last executing test programs: 3m24.808984673s ago: executing program 3 (id=246): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m22.776908765s ago: executing program 3 (id=251): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) chdir(&(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 3m22.482008943s ago: executing program 3 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, 0x0, 0x0, 0x6, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 3m19.215975646s ago: executing program 3 (id=262): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70", @ANYBLOB="000000000000000000000000000000000000000032000000ff01"], 0x1a4}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m19.04128926s ago: executing program 3 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m18.902467024s ago: executing program 3 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 3m3.69470788s ago: executing program 32 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 33.652232615s ago: executing program 2 (id=935): r0 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x80201, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 32.869758985s ago: executing program 2 (id=939): prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x1c) 32.690418409s ago: executing program 2 (id=941): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006080)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfc01, 0x7, 0x1}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 32.566099043s ago: executing program 2 (id=944): io_submit(0x0, 0x0, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdb}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 32.374330637s ago: executing program 2 (id=949): r0 = socket$inet6(0xa, 0x80002, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) r3 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)={0x0, 0xc46, 0x2}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000d40), 0x8, 0x80000) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r8, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60f900f50014060000000000000000000000ffffac1e0001fe8000000000000000000000000000aa00044e22", @ANYRES32=r5, @ANYBLOB='P'], 0x0) ptrace(0x10, r4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x34, 0x26, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x5, 0x10}, {0xffff, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44059}, 0x4004004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) 32.230381571s ago: executing program 5 (id=952): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r0, &(0x7f0000000140)='-:my_read_msr2 msr/read_msr', 0x1b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) pread64(r2, &(0x7f0000000340)=""/8, 0x8, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) 25.22209641s ago: executing program 5 (id=956): userfaultfd(0x80001) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r1, 0x0) gettid() setns(0xc9, 0x0) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000a80)=""/188, 0xba) read$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 25.22080713s ago: executing program 1 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./sys\x00', 0x3) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) 23.926989132s ago: executing program 2 (id=959): syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="f7040094f29b8ea45f433a67e9722ca231cb00aaab0082b0924e1f080045789545c9e438c100278df394ef2c74a9e6bb4e1e00ff2b266cb9d4eea4b8b601604600"/75, @ANYRESOCT=0x0], 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000a80)="b9fff5308944268cb899e36e0800e8e47176b3446b2c1d8839b01d436c0e6c922608", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r4, 0x11}, 0x14) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) 23.694995118s ago: executing program 0 (id=960): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1c0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) mount(0x0, 0x0, &(0x7f0000000280)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 22.453571419s ago: executing program 1 (id=961): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0a0300c8"], 0xd) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 22.214539326s ago: executing program 4 (id=962): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) 20.179380658s ago: executing program 1 (id=963): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 19.217736682s ago: executing program 4 (id=964): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x5, {{0xa, 0x4e22, 0x3ff, @empty, 0x6}}, {{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfaa4}}}, 0x108) unshare(0x62000000) 18.345647394s ago: executing program 5 (id=965): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb70200000800"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0xffffffffffffffa1}}]}]}]}, 0x50}}, 0x0) 16.448276722s ago: executing program 1 (id=966): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000001440)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r5, &(0x7f0000000040)='#\x00', 0x80, &(0x7f00000000c0)={@align=0xe2, {0xfff, 0xfffb, 0x200, 0xb4d}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x73d}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc040000000000000000000000000000ff020000000000000000000000000001242088a800000003000008000000000000000000080022eb"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f00000074c0)={&(0x7f0000007300)=[&(0x7f00000002c0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000000300)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000000380)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000003c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x100000001}}, &(0x7f0000000400)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000000440)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000000480)=@uuid={{0x4f32494e, 0x5, 0x10, 0x100000000}}, &(0x7f0000002580)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f00000025c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000002600)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002640)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x0, 0xffffffff}, {0x5, 0x10}, {0x9, 0xf}, {0xfffffffffffffe00, 0x545c}, {0x7fffffffffffffff, 0x8}, {0x1, 0xffffffffffffffc0}, {0x800, 0x800}, {0x91a6, 0xfffffffffffffff9}, {0x6, 0x4}, {0x1000, 0xfffffffffffffffa}, {0x2, 0x9}, {0x101, 0x10001}, {0x1000, 0xba6}, {0xc81, 0x7}, {0xfffffffffffffa6e, 0x1}, {0x0, 0x1}, {0x101, 0x64d}, {0x4, 0xa8}, {0x7, 0xfff}, {0x180000000, 0x9010}, {0x4, 0x34c9}, {0x5, 0xcbf3}, {0x0, 0x8}, {0x9, 0x9}, {0x7, 0x3023}, {0x1, 0xde9}, {0x7, 0xec4}, {0x3d4, 0x1}, {0x1, 0x3}, {0x0, 0xbc0b}, {0x9, 0x5}, {0x2, 0x9a}, {0x1400000000000, 0x80000001}, {0x3ff, 0x8}, {0x8, 0x3}, {0x0, 0x1ff}, {0x6, 0x10000}, {0xffffffffffff115a, 0x4}, {0x6, 0x2}, {0x5, 0x8000}, {0xe693, 0x2}, {0xc91, 0x3}, {0x7, 0x2}, {0x2, 0x80010}, {0xe1f9, 0x5}, {0x7, 0x1}, {0xf2}, {0x3, 0x8001}, {0x0, 0x2}, {0xff, 0x400}, {0x8, 0x10001}, {0x63d6, 0xa}, {0x8000000000000001, 0x6}, {0x3ff, 0x1}, {0xb5fa, 0x3}, {0x1, 0x100}, {0x8001, 0x7fffffffffffffff}, {0x8, 0xbf3}, {0x40, 0x1}, {0x5, 0x2}, {0xc3, 0x8}, {0x4, 0x8000000000000000}, {0xffff, 0x612}, {0x999c, 0x7}, {0x7, 0x5}, {0xd, 0x4}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x1}, {0x1000, 0x5}, {0x5, 0xfff}, {0x3, 0x66}, {0x2, 0xffffffffffff8000}, {0x40, 0xa}, {0x7f, 0x9c4}, {0x5, 0xfffffffffffffff9}, {0xf, 0x6}, {0x8000, 0x8a32373}, {0x1, 0x6}, {0x62, 0x9}, {0x9, 0x4}, {0xc, 0x1ff}, {0x2}, {0x3, 0x4}, {0x9, 0x6}, {0xdff, 0x5}, {0x8, 0x2}, {0x6, 0x100}, {0x10000, 0xe}, {0x3556, 0x6}, {0xffffffffffffffff, 0x5}, {0x7, 0x1ff}, {0x401, 0x9}, {0x100000000, 0x3}, {0x8}, {0x4, 0x7de}, {0x3, 0x8}, {0xe9, 0x3}, {0x0, 0x7}, {0x3}, {0x8, 0x9}, {0x5, 0x80}, {0x1, 0x7ff}, {0x100000001, 0x2}, {0x6, 0x7}, {0x9, 0x401}, {0xb700, 0x101}, {0x51, 0x10000}, {0x8, 0x6}, {0x9, 0x8}, {0x9, 0x9d94}, {0x8, 0x7}, {0x7}, {0x4, 0x3}, {0x4, 0x9}, {0xd8, 0x4}, {0x100, 0x8e5e}, {0x80000000, 0x7fffffff}, {0x2, 0x8}, {0x9, 0x7}, {0x3, 0xfffffffffffffff7}, {0x100000000, 0x4}, {0xe6, 0x100000000}, {0x1, 0xd}, {0x7, 0x1ff}, {0x5, 0x8}, {0x100000000, 0x2}, {0xb59}, {0x1, 0xfffffffffffffffe}, {0x8, 