000 [ 1150.170274][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.198175][ T31] R13: 00007f8944626038 R14: 00007f8944625fa0 R15: 00007ffd98aeef18 [ 1150.229832][ T31] [ 1150.238066][ T31] INFO: task syz.8.2209:14036 blocked for more than 147 seconds. [ 1150.260675][ T31] Not tainted syzkaller #0 [ 1150.287721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1150.308067][ T31] task:syz.8.2209 state:D stack:27568 pid:14036 tgid:14029 ppid:13388 task_flags:0x400140 flags:0x00080002 [ 1150.320703][ T31] Call Trace: [ 1150.325093][ T31] [ 1150.328193][ T31] __schedule+0x17d9/0x56c0 [ 1150.336287][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1150.348146][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1150.353723][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.366249][ T31] ? kernel_text_address+0xa5/0xe0 [ 1150.383399][ T31] ? __kernel_text_address+0xd/0x30 [ 1150.406186][ T31] ? __pfx___schedule+0x10/0x10 [ 1150.417559][ T31] ? schedule+0x90/0x2b0 [ 1150.430515][ T31] schedule+0x164/0x2b0 [ 1150.446385][ T31] schedule_preempt_disabled+0x13/0x30 [ 1150.463066][ T31] __mutex_lock+0x7bf/0x1550 [ 1150.474959][ T31] ? kasan_save_track+0x3e/0x80 [ 1150.493941][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1150.508993][ T31] ? write_ports+0xb5/0xd10 [ 1150.527416][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1150.544162][ T31] write_ports+0xb5/0xd10 [ 1150.557232][ T31] ? __pfx_write_ports+0x10/0x10 [ 1150.600073][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.609143][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.628827][ T31] ? _copy_from_user+0x94/0xb0 [ 1150.646466][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.660654][ T31] ? simple_transaction_get+0x12d/0x160 [ 1150.678561][ T31] nfsctl_transaction_write+0x10f/0x160 [ 1150.708333][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1150.728318][ T31] vfs_write+0x296/0xba0 [ 1150.744926][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1150.756568][ T31] ? __fget_files+0x2a/0x420 [ 1150.772512][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.786346][ T31] ? __fget_files+0x3a2/0x420 [ 1150.796225][ T31] ? __fget_files+0x2a/0x420 [ 1150.826251][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.849199][ T31] ksys_write+0x150/0x270 [ 1150.868059][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1150.906654][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.926338][ T31] do_syscall_64+0x174/0x580 [ 1150.946262][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1150.972308][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.988499][ T31] RIP: 0033:0x7f894439e019 [ 1151.000779][ T31] RSP: 002b:00007f89452ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1151.027770][ T31] RAX: ffffffffffffffda RBX: 00007f8944626090 RCX: 00007f894439e019 [ 1151.068526][ T31] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 1151.098956][ T31] RBP: 00007f894443500c R08: 0000000000000000 R09: 0000000000000000 [ 1151.136280][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.157825][ T31] R13: 00007f8944626128 R14: 00007f8944626090 R15: 00007ffd98aeef18 [ 1151.192231][ T31] [ 1151.225171][ T31] [ 1151.225171][ T31] Showing all locks held in the system: [ 1151.246281][ T31] 1 lock held by khungtaskd/31: [ 1151.255137][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1151.344465][ T31] 5 locks held by kworker/u8:4/57: [ 1151.349762][ T31] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1151.360807][ T31] #1: ffffc900015e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1151.371525][ T31] #2: ffffffff9001f328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1151.422245][ T31] #3: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1151.466218][ T31] #4: ffff88808527d610 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_exit_rtnl+0xab/0x200 [ 1151.537710][ T31] 2 locks held by getty/5373: [ 1151.564120][ T31] #0: ffff88803269c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1151.605394][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1151.672656][ T31] 3 locks held by kworker/0:4/5764: [ 1151.706257][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1151.770543][ T31] #1: ffffc9000447fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1151.833788][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1151.904263][ T31] 2 locks held by kworker/0:3/12564: [ 1151.939055][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1151.981090][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1152.034055][ T31] 3 locks held by syz.1.2149/13749: [ 1152.065488][ T31] #0: ffff888078da7b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.115223][ T31] #1: ffff88805042a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.176613][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1152.251147][ T31] 3 locks held by syz.8.2209/14030: [ 1152.282469][ T31] #0: ffff8880320375f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.324935][ T31] #1: ffff888050006450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.369701][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1152.409332][ T31] 3 locks held by syz.8.2209/14036: [ 1152.435002][ T31] #0: ffff888078ed47f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.486305][ T31] #1: ffff888050006450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.515164][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1152.563961][ T31] 3 locks held by kworker/u8:0/14157: [ 1152.576177][ T31] #0: ffff88801b064140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.594737][ T31] #1: ffffc900039dfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1152.608340][ T31] #2: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1152.617935][ T31] 3 locks held by syz.5.2262/14347: [ 1152.623266][ T31] #0: ffff88807ff6f7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.634112][ T31] #1: ffff888022f6c450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.654721][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1152.667540][ T31] 3 locks held by syz.5.2262/14349: [ 1152.672783][ T31] #0: ffff888052fc8470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.682403][ T31] #1: ffff888022f6c450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.691917][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1152.701064][ T31] 3 locks held by syz.4.2269/14599: [ 1152.706612][ T31] #0: ffff88807b306d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.715756][ T31] #1: ffff88807f9f2450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.726675][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1152.736516][ T31] 3 locks held by syz.4.2269/14602: [ 1152.741752][ T31] #0: ffff888035224ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.758325][ T31] #1: ffff88807f9f2450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.769071][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1152.780171][ T31] 3 locks held by syz.4.2269/14606: [ 1152.785401][ T31] #0: ffff88807b33a2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.795120][ T31] #1: ffff88807f9f2450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.807368][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0 [ 1152.816918][ T31] 3 locks held by syz.1.2294/14794: [ 1152.822237][ T31] #0: ffff888075cf50b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.831997][ T31] #1: ffff88802b9c2450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.841371][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1152.854868][ T31] 1 lock held by syz-executor/14852: [ 1152.860534][ T31] #0: ffff888085334ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1152.871313][ T31] 3 locks held by syz.7.2315/14929: [ 1152.878202][ T31] #0: ffff888077faeb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.889011][ T31] #1: ffff88803661a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.898375][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1152.907979][ T31] 3 locks held by syz.7.2315/14932: [ 1152.913199][ T31] #0: ffff888025fe29b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.922399][ T31] #1: ffff88803661a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.931712][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1152.940611][ T31] 3 locks held by syz.2.2331/15129: [ 1152.945810][ T31] #0: ffff88802b8f0b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.961784][ T31] #1: ffff88803516a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1152.971976][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1152.981521][ T31] 3 locks held by syz.2.2331/15132: [ 1152.986978][ T31] #0: ffff8880514c67f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1152.996242][ T31] #1: ffff88803516a450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1153.005289][ T31] #2: ffffffff8ee8e6c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1153.014377][ T31] 1 lock held by syz-executor/15347: [ 1153.019810][ T31] #0: ffff888093e48ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1153.030023][ T31] 2 locks held by dhcpcd/15385: [ 1153.034935][ T31] #0: ffff88803b821940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1153.045577][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1153.060135][ T31] 1 lock held by syz-executor/15889: [ 1153.065447][ T31] #0: ffff888081f84ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1153.075658][ T31] 2 locks held by syz.9.2470/16020: [ 1153.080940][ T31] #0: ffffffff9001f328 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1153.090841][ T31] #1: ffffffff9002dec0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 1153.100119][ T31] 1 lock held by syz.5.2473/16032: [ 1153.105230][ T31] #0: ffff88808e160ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1153.115410][ T31] [ 1153.117944][ T31] ============================================= [ 1153.117944][ T31] [ 1153.126512][ T31] NMI backtrace for cpu 1 [ 1153.126532][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1153.126560][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1153.126576][ T31] Call Trace: [ 1153.126586][ T31] [ 1153.126596][ T31] dump_stack_lvl+0xe8/0x150 [ 1153.126640][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1153.126669][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.126701][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1153.126744][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1153.126776][ T31] sys_info+0x135/0x170 [ 1153.126816][ T31] watchdog+0xfd7/0x1030 [ 1153.126859][ T31] ? watchdog+0x1c7/0x1030 [ 1153.126900][ T31] kthread+0x388/0x470 [ 1153.126940][ T31] ? __pfx_watchdog+0x10/0x10 [ 1153.126971][ T31] ? __pfx_kthread+0x10/0x10 [ 1153.127011][ T31] ret_from_fork+0x514/0xb70 [ 1153.127055][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1153.127094][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.127124][ T31] ? __switch_to+0xc89/0x1420 [ 1153.127161][ T31] ? __pfx_kthread+0x10/0x10 [ 1153.127202][ T31] ret_from_fork_asm+0x1a/0x30 [ 1153.127245][ T31] [ 1153.127255][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1153.143982][ T57] bridge_slave_1: left allmulticast mode [ 1153.151200][ C0] NMI backtrace for cpu 0 [ 1153.151218][ C0] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 1153.151244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1153.151269][ C0] Workqueue: netns cleanup_net [ 1153.151297][ C0] RIP: 0010:__unwind_start+0x518/0x660 [ 1153.151325][ C0] Code: 28 00 4c 8d 7b 38 74 08 4c 89 ff e8 82 ea bc 00 48 8b 44 24 08 49 39 07 0f 87 b6 fb ff ff 48 89 df e8 cc d0 ff ff 48 8b 04 24 <42> 0f b6 04 28 84 c0 75 11 83 3b 00 4c 89 f1 0f 85 5b ff ff ff e9 [ 1153.151344][ C0] RSP: 0018:ffffc900000078f0 EFLAGS: 00000286 [ 1153.151363][ C0] RAX: 1ffff92000000f29 RBX: ffffc90000007948 RCX: 0000000000000101 [ 1153.151379][ C0] RDX: 0000000000000005 RSI: ffffffff8e4b420d RDI: ffff8880232f8000 [ 1153.151396][ C0] RBP: 1ffff92000000f2b R08: ffffc900000079d0 R09: ffffc90000007998 [ 1153.151413][ C0] R10: dffffc0000000000 R11: fffff52000000f35 R12: 1ffff92000000f2a [ 1153.151430][ C0] R13: dffffc0000000000 R14: ffffc90000007958 R15: ffffc90000007980 [ 1153.151450][ C0] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 1153.151469][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1153.151484][ C0] CR2: 000055a89aace450 CR3: 00000000353b7000 CR4: 0000000000350ef0 [ 1153.151502][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1153.151516][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1153.151531][ C0] Call Trace: [ 1153.151539][ C0] [ 1153.151552][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1153.151584][ C0] arch_stack_walk+0xe3/0x150 [ 1153.151613][ C0] ? stack_trace_save+0xa9/0x100 [ 1153.151646][ C0] stack_trace_save+0xa9/0x100 [ 1153.151675][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1153.151707][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.151734][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1153.151770][ C0] kasan_save_track+0x3e/0x80 [ 1153.151840][ C0] kasan_save_free_info+0x40/0x50 [ 1153.151876][ C0] __kasan_slab_free+0x5c/0x80 [ 1153.151910][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 1153.151935][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.151963][ C0] ? rcu_core+0x70d/0x10a0 [ 1153.152004][ C0] rcu_free_sheaf+0x31/0x200 [ 1153.152037][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1153.152065][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 1153.152097][ C0] ? rcu_core+0x70d/0x10a0 [ 1153.152130][ C0] rcu_core+0x78b/0x10a0 [ 1153.152174][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1153.152210][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.152237][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.152271][ C0] handle_softirqs+0x225/0x840 [ 1153.152303][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1153.152341][ C0] __irq_exit_rcu+0xca/0x220 [ 1153.152372][ C0] irq_exit_rcu+0x9/0x30 [ 1153.152400][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1153.152431][ C0] [ 1153.152439][ C0] [ 1153.152449][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1153.152476][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1153.152502][ C0] Code: 0f 84 44 ff ff ff e8 72 68 21 00 fb eb 44 e8 6a 68 21 00 e8 15 8b 2b 0a 4d 85 f6 74 94 e8 5b 68 21 00 fb 48 c7 c7 a0 bf b4 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 1b [ 1153.152522][ C0] RSP: 0018:ffffc900015e74e0 EFLAGS: 00000293 [ 1153.152542][ C0] RAX: ffffffff81a5aa15 RBX: ffffffff81a5a88f RCX: ffff8880232f8000 [ 1153.152561][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb4bfa0 [ 1153.152577][ C0] RBP: ffffc900015e7590 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 1153.152594][ C0] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000 [ 1153.152610][ C0] R13: 0000000000000026 R14: 0000000000000200 R15: 1ffff920002bcea0 [ 1153.152629][ C0] ? vprintk_emit+0x2cf/0x560 [ 1153.152653][ C0] ? vprintk_emit+0x455/0x560 [ 1153.152680][ C0] ? call_rcu+0xee/0x8b0 [ 1153.152701][ C0] ? kernfs_put+0x622/0x820 [ 1153.152737][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1153.152759][ C0] ? cleanup_net+0x572/0x810 [ 1153.152783][ C0] ? worker_thread+0xa47/0xfb0 [ 1153.152810][ C0] ? kthread+0x388/0x470 [ 1153.152842][ C0] ? ret_from_fork+0x514/0xb70 [ 1153.152881][ C0] _printk+0xdd/0x130 [ 1153.152911][ C0] ? __pfx__printk+0x10/0x10 [ 1153.152940][ C0] ? __netdev_printk+0x36f/0x480 [ 1153.152978][ C0] netdev_info+0x11e/0x180 [ 1153.153013][ C0] ? __pfx_netdev_info+0x10/0x10 [ 1153.153038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.153064][ C0] ? rcu_is_watching+0x15/0xb0 [ 1153.153086][ C0] ? __up_read+0x29c/0x930 [ 1153.153118][ C0] netif_set_allmulti+0x2d0/0x4d0 [ 1153.153149][ C0] dev_set_allmulti+0x121/0x260 [ 1153.153178][ C0] del_nbp+0xb4/0x9f0 [ 1153.153205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.153231][ C0] ? vxlan_exit_rtnl+0x295/0x2e0 [ 1153.153267][ C0] br_dev_delete+0x6e/0x130 [ 1153.153293][ C0] br_net_exit_rtnl+0xb1/0x120 [ 1153.153325][ C0] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 1153.153355][ C0] ops_undo_list+0x319/0x8d0 [ 1153.153384][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1153.153408][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.153436][ C0] ? idr_destroy+0x218/0x290 [ 1153.153463][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1153.153493][ C0] cleanup_net+0x572/0x810 [ 1153.153520][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1153.153549][ C0] ? rcu_is_watching+0x15/0xb0 [ 1153.153570][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.153599][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1153.153626][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1153.153673][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1153.153704][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.153744][ C0] ? assign_work+0x3cf/0x5d0 [ 1153.153778][ C0] worker_thread+0xa47/0xfb0 [ 1153.153828][ C0] kthread+0x388/0x470 [ 1153.153862][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1153.153889][ C0] ? __pfx_kthread+0x10/0x10 [ 1153.153924][ C0] ret_from_fork+0x514/0xb70 [ 1153.153961][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1153.153999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.154026][ C0] ? __switch_to+0xc89/0x1420 [ 1153.154057][ C0] ? __pfx_kthread+0x10/0x10 [ 1153.154092][ C0] ret_from_fork_asm+0x1a/0x30 [ 1153.154125][ C0] [ 1153.194486][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1153.194513][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1153.194542][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1153.194560][ T31] Call Trace: [ 1153.194571][ T31] [ 1153.194582][ T31] vpanic+0x56c/0xa60 [ 1153.194629][ T31] ? __pfx___schedule+0x10/0x10 [ 1153.194663][ T31] ? __pfx_vpanic+0x10/0x10 [ 1153.194703][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.194747][ T31] panic+0xc5/0xd0 [ 1153.194792][ T31] ? __pfx_panic+0x10/0x10 [ 1153.194830][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1153.924423][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1153.929807][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1153.935962][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1153.942115][ T31] watchdog+0x1030/0x1030 [ 1153.946491][ T31] ? watchdog+0x1c7/0x1030 [ 1153.950915][ T31] kthread+0x388/0x470 [ 1153.954988][ T31] ? __pfx_watchdog+0x10/0x10 [ 1153.959671][ T31] ? __pfx_kthread+0x10/0x10 [ 1153.964274][ T31] ret_from_fork+0x514/0xb70 [ 1153.968873][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1153.973989][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1153.979627][ T31] ? __switch_to+0xc89/0x1420 [ 1153.984746][ T31] ? __pfx_kthread+0x10/0x10 [ 1153.989344][ T31] ret_from_fork_asm+0x1a/0x30 [ 1153.994116][ T31] [ 1153.997222][ T31] Kernel Offset: disabled [ 1154.001531][ T31] Rebooting in 86400 seconds..