0x10001}, {0x6, 0x3}, {0x0, 0x4}, {0x3}, {0x400, 0x8}, {0xfffffffffffffffc, 0x7f}, {0x10000, 0x6}, {0x1, 0x8}, {0x3, 0x7}, {0x6, 0x101}, {0x2, 0x2}, {0x9, 0xa38b}, {0x8, 0xfff}, {0x4, 0x101}, {0xe5, 0x7}, {0xfffffffffffffffe, 0xf}, {0x31f, 0x8}, {0x7, 0x9}, {0x400, 0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x7, 0x8}, {0x0, 0x10}, {0x3, 0x7}, {0xa7b, 0xf9c}, {0x0, 0x571}, {0xfffffffffffffff8, 0x9}, {0xe0c2, 0xffffffff}, {0x8, 0xffff}, {0x4}, {0x0, 0x200000}, {0x5, 0x6}, {0x1, 0xff}, {0x100000001, 0x3ff}, {0xf, 0x9}, {0x0, 0x2}, {0x8, 0x3}, {0x9, 0x2a}, {0x0, 0x5}, {0xffff, 0x400}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x57}, {0xf5ad, 0x4}, {0x3, 0x1d0c6}, {0x2, 0x7f}, {0x2, 0x5}, {0xf865, 0x3}, {0x3, 0x8}, {0x200, 0x3}, {0x3, 0x10}, {0x0, 0x7f}, {0x40, 0x3}, {0x3364, 0x2}, {0x961a, 0xabe9}, {0x3, 0x9}, {0x7fff, 0x401}, {0x5, 0xc8fd}, {0x1d, 0x7fffffffffffffff}, {0x0, 0x4}, {0x3, 0x101}, {0x6, 0x2}, {0x1, 0xcb}, {0x6, 0x3}, {0x1, 0x8}, {0xbb, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x80000001, 0x100000001}, {0xfd51, 0x5}, {0x60ab, 0x4}, {0xc4f4, 0x6}, {0xe}, {0xfffffffffffffffd, 0x1}, {0x3, 0xfffffffffffff6d0}, {0x100, 0x7f}, {0xd81, 0x2}, {0x3, 0x35}, {0x80, 0x2}, {0xb93, 0x4}, {0x100, 0x6}, {0x9, 0xfa2}, {0x7, 0x7}, {0xff, 0x9c}, {0xe, 0x7}, {0xd8, 0x80000001}, {0x6, 0x40000000}, {0xdd9, 0xc}, {0xffffffffffff7fff}, {0x1c, 0x982}, {0x6f7, 0x9}, {0x5, 0xfffffffffffffff9}, {0x30d5c3f7, 0xee}, {0x1, 0x5}, {0xffff, 0x2}, {0x9, 0x7}, {0x7fff, 0x5}, {0x7, 0x5454}, {0x2, 0x2}, {0x8, 0x1}, {0x9, 0xa8}, {0x6, 0x9}, {0xfae4, 0x7f}, {0x7, 0xb}, {0x80000001, 0xf}, {0xfa9, 0x9}, {0xa}, {0xffffffffffffff7f, 0x489434b6}, {0x59, 0x4}, {0x9, 0x7fac}, {0x2, 0x7f}, {0x1, 0x395d}, {0x3, 0x5db}, {0x3, 0x8}, {0x2, 0x10}, {0x0, 0x2}, {0x1, 0x8001}, {0x8}, {0x80, 0x6}, {0x5134, 0x8}, {0x7, 0x7}, {0x6, 0x1}, {0x8001, 0x39ee}, {0x1ef, 0x3}, {0x401, 0xfe}]}, &(0x7f0000003680)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f00000036c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003700)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000003740)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000003780)=@features={{0x4f32494e, 0x6, 0x10, 0x140000000}}, &(0x7f00000037c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x8}, &(0x7f0000003900)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003940)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000003980)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000002}}, &(0x7f00000039c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003a00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000003a40)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000003a80)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000003ac0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x35b, 0x8e}, {0x3, 0xed1e}, {0x4012, 0x400}, {0xfffffffffffffffc, 0xfffffffffffffe01}, {0x0, 0x8}, {0x4, 0x2}, {0x10}, {0x80, 0x2}, {0xc, 0x8}, {0x6, 0x6}, {0x40, 0x4}, {0x100000000, 0x515000000}, {0x100000001, 0x7}, {0x7fffffffffffffff, 0x3}, {0x2e}, {0x100000000, 0x1}, {0xffffffffffffff81, 0x5}, {0xdaa, 0x5}, {0xdfa5}, {0xab00, 0x2}, {0x9}, {0x9, 0x3}, {0x41, 0x100000001}, {0x5, 0x5}, {0x6, 0x7}, {0x3, 0x3}, {0x5, 0x800}, {0xd, 0xc8}, {0x1, 0x3}, {0x7f}, {0x6, 0x9}, {0x0, 0x3}, {0x10001, 0x1000}, {0x5, 0x635e7f27}, {0x40, 0x3}, {0x8, 0xfffffffffffffffe}, {0x5, 0x4}, {0x3, 0x8be}, {0x1, 0x2}, {0xb, 0x6}, {0x59, 0x1}, {0xfffffffffffffffa, 0xb}, {0x62380, 0x81}, {}, {0x2, 0x2}, {0x9, 0x3}, {0xfffffffffffffffe, 0x4}, {0x6, 0x100000000}, {0x1c31, 0x8fc5}, {0xbe64, 0x10000}, {0x100000000, 0x3457}, {0x800, 0x2}, {0x2, 0xff}, {0x8, 0xfffffffffffffff8}, {0x8, 0xffffffff}, {0x6, 0x8}, {0x2400000000000000, 0x2}, {0x1, 0x1}, {0x2}, {0x6, 0x943}, {0x400, 0x2}, {0x9, 0x4}, {0x3, 0x4}, {0x1, 0x9}, {0xe5d, 0x4}, {0x2, 0x7f}, {0xfffffffffffffff9, 0x8}, {0x2, 0x6}, {0x800000000000000, 0x4}, {0x1, 0x100000001}, {0x401, 0x7}, {0x5, 0x10001}, {0xfffffffffffffff9, 0x8}, {0x98, 0x68a}, {0x6, 0x2}, {0x101, 0x4}, {0xf4c3}, {0x2}, {0x0, 0x7fffffff}, {0x8, 0x2}, {0xf0a1, 0x1}, {0x55, 0x4}, {0x8, 0x2}, {0x9, 0x2}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x8}, {0x7, 0x3}, {0xc79, 0x9}, {0xc, 0x1}, {0xfffffffffffffffc, 0x9}, {0x126, 0x7}, {0x0, 0x22cd559c}, {0x8, 0xfffffffffffffff9}, {0x0, 0x5}, {0x400, 0x8}, {0x4, 0xec1}, {0xfffffffffffffffa, 0x4}, {0x2, 0x4}, {0x4, 0x7}, {0x5, 0x8001}, {0x5, 0xc6b}, {0xe, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0xf01a, 0x4}, {0x80000001, 0x8}, {0x0, 0xffffffffffffffff}, {0x80, 0x2}, {0x7fffffffffffffff, 0x8}, {0x7, 0x8}, {0x6}, {0x7, 0x3}, {0x94, 0x3}, {0x2, 0x3ff}, {0xd, 0x4}, {0x2, 0x1ff}, {0x6, 0x7fffffffffffffff}, {0xaac, 0xdf}, {0x5, 0xe}, {0xff, 0x2}, {0x9, 0x81e}, {0xbe97, 0xc25e}, {0x4, 0x5}, {0xc, 0x2}, {0x7, 0xc}, {0x0, 0x8}, {0x5a52, 0x7ff}, {0x3, 0x3ff}, {0x3, 0x2}, {0xffffffff, 0x2}, {0xd014, 0x1}, {0x3, 0x1}, {0x2, 0x100000001}, {0x3, 0x2b4}, {0x5, 0xc}, {0x2, 0x2}, {0x26c, 0x1}, {0x7ff, 0x80000000}, {0x7, 0x10001}, {0x4, 0xf4}, {0x8000, 0x9}, {0x1, 0xfffffffffffffffc}, {0x0, 0xa}, {0x6, 0x96}, {0x0, 0x6}, {0x7ff, 0x7fffffffffffffff}, {0x5, 0x9}, {0x2, 0x8}, {0xfffffffffffffc01, 0x4}, {0x9, 0x8}, {0x2, 0x15dd3580}, {0xfffffffffffffffd, 0x2}, {0xa00000000000, 0x2}, {0x1, 0x1}, {0xd90, 0x2}, {0x0, 0x80000001}, {0xffffffffffffffff, 0x2}, {0x80000000, 0x90000000000}, {0x4}, {0x200, 0x7f}, {0xfff}, {0x2, 0x4301}, {0x0, 0x5d}, {0x8, 0x495a}, {0x40000000000, 0x400}, {0x4, 0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x7ff, 0x5}, {0x100, 0x3}, {0x979, 0x200}, {0x7fffffffffffffff, 0x1}, {0x100, 0x7}, {0xdb57, 0x5}, {0x8000000000000001, 0x2b2}, {0x8, 0xffffffff}, {0xe, 0xd2}, {0xb9}, {0xffffffffffffffff, 0xffffffffffffffff}, {0x6, 0xa}, {0x1, 0x40}, {0x2, 0xfffffffffffffffe}, {0x10001, 0x3}, {0x8, 0x2}, {0xd, 0x8e}, {0x7, 0xffffffffffffffff}, {0x7f, 0xb0ce}, {0xffffffffffffff14, 0x2}, {0x5, 0x6}, {0xfffffffffffff5a4, 0x8000000000000000}, {0x4, 0x5}, {0x2, 0x9}, {0x4}, {0x8001, 0x6}, {0x4, 0x7f}, {0x4, 0xf}, {0x2, 0x100}, {0x5, 0x3}, {0x6, 0x15}, {0xfffffffffffffff9, 0x1}, {0xf, 0x1}, {0x9, 0x897}, {0x0, 0xc}, {0x0, 0x1}, {0xfffffffffffffffc, 0x687}, {0xfffffffffffffff8, 0x8}, {0x0, 0x2}, {0x571, 0x6}, {0xd, 0x1}, {0x5, 0xffffffffffffff76}, {0x6a7a, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x400, 0x100000001}, {0x3ff, 0x8000000000000001}, {0xd8a0, 0x3}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x3}, {0x8e8, 0x5}, {0x2, 0x4}, {0x0, 0x5}, {0xaf1, 0x98}, {0x0, 0xd}, {0x2, 0x9}, {0x8, 0xd}, {0x9, 0xa}, {0x7, 0xdfa}, {0x6, 0x1}, {0xeea3}, {0x9, 0x6}, {0xfff, 0x900000}, {0x3, 0x100000001}, {0x8, 0x4}, {0x100000001, 0x9}, {0x80, 0x1ff}, {0x9, 0x273}, {0x80}, {0xfffffffffffffff8, 0x7}, {0xb6, 0x3}, {0x401, 0x6}, {0x9, 0x8}, {0x8, 0x8000000000000001}, {0x80, 0x5}, {0xebd6, 0x6}, {0x1, 0x9}, {0xfffffffffffffff0, 0xaed1}, {0x4, 0x8}, {0x80, 0x7d}, {0x6, 0x1000}, {0x8000000000000001, 0x5e1}, {0x6, 0x4}]}, &(0x7f0000004b00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004b40)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000004b80)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000004c00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004c40)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000004c80)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000004cc0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000001}}, &(0x7f0000004d40)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000004d80)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000004dc0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x20000000}, {}, 0xfff}, &(0x7f0000004f00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x20000000}}, &(0x7f0000004f40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000004f80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x6, 0x4}, {0x8, 0x7f}, {0x2, 0xfffffffffffffff8}, {0xffffffffffff0000, 0x2}, {0x1, 0xac}, {0x8001, 0x2}, {0xfffffffffffffff9, 0x8}, {0x6, 0x9}, {0x5a63, 0x5}, {0x6, 0x401}, {0x2, 0xd}, {0x6, 0x6}, {0x1, 0x3}, {0x3, 0x2}, {0x179, 0x800}, {0xffffffffffffffff, 0xffffffff80000000}, {0xa, 0xc}, {0xc8d, 0xf}, {0x5, 0xa00000}, {0x1e0, 0x5}, {0x4, 0x5}, {0x0, 0x1}, {0xd23, 0x3ff}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x3ff}, {0x7ff, 0x2d2}, {0x7fffffffffffffff, 0x1}, {0x9, 0x3e}, {0xb, 0x2}, {0x9, 0x2}, {0x3, 0x9}, {0xd, 0x12}, {0x2, 0x12}, {0x3, 0x80000001}, {0x5, 0x1}, {0xa}, {0x8}, {0x100, 0xff}, {0x6, 0xc269}, {0x7, 0x3}, {0x8000000000000000, 0x18000000000}, {0x7, 0x2}, {0x2, 0x3364}, {0x6, 0x810000000000}, {0xfffffffffffffffd, 0xb}, {0x6, 0x8000}, {0x9, 0xf0}, {0x80, 0x8000000000000000}, {0xffffffffffffaec3, 0x7}, {0x6, 0x9}, {0xb895, 0x8}, {0xffffffff, 0x4}, {0x6, 0x8000}, {0x2, 0x4}, {0x7fff, 0x1}, {0x17, 0x741d377b}, {0xc, 0x43}, {0x2, 0x8}, {0x8, 0xffffffff}, {0x0, 0x5}, {0x2, 0xfd}, {0x0, 0xbbe}, {0x3, 0xff}, {0x8000000000000000, 0x4}, {0x2, 0x5}, {0x1, 0x5}, {0x47, 0x3}, {0x6, 0x4}, {0x829, 0x6}, {0x8, 0xa}, {0xafc8, 0xea}, {0x1ff, 0x1}, {0x7ff, 0xffffffffffffff1e}, {0x4}, {0x30000000000, 0x1000}, {0x1, 0x6}, {0x0, 0x8000}, {0x8, 0x2}, {0xffffffff, 0x40}, {0x7e, 0x5}, {0x3, 0xa}, {0x9, 0x3}, {0xfffffffffffffff7, 0x7}, {0x1b, 0x8}, {0x5, 0xffff}, {0x7, 0x3}, {0xfd, 0x5db5}, {0x9, 0x9}, {0xea, 0x2}, {0x80000000, 0x7}, {0x101, 0x6}, {0x9, 0xda}, {0x7, 0x8}, {0x1, 0xb}, {0x192e, 0x9}, {0x5, 0x5}, {0x1049, 0xa7}, {0x5}, {0x0, 0xa}, {0x1000}, {0x8000000000000000, 0x81}, {0x6, 0x1}, {0xffffffffffffffff, 0xfffffffffffffc01}, {0x4, 0x81}, {0x4, 0xa4e}, {0x63b, 0x2}, {0x2, 0x8000000000000000}, {0x2, 0x1}, {0x339, 0x5}, {0x9, 0xc6a0000000000}, {0xd, 0x6}, {0xd86, 0x4}, {0x10000, 0xff}, {0x8, 0x3ca}, {0x6, 0x45d}, {0x4, 0x8}, {0xfff, 0x9}, {0x80000001, 0x2}, {0x4, 0x6}, {0x4, 0x8001}, {0x6, 0x1ff}, {0x6, 0x5}, {0x8, 0x2}, {0x1, 0x4}, {0x6, 0xffff}, {0x1, 0x2}, {0x8, 0x2c63}, {0x3, 0xfffffffffffff195}, {0x7fff, 0x7fffffff}, {0x1}, {0x401, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x4, 0x14ae}, {0x200000000000, 0x8}, {0x8, 0x427}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0xffff}, {0x0, 0x7fff}, {0x0, 0xa26}, {0x2, 0x6cc}, {0x5, 0x1}, {0x7}, {0x9f7d, 0xfffffffffffff801}, {0x6a97, 0xe1}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x100000001}, {0x7, 0x3}, {0x0, 0x8}, {0x2804, 0x5}, {0x2, 0x8}, {0x7fffffff, 0x7}, {0x1, 0x10}, {0x2, 0x400}, {0x9, 0x200}, {0xd, 0x3}, {0x2, 0x2}, {0xa, 0x7}, {0x13, 0x9}, {0x4, 0x8}, {0x5, 0x3ff}, {0x5e, 0xfffffffffffffff8}, {0x8, 0x6}, {0xb}, {0xda, 0x7fffffff}, {0x9000, 0x1ff}, {0x5, 0x80}, {0x7, 0x8}, {0x0, 0xd}, {0x2, 0x2}, {0x2, 0xff47}, {0x0, 0xf}, {0x8000000000000001, 0x2}, {0x7f, 0x4}, {0x3, 0x7}, {0xffffffffffffff29, 0x8}, {0xffff, 0xfff}, {0x0, 0x6}, {0x81, 0x3}, {0xfffffffffffffffd, 0x7}, {0xfffffffffffffff9, 0x4}, {0x0, 0x3}, {0x4, 0x3}, {0xdf, 0x2480}, {0x100000001, 0x7ff}, {0xff, 0x3}, {0x9, 0x2}, {0x6, 0x1}, {0x40, 0xfffffffffffffff8}, {0x7, 0x2}, {0x7fffffff, 0x8}, {0x8, 0x7}, {0x7, 0x4}, {0x5, 0x8}, {0x9, 0x1000}, {0x5, 0x7}, {0x7, 0x8}, {}, {0x7, 0x5}, {0x0, 0x8}, {0x8, 0x4}, {0xf, 0x9}, {0x8, 0x6f}, {0x4, 0x200}, {0x80000001, 0x1}, {0x7, 0x3}, {0x1, 0xfffffffffffffff7}, {0x6, 0x3}, {0x40000000000000, 0xff}, {0xff, 0x7fff}, {0xfffffffffffffff9, 0x25}, {0x4e4, 0x1}, {0xa0, 0x4}, {0x5, 0x6}, {0x3, 0xffffffff}, {0x8000, 0xfe0000000000000}, {0x4, 0xe}, {0x5, 0x16f6}, {0xe00000, 0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x8f}, {0x5, 0x3}, {0xe, 0x10001}, {0xfffffffffffffff8, 0x9}, {0x2}, {0x8, 0x8000}, {0x0, 0xffff}, {0x100, 0x2}, {0x9, 0x4}, {0x80000001, 0x80000000}, {0xff, 0x7}, {0x461d, 0x1}, {0x4, 0x7}, {0xfffffffffffffffe, 0x70}, {0x4, 0x6}, {0x8, 0xfffffffffffffff9}, {0x40, 0x10}, {0x9, 0x81}, {0x3, 0x3}, {0x7, 0x236dce33}, {0x4, 0x8001}, {0x8, 0x2}, {0x5, 0xae}, {0x7, 0x7}, {0x8, 0x2}, {0x6, 0x8}, {0x4, 0x4d}, {0x5}, {0x8, 0x3}, {0x3}, {0x6, 0x9}, {0x2, 0x8}]}, &(0x7f0000005fc0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000006000)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000006040)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000006080)=@uuid={{0x4f32494e, 0x5, 0x10, 0x140000001}}, &(0x7f00000060c0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000006100)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000006180)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000061c0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000006200)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000006240)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000006280)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000062c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x0, 0x1}, {0x5, 0x3}, {0x4, 0xba86}, {0x9}, {0xdcd6, 0x800000000000}, {0x76e7f47f, 0x800}, {0x2000}, {0x3d, 0x800}, {0x8, 0x2}, {0x1, 0xffffffffffffffff}, {0xffffffffffff0000, 0x1}, {0x6, 0xdd4}, {0x5, 0x3}, {0x1}, {0x2, 0x240}, {0x5, 0x8000}, {0x7, 0xdc4}, {0x8, 0x49f7}, {0x1, 0x6}, {0xfc, 0x7}, {0xb, 0xc53}, {0x5, 0x3}, {0x8d2e, 0x1}, {0xef1b, 0x200}, {0x0, 0x6}, {0x2, 0x752f}, {0x8, 0x3}, {0x9, 0x4}, {0x7, 0x3}, {0x5, 0xd1d0}, {0x6, 0x3}, {0x0, 0x100}, {0x9}, {0x0, 0xa}, {0xfb9, 0x7}, {0x1, 0xb}, {0xfa, 0x5}, {0x8, 0x92}, {0x7fffffff, 0x7fff}, {0x8, 0x9}, {0x7, 0xb}, {0x0, 0x29a}, {0x2, 0x7ff}, {0x0, 0x101}, {0x5, 0x80}, {0x8000000000000000, 0x6}, {0x7, 0x2}, {0x1, 0xd14}, {0x8001, 0x1}, {0x2000, 0x7ff5}, {0x4, 0x80}, {0x0, 0x1}, {0x6, 0x9}, {0xbc, 0x9}, {0x1, 0x94b}, {0x5, 0x8}, {0x7, 0xc}, {0x7fffffffffffffff, 0x7bfb}, {0x39, 0x6}, {0x8000000000000001, 0x1}, {0x80, 0x8000}, {0xb, 0x1000}, {0x7, 0xfffffffffffffffa}, {0x10, 0x1}, {0x3, 0x5}, {0x5, 0x8000}, {0x7fffffff, 0x2}, {0x1, 0x7}, {0xc}, {0x3, 0x4}, {0x9, 0x3}, {0x6, 0x8}, {0x6, 0x4}, {0x8001, 0x2}, {0x1, 0x3a}, {0x4, 0x8001}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x8}, {0x70, 0x5b}, {0x1, 0x8}, {0x8}, {0x9, 0xfffffffffffffffd}, {0x8, 0x5}, {0x80000001, 0x4}, {0x9, 0x3}, {0x1, 0x3}, {0x507, 0xfffffffffffffffd}, {0x80, 0x3}, {0xff, 0x8}, {0x2, 0x18}, {0x0, 0xfffffffffffffff8}, {0x8, 0x9}, {0xb, 0x947}, {0x3, 0x6}, {0x4, 0x4}, {0x800, 0x3}, {0x5, 0x9}, {0x9}, {0x7ff, 0x5}, {0x1, 0x8000000000000000}, {0x1, 0x3}, {0x401}, {0x4, 0xe}, {0x6}, {0x9, 0x80}, {0x4, 0x4}, {0x0, 0xfa}, {0x7, 0x8}, {0x85eedb2, 0xffff}, {0x151a2c5a, 0x4}, {0x8000, 0xffffffff}, {0x3, 0x40}, {0xffffffffffffffff, 0x26b}, {0xfffffffffffffff8, 0x10000}, {0x3, 0x200}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x3, 0x82}, {0x5, 0x7}, {0x24bb, 0xff}, {0x7, 0x8}, {0x5, 0x7f}, {0x5}, {0x9a9a, 0x1}, {0x1, 0x7f}, {0x7fffffffffffffff, 0x6}, {0x80000001, 0xfb}, {0x6, 0xfff}, {0x8000000000000000, 0x2}, {0x8a}, {0x3, 0x3}, {0x8f9, 0x7}, {0x8f, 0x1}, {0x2}, {0x8000000000000001, 0x412}, {0x7bd, 0x3}, {0x5, 0x3ff}, {0x7ff, 0x5}, {0xb, 0x9}, {0x5, 0x3ff}, {0x100000001, 0x400}, {0x3e, 0x6}, {0x5, 0x241}, {0xf, 0x2}, {0x7, 0xffff}, {0x7fffffffffffffff, 0x3}, {0x0, 0x3f}, {0x40, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x9}, {0x8, 0x100}, {0x40, 0x9}, {0x7, 0x1}, {0x4eb4, 0x4}, {0x8000000000000001, 0x4}, {0xfffffffffffffffe, 0xbd}, {0xe, 0x6}, {0x7, 0x1}, {0x54c, 0x7f}, {0x10000}, {0x1a13510b, 0x8000000000000000}, {0x3b7, 0x5000}, {0x8, 0x5}, {0x800, 0x1f}, {0x5, 0x100000001}, {0x3, 0x1c}, {0x9, 0x2}, {0x6}, {0x8, 0x80}, {0x3, 0xfffffffffffffff1}, {0x27e, 0x8000000000000001}, {0x8, 0x19}, {0x100000001, 0xffffffffffff0000}, {0x5, 0x9}, {0x10000, 0x5}, {0xfffffffeffffffff}, {0x10001, 0xb7b}, {0x7, 0x7fff}, {0x401}, {0x7fffffff, 0x7}, {0x6, 0x1}, {0xcffd, 0x8}, {0x401, 0xff}, {0xfffffffffffffffc, 0x5}, {0x80000001, 0xe}, {0x1, 0x2}, {0x8, 0x4}, {0x4, 0x2}, {0x4, 0x9}, {0x3, 0x10001}, {0x4, 0x6}, {0x1, 0xfffffffffffffffd}, {0x100000000, 0xc166}, {0x81, 0x8367}, {0xf758, 0xf4}, {0x6de, 0x9}, {0x8001, 0xadd1}, {0x8e5, 0x8}, {0x1, 0x9}, {0x2, 0xffffffffffffffff}, {0xff, 0x996}, {0x2, 0x4}, {0x0, 0x1}, {0x8000000000000000, 0x80}, {0x4, 0x1}, {0x6, 0xc0}, {0xffffffffffffffa0, 0x6}, {0xfffffffffffffffd, 0xa596}, {0xffffffffffffffff, 0x5}, {0x99, 0xfffffffffffffffe}, {0xfffffffffffffff8, 0x2672}, {0x8faa, 0x3}, {0x5f5, 0x2}, {0x5, 0x70}, {0x1}, {0xe0f}, {0xffff, 0x2}, {0x2, 0x10}, {0x4, 0x5}, {0x8, 0x4}, {0x7ff, 0x8}, {0xffffffffffffffff, 0x1}, {0x7, 0x7}, {0x80000001}, {0x8, 0x5}, {0x9, 0x8000000000000000}, {0xdc6, 0x8}, {0x5, 0x1}, {0x5}, {0xfffffffffffffffd, 0xd124}, {0x400, 0x3}, {0x0, 0xf}, {0x3, 0x5}, {0x400000000000000}, {0x4, 0x7fffffff}, {0x9}, {0x2, 0x1}, {0x2e3, 0x1ff}, {0x5, 0x2}, {0xffffffffffffffff, 0x8}, {0xc6, 0xfffffffffffffffb}, {0x3, 0xd9}, {0x0, 0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x8, 0x3ae}, {0x2, 0xfffffffffffffffe}, {0x6, 0x3}, {0x5, 0x3}, {0x4, 0x209b}, {0x8, 0x8800000000000000}]}], 0x32}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r0], 0xfdef) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001c030109021b0001000000040904080001030000000905", @ANYBLOB="9fef"], 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) fsync(0xffffffffffffffff) 15.076013367s ago: executing program 4 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x34}}, 0x0) 11.583865986s ago: executing program 5 (id=968): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x2) 10.730286107s ago: executing program 0 (id=969): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 10.526942173s ago: executing program 4 (id=970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 9.746999503s ago: executing program 5 (id=971): unshare(0x4a000200) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x7fff, 0x6, 0x200, 0x9, 0xfffffffa, 0x3, 0xb, 0xfff, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x4, 0xffffffff, 0x80, 0x9, 0x6}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={r1, 0x165, 0x3, 0xc, 0x401, 0x1, 0xa04, 0x1, {r2, @in6={{0xa, 0x4e22, 0x6, @loopback}}, 0x2, 0x5, 0x80000000, 0xec, 0xa}}, &(0x7f0000000540)=0xb0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='\\', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r4 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) 8.113921024s ago: executing program 33 (id=959): syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="f7040094f29b8ea45f433a67e9722ca231cb00aaab0082b0924e1f080045789545c9e438c100278df394ef2c74a9e6bb4e1e00ff2b266cb9d4eea4b8b601604600"/75, @ANYRESOCT=0x0], 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000a80)="b9fff5308944268cb899e36e0800e8e47176b3446b2c1d8839b01d436c0e6c922608", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r4, 0x11}, 0x14) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) 7.748560103s ago: executing program 0 (id=973): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000000000000007000000860effffffff0208270000140000000000000000000000000000000000000000000000000000000000d8"], 0x40}}], 0x1, 0x804) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.367894379s ago: executing program 4 (id=974): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70", @ANYBLOB='\x00'/20], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.496410731s ago: executing program 0 (id=975): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10, 0x0}, 0x0) 3.57240221s ago: executing program 1 (id=976): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x800001, 0x1, 0x4, 0x9e, 0xffb, 0x2, 0xb69, 0xc1, 0x40004, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x7, 0x8001, 0x1, 0xffffeffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0x10, 0x2b12, 0x240d43ee, 0x6, 0x1c00, 0xb, 0x7, 0xbed5, 0xf1a, 0x8000100, 0x3, 0x4, 0x11000, 0x80000000, 0xbab4, 0x79b, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x80000000, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x800ae, 0x7f, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100001, 0x8, 0x756, 0x0, 0x1005, 0x80005, 0x50001, 0x2, 0xffffffff, 0x6, 0x6, 0xc, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x0, 0xdda, 0xd, 0x29e, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 2.36145112s ago: executing program 0 (id=977): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'pim6reg0\x00', {0x1}}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.293965027s ago: executing program 5 (id=978): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x30) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x4, &(0x7f0000000180)=[{0x5, 0xd7, 0x4}, {0x0, 0x4, 0x1c, 0x7f}, {0x7fff, 0xc, 0xf0, 0x6334}, {0x4dfb, 0x9, 0x2, 0xa122}]}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0xe7aa7267dd8c20e1) mount(0x0, &(0x7f0000000140)='./dev/mtdblock0/file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') 147.231877ms ago: executing program 0 (id=979): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) r7 = syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000400)={0x0, 0x1, @stop_pts=0x5320000000000000}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x220, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xffffffff, 0xffffff00], 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x5e, 0xa, 0x0, 0x1}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x1ff, 0x4, 0x0, [0x1, 0xb73, 0x8001, 0x1ff, 0x5b, 0xde2, 0x80, 0x3ff, 0x0, 0x1, 0x1000, 0xc, 0xe3, 0x84, 0x1, 0x81], 0x4}}, @common=@inet=@ipcomp={{0x2c}, {[0x4d3, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x1, {0x2}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24}}, {{@ipv6={@mcast1, @private0, [0xff, 0xff, 0xffffffff, 0xffffffff], [0x100fffffe, 0xff, 0xffffff, 0xffff00], 'ip6_vti0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x6, 0xf5350167a9ffbcc2, 0x56}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@hl={{0x24}, {0x3, 0x79}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x25, "0c60337aa376c01a1f338d9d3a270f2a16ea33644261e7e127e53c74bdce"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x44c) 323.2µs ago: executing program 1 (id=980): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=981): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='blk', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bin', 0x3) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) write(r2, &(0x7f00000001f8)='hello', 0x5) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000500), 0x1000) close(r3) sigaltstack(&(0x7f0000000080)={0xffffffffffffffff, 0x2}, 0x0) kernel console output (not intermixed with test programs): 24][ T4465] loop3: detected capacity change from 0 to 32768 [ 88.588504][ T4467] loop0: detected capacity change from 0 to 32768 [ 88.731773][ T4467] [ 88.731773][ T4467] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.731773][ T4467] [ 88.805784][ T4465] XFS (loop3): Mounting V5 Filesystem [ 88.933110][ T4467] ERROR: (device loop0): diWrite: ixpxd invalid [ 88.933110][ T4467] [ 88.955083][ T4465] XFS (loop3): Ending clean mount [ 88.964175][ T4467] ERROR: (device loop0): txCommit: [ 88.964175][ T4467] [ 89.026478][ T4467] ERROR: (device loop0): diWrite: ixpxd invalid [ 89.026478][ T4467] [ 89.084201][ T4467] ERROR: (device loop0): txCommit: [ 89.084201][ T4467] [ 89.181409][ T4184] [ 89.181409][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.181409][ T4184] [ 89.249887][ T4184] [ 89.249887][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.249887][ T4184] [ 89.640644][ T4490] loop2: detected capacity change from 0 to 32768 [ 89.705091][ T4485] set_capacity_and_notify: 1 callbacks suppressed [ 89.705107][ T4485] loop4: detected capacity change from 0 to 32768 [ 89.771716][ T4490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.47 (4490) [ 89.845463][ T4490] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 89.884223][ T4490] BTRFS info (device loop2): setting nodatasum [ 89.904093][ T4490] BTRFS info (device loop2): force zlib compression, level 3 [ 89.932400][ T4490] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 90.000499][ T4490] BTRFS info (device loop2): use lzo compression, level 0 [ 90.038978][ T4490] BTRFS info (device loop2): turning on flush-on-commit [ 90.097738][ T4490] BTRFS info (device loop2): enabling auto defrag [ 90.134573][ T4490] BTRFS info (device loop2): max_inline at 4096 [ 90.174140][ T4490] BTRFS info (device loop2): using free space tree [ 90.180819][ T4490] BTRFS info (device loop2): has skinny extents [ 90.481107][ T4190] XFS (loop3): Unmounting Filesystem [ 90.514082][ T4490] BTRFS info (device loop2): enabling ssd optimizations [ 90.653785][ T3157] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.846079][ T4520] loop0: detected capacity change from 0 to 32768 [ 90.898304][ T4520] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.53 (4520) [ 90.973953][ T3157] usb 2-1: not running at top speed; connect to a high speed hub [ 90.998421][ T4520] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 91.035072][ T4520] BTRFS info (device loop0): using free space tree [ 91.041651][ T4520] BTRFS info (device loop0): has skinny extents [ 91.053939][ T3157] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.093754][ T3157] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 91.102856][ T3157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.176565][ T3157] usb 2-1: Found UVC 1.00 device (046d:0825) [ 91.183530][ T3157] usb 2-1: No streaming interface found for terminal 2. [ 91.381919][ T21] usb 2-1: USB disconnect, device number 2 [ 91.520577][ T4527] loop4: detected capacity change from 0 to 40427 [ 91.552154][ T4520] BTRFS info (device loop0): enabling ssd optimizations [ 91.632072][ T4527] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.661349][ T4527] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.684806][ T4537] loop3: detected capacity change from 0 to 32768 [ 91.692381][ T4527] F2FS-fs (loop4): invalid crc value [ 91.752519][ T4537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.54 (4537) [ 91.769467][ T4527] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.825485][ T4537] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 91.844515][ T4537] BTRFS info (device loop3): using free space tree [ 91.851844][ T4537] BTRFS info (device loop3): has skinny extents [ 91.887028][ T4527] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.913064][ T4527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.127795][ T4569] loop1: detected capacity change from 0 to 1024 [ 92.266753][ T4537] BTRFS info (device loop3): enabling ssd optimizations [ 92.286075][ T4263] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop0 scanned by udevd (4263) [ 94.188851][ T4614] loop0: detected capacity change from 0 to 2048 [ 94.220367][ T4583] loop2: detected capacity change from 0 to 32768 [ 94.259195][ T4614] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 94.321170][ T4614] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 94.453844][ T4614] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 94.461546][ T4614] UDF-fs: Scanning with blocksize 512 failed [ 94.511159][ T4583] XFS (loop2): Mounting V5 Filesystem [ 94.519150][ T4614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.293946][ T4583] XFS (loop2): Ending clean mount [ 95.385866][ T4188] XFS (loop2): Unmounting Filesystem [ 95.446482][ T4606] loop3: detected capacity change from 0 to 32768 [ 96.100120][ T4606] XFS (loop3): Mounting V5 Filesystem [ 96.362141][ T4643] loop4: detected capacity change from 0 to 512 [ 96.374746][ T4606] XFS (loop3): Ending clean mount [ 96.510132][ T4643] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.71: inode has both inline data and extents flags [ 96.534125][ T4643] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.71: couldn't read orphan inode 15 (err -117) [ 96.547685][ T4643] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 96.608828][ T4190] XFS (loop3): Unmounting Filesystem [ 96.688304][ T4613] loop1: detected capacity change from 0 to 32768 [ 96.742425][ T4613] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.67 (4613) [ 97.471519][ T4613] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 97.493806][ T4613] BTRFS info (device loop1): using free space tree [ 97.500394][ T4613] BTRFS info (device loop1): has skinny extents [ 97.645124][ T4641] loop0: detected capacity change from 0 to 32768 [ 97.789781][ T4613] BTRFS error (device loop1): open_ctree failed: -12 [ 97.906824][ T4641] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.202009][ T4677] loop3: detected capacity change from 0 to 512 [ 98.841270][ T4677] EXT4-fs (loop3): Ignoring removed oldalloc option [ 98.863847][ T4677] EXT4-fs (loop3): Ignoring removed oldalloc option [ 98.906611][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.72: inode #1: comm syz.3.72: iget: illegal inode # [ 99.105406][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.72: error while reading EA inode 1 err=-117 [ 99.578928][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.72: inode #1: comm syz.3.72: iget: illegal inode # [ 99.851233][ T4687] loop2: detected capacity change from 0 to 512 [ 99.860048][ T4677] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.72: error while reading EA inode 1 err=-117 [ 99.864922][ T4687] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 99.926182][ T4683] syz.0.68 (4683) used greatest stack depth: 18000 bytes left [ 99.942078][ T4677] EXT4-fs (loop3): 1 orphan inode deleted [ 99.981581][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,oldalloc,grpquota,usrjquota=,oldalloc,,errors=continue. Quota mode: writeback. [ 100.045225][ T4669] loop4: detected capacity change from 0 to 32768 [ 100.116660][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 100.231449][ T4669] XFS (loop4): Mounting V5 Filesystem [ 101.267133][ T4669] XFS (loop4): Ending clean mount [ 101.347234][ T4708] syz.0.81[4708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.347401][ T4708] syz.0.81[4708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.403887][ T4196] XFS (loop4): Unmounting Filesystem [ 101.417314][ T4689] loop1: detected capacity change from 0 to 32768 [ 102.248827][ T4689] XFS (loop1): Mounting V5 Filesystem [ 103.222467][ T4689] XFS (loop1): Ending clean mount [ 103.434586][ T4193] XFS (loop1): Unmounting Filesystem [ 104.868973][ T4756] loop1: detected capacity change from 0 to 512 [ 104.984895][ T4756] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 106.689570][ T4773] Zero length message leads to an empty skb [ 108.859998][ T4785] loop1: detected capacity change from 0 to 512 [ 109.063926][ T4785] EXT4-fs (loop1): Ignoring removed oldalloc option [ 109.099184][ T4787] loop2: detected capacity change from 0 to 512 [ 109.180432][ T4785] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 109.233869][ T4787] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.255829][ T4796] loop4: detected capacity change from 0 to 512 [ 109.293861][ T4796] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 109.354045][ T4787] EXT4-fs (loop2): 1 truncate cleaned up [ 109.359757][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 109.836671][ T26] audit: type=1800 audit(1787772768.095:5): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.101" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 110.385390][ T26] audit: type=1800 audit(1787772768.675:6): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.101" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 113.662075][ T4832] loop1: detected capacity change from 0 to 512 [ 114.625649][ T4832] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.111: inode has both inline data and extents flags [ 114.704043][ T4832] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.111: couldn't read orphan inode 15 (err -117) [ 114.739833][ T4849] loop2: detected capacity change from 0 to 512 [ 114.753173][ T4832] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 114.793136][ T4848] loop3: detected capacity change from 0 to 512 [ 114.806116][ T4849] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.855341][ T4849] EXT4-fs (loop2): 1 truncate cleaned up [ 114.912519][ T4848] EXT4-fs (loop3): bad s_min_extra_isize: 544 [ 114.949362][ T4849] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 115.376863][ T4840] loop4: detected capacity change from 0 to 32768 [ 115.483420][ T4840] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.116 (4840) [ 115.613828][ T4840] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 115.622655][ T4840] BTRFS info (device loop4): setting nodatasum [ 115.666867][ T4840] BTRFS info (device loop4): force zlib compression, level 3 [ 115.674509][ T4840] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 115.683897][ T4840] BTRFS info (device loop4): use lzo compression, level 0 [ 115.691184][ T4840] BTRFS info (device loop4): turning on flush-on-commit [ 115.698885][ T4840] BTRFS info (device loop4): enabling auto defrag [ 115.706300][ T4840] BTRFS info (device loop4): max_inline at 4096 [ 115.712592][ T4840] BTRFS info (device loop4): using free space tree [ 115.720941][ T4840] BTRFS info (device loop4): has skinny extents [ 116.163750][ T4840] BTRFS info (device loop4): enabling ssd optimizations [ 116.350279][ T26] audit: type=1800 audit(1787772774.635:7): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.116" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 116.484210][ T4404] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.753781][ T4404] usb 2-1: device descriptor read/64, error -71 [ 117.143747][ T4404] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.463718][ T4404] usb 2-1: device descriptor read/64, error -71 [ 119.439578][ T4404] usb usb2-port1: attempt power cycle [ 120.313750][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.875312][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 121.835948][ T7] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 121.970730][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 122.010490][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 122.030158][ T7] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 122.099675][ T7] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 122.123683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 122.133673][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 122.143674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 122.163685][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.173676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.183675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.193674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.203671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.253689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.263669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 122.710583][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.245746][ T7] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.055183][ T7] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.095282][ T7] usb 4-1: config 0 descriptor?? [ 124.107100][ T4952] IPVS: lblc: TCP 127.0.0.1:5376 - no destination available [ 124.153987][ T7] usb 4-1: can't set config #0, error -71 [ 124.163291][ T7] usb 4-1: USB disconnect, device number 2 [ 125.063893][ T4968] syz.2.145 uses obsolete (PF_INET,SOCK_PACKET) [ 127.649395][ T5003] jffs2: notice: (5003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.065609][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.072823][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.079674][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.086488][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.093291][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.100105][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.106913][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.113724][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.120684][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.127508][ T5011] tc action pedit offset must be on 32 bit boundaries [ 128.134350][ T5011] 0: reclassify loop, rule prio 0, protocol 800 [ 130.630776][ T5022] loop2: detected capacity change from 0 to 512 [ 130.834627][ T5022] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.162: inode has both inline data and extents flags [ 130.848576][ T5022] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.162: couldn't read orphan inode 15 (err -117) [ 130.871713][ T5022] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 130.929050][ T5030] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.892077][ T5052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.172'. [ 132.129371][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 132.249768][ T5055] device batadv0 entered promiscuous mode [ 132.324951][ T5055] device macsec1 entered promiscuous mode [ 132.428796][ T5055] device batadv0 left promiscuous mode [ 132.684160][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.690530][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.293840][ T21] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 135.774049][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.918511][ T5087] 9pnet_virtio: no channels available for device syz [ 136.083909][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 136.109132][ T21] usb 5-1: can't read configurations, error -71 [ 136.184421][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.033410][ T4261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.114017][ T4261] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.133077][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.142386][ T4261] usb 2-1: SerialNumber: syz [ 137.151946][ T5099] loop4: detected capacity change from 0 to 512 [ 137.246775][ T5099] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 137.267618][ T5099] EXT4-fs (loop4): Remounting filesystem read-only [ 137.274965][ T5099] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.184: invalid indirect mapped block 4278190080 (level 0) [ 137.289382][ T5099] EXT4-fs (loop4): Remounting filesystem read-only [ 137.296364][ T5099] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.184: invalid indirect mapped block 1 (level 1) [ 137.312011][ T5099] EXT4-fs (loop4): Remounting filesystem read-only [ 137.319660][ T5099] EXT4-fs (loop4): 1 truncate cleaned up [ 137.325427][ T5099] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 137.439071][ T4261] usb 2-1: 0:2 : does not exist [ 137.531941][ T4261] usb 2-1: USB disconnect, device number 6 [ 137.799352][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.684091][ T5128] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 140.736803][ T5128] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 141.174175][ T4261] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 141.209649][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 141.356409][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f007800: rx timeout, send abort [ 141.624345][ T4261] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 141.649993][ T4261] usb 3-1: can't read configurations, error -71 [ 141.857466][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f006c00: rx timeout, send abort [ 141.866212][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f007800: abort rx timeout. Force session deactivation [ 142.365750][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f006c00: abort rx timeout. Force session deactivation [ 143.685262][ T5180] loop1: detected capacity change from 0 to 512 [ 143.763018][ T5180] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 143.778189][ T5180] EXT4-fs (loop1): Remounting filesystem read-only [ 143.784964][ T5180] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.207: invalid indirect mapped block 4278190080 (level 0) [ 143.801868][ T5180] EXT4-fs (loop1): Remounting filesystem read-only [ 143.808520][ T5180] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.207: invalid indirect mapped block 1 (level 1) [ 143.822112][ T5180] EXT4-fs (loop1): Remounting filesystem read-only [ 143.829043][ T5180] EXT4-fs (loop1): 1 truncate cleaned up [ 143.834768][ T5180] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 143.862153][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.997368][ T5178] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 144.020815][ T5178] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 145.433944][ T4194] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.693729][ T4194] usb 3-1: Using ep0 maxpacket: 16 [ 147.243860][ T4261] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 147.564043][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.753843][ T4261] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 147.774426][ T4261] usb 5-1: can't read configurations, error -71 [ 147.874363][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 148.094644][ T4194] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.102599][ T4194] usb 3-1: no configurations [ 148.142674][ T4194] usb 3-1: can't read configurations, error -22 [ 149.339907][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 150.756275][ T5236] loop3: detected capacity change from 0 to 512 [ 151.044106][ T5236] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.223: inode has both inline data and extents flags [ 151.092054][ T5236] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.223: couldn't read orphan inode 15 (err -117) [ 151.134628][ T5236] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 151.823695][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.831571][ T7] usb 2-1: no configurations [ 151.863841][ T7] usb 2-1: can't read configurations, error -22 [ 152.030088][ T5258] loop3: detected capacity change from 0 to 512 [ 152.319217][ T5258] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 152.616906][ T5258] EXT4-fs (loop3): Remounting filesystem read-only [ 152.739268][ T5258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.226: invalid indirect mapped block 4278190080 (level 0) [ 152.947282][ T5258] EXT4-fs (loop3): Remounting filesystem read-only [ 152.957415][ T5258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.226: invalid indirect mapped block 1 (level 1) [ 152.992027][ T5258] EXT4-fs (loop3): Remounting filesystem read-only [ 153.010711][ T5264] loop2: detected capacity change from 0 to 512 [ 153.014886][ T5258] EXT4-fs (loop3): 1 truncate cleaned up [ 153.039046][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 153.110439][ T5264] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.184389][ T5264] EXT4-fs (loop2): 1 truncate cleaned up [ 153.262243][ T5264] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 154.836622][ T26] audit: type=1326 audit(1787772812.285:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 154.978288][ T26] audit: type=1326 audit(1787772812.285:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 155.017777][ T26] audit: type=1326 audit(1787772812.285:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 155.219473][ T26] audit: type=1326 audit(1787772812.285:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 155.245614][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 155.270583][ T26] audit: type=1326 audit(1787772812.285:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 155.944175][ T26] audit: type=1326 audit(1787772812.285:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 156.179551][ T26] audit: type=1326 audit(1787772812.285:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 156.315904][ T5304] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 156.377674][ T26] audit: type=1326 audit(1787772812.285:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 156.835792][ T26] audit: type=1326 audit(1787772812.285:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 157.031715][ T26] audit: type=1326 audit(1787772812.285:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371dad30d9 code=0x7ffc0000 [ 157.384506][ T5318] loop3: detected capacity change from 0 to 512 [ 157.645514][ T5318] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.247894][ T5318] EXT4-fs (loop3): 1 truncate cleaned up [ 158.269590][ T5318] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 163.113851][ T4185] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.228234][ T3157] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.093948][ T4185] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.193715][ T4227] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.209583][ T4185] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.221098][ T4185] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.232088][ T4185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.571330][ T5375] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.114402][ T4908] usb 2-1: USB disconnect, device number 9 [ 165.155292][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 165.163961][ T3157] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 165.194214][ T3157] usb 5-1: can't read configurations, error -71 [ 166.825809][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.386100][ T4227] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.399988][ T4227] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.411556][ T4227] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.473804][ T4227] usb 1-1: string descriptor 0 read error: -71 [ 167.483726][ T4227] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.533524][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 167.583859][ T4227] usb 1-1: can't set config #1, error -71 [ 167.606088][ T4227] usb 1-1: USB disconnect, device number 3 [ 173.371808][ T5497] loop4: detected capacity change from 0 to 512 [ 173.476849][ T5497] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 177.374073][ T5523] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 177.707941][ T4197] Bluetooth: hci4: link tx timeout [ 177.713408][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.723832][ T4197] Bluetooth: hci4: link tx timeout [ 177.729103][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.738385][ T4197] Bluetooth: hci4: link tx timeout [ 177.744335][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.753335][ T4197] Bluetooth: hci4: link tx timeout [ 177.758870][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.767477][ T4197] Bluetooth: hci4: link tx timeout [ 177.773097][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.866150][ T4197] Bluetooth: hci4: link tx timeout [ 177.871397][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.879958][ T4197] Bluetooth: hci4: link tx timeout [ 177.885230][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.929961][ T4197] Bluetooth: hci4: link tx timeout [ 177.935261][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.013843][ T4197] Bluetooth: hci4: link tx timeout [ 178.019043][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.027350][ T4197] Bluetooth: hci4: link tx timeout [ 178.032492][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.040717][ T4197] Bluetooth: hci4: link tx timeout [ 178.045979][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.057635][ T4197] Bluetooth: hci4: link tx timeout [ 178.063230][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.072720][ T4197] Bluetooth: hci4: link tx timeout [ 178.077905][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.086176][ T4197] Bluetooth: hci4: link tx timeout [ 178.091338][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.099670][ T4197] Bluetooth: hci4: link tx timeout [ 178.104856][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.113068][ T4197] Bluetooth: hci4: link tx timeout [ 178.118315][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.127335][ T4197] Bluetooth: hci4: link tx timeout [ 178.132486][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.145161][ T4197] Bluetooth: hci4: link tx timeout [ 178.150296][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.185113][ T4197] Bluetooth: hci4: link tx timeout [ 178.190437][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.201191][ T4197] Bluetooth: hci4: link tx timeout [ 178.206572][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.244183][ T4197] Bluetooth: hci4: link tx timeout [ 178.249853][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.258742][ T4197] Bluetooth: hci4: link tx timeout [ 178.265360][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.274614][ T4197] Bluetooth: hci4: link tx timeout [ 178.280622][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.289388][ T4197] Bluetooth: hci4: link tx timeout [ 178.299412][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.318666][ T4197] Bluetooth: hci4: link tx timeout [ 178.324612][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.335528][ T4197] Bluetooth: hci4: link tx timeout [ 178.345519][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.379779][ T4197] Bluetooth: hci4: link tx timeout [ 178.385006][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.162683][ T5561] loop1: detected capacity change from 0 to 512 [ 179.258544][ T5561] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 179.537957][ T5575] loop0: detected capacity change from 0 to 128 [ 179.572963][ T5575] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 179.600587][ T5575] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.616780][ T5575] ext2 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.932061][ T3157] Bluetooth: hci4: command 0x0406 tx timeout [ 180.212739][ T4241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.346517][ T4241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.489189][ T4241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.508787][ T5596] loop0: detected capacity change from 0 to 512 [ 180.788452][ T4241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.811479][ T5596] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 180.871357][ T5596] EXT4-fs (loop0): Remounting filesystem read-only [ 180.914300][ T5596] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.324: invalid indirect mapped block 4278190080 (level 0) [ 180.963364][ T5570] chnl_net:caif_netlink_parms(): no params data found [ 180.981258][ T5610] loop2: detected capacity change from 0 to 512 [ 180.994512][ T5596] EXT4-fs (loop0): Remounting filesystem read-only [ 181.046344][ T5596] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.324: invalid indirect mapped block 1 (level 1) [ 181.080882][ T5610] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.328: inode has both inline data and extents flags [ 181.125082][ T5596] EXT4-fs (loop0): Remounting filesystem read-only [ 181.150193][ T5610] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.328: couldn't read orphan inode 15 (err -117) [ 181.170593][ T5596] EXT4-fs (loop0): 1 truncate cleaned up [ 181.183346][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 181.260257][ T5610] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 181.359394][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.368237][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.376600][ T5570] device bridge_slave_0 entered promiscuous mode [ 181.395327][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.411655][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.439681][ T5570] device bridge_slave_1 entered promiscuous mode [ 182.019015][ T4227] Bluetooth: hci2: command 0x0409 tx timeout [ 182.320029][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.406166][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.521556][ T5626] loop1: detected capacity change from 0 to 512 [ 182.624473][ T5626] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 182.734947][ T5570] team0: Port device team_slave_0 added [ 182.805034][ T5570] team0: Port device team_slave_1 added [ 183.010481][ T5637] device syzkaller0 entered promiscuous mode [ 183.056228][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.111873][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.181350][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.196457][ T5639] tipc: Started in network mode [ 183.204814][ T5639] tipc: Node identity 229922babec7, cluster identity 4711 [ 183.213152][ T5639] tipc: Enabled bearer , priority 0 [ 183.221326][ T5641] 9pnet_virtio: no channels available for device syz [ 183.229924][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.240588][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.395842][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.439646][ T5636] tipc: Resetting bearer [ 183.481111][ T5651] loop1: detected capacity change from 0 to 2048 [ 183.549813][ T5651] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 183.614607][ T5651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.730044][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 183.730060][ T26] audit: type=1800 audit(1787772842.015:32): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.337" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 184.033825][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 184.121256][ T5636] tipc: Disabling bearer [ 184.390515][ T5570] device hsr_slave_0 entered promiscuous mode [ 184.482212][ T5570] device hsr_slave_1 entered promiscuous mode [ 184.508385][ T5570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.528459][ T5570] Cannot create hsr debugfs directory [ 185.032257][ T5687] loop0: detected capacity change from 0 to 512 [ 185.163583][ T5687] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 186.274628][ T5570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.344921][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 186.403288][ T5570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.639845][ T5570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.796670][ T5570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.579176][ T4241] device hsr_slave_0 left promiscuous mode [ 187.839683][ T4241] device hsr_slave_1 left promiscuous mode [ 187.903457][ T5747] loop4: detected capacity change from 0 to 512 [ 187.904048][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.970007][ T5747] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 188.089805][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.162929][ T4241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.207577][ T4241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.252418][ T4241] device bridge_slave_1 left promiscuous mode [ 188.278797][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.354262][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 188.387318][ T4241] device bridge_slave_0 left promiscuous mode [ 188.412760][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.609269][ T4241] device veth1_macvtap left promiscuous mode [ 188.630264][ T4241] device veth0_macvtap left promiscuous mode [ 188.684787][ T4241] device veth1_vlan left promiscuous mode [ 188.690933][ T4241] device veth0_vlan left promiscuous mode [ 189.314025][ T4589] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.705137][ T4241] team0 (unregistering): Port device team_slave_1 removed [ 189.748215][ T4241] team0 (unregistering): Port device team_slave_0 removed [ 189.755977][ T4589] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 135 [ 189.794610][ T4241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.835422][ T4241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.954012][ T4589] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 189.963120][ T4589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.003996][ T4589] usb 3-1: Product: syz [ 190.008227][ T4589] usb 3-1: Manufacturer: syz [ 190.012854][ T4589] usb 3-1: SerialNumber: syz [ 190.060388][ T4241] bond0 (unregistering): Released all slaves [ 190.074562][ T5761] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.224164][ T5570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.274479][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.284810][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.322280][ T5570] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.331050][ T4589] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 190.369044][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.414565][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.456537][ T5768] loop0: detected capacity change from 0 to 40427 [ 190.473348][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.480548][ T4889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.579256][ T5570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.606513][ T5768] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 190.824620][ T5768] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 190.835045][ T4185] usb 3-1: USB disconnect, device number 7 [ 190.887231][ T5570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.899610][ T5768] F2FS-fs (loop0): invalid crc value [ 190.904531][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.914631][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.923584][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.937567][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.944820][ T4889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.977726][ T4185] usblp0: removed [ 190.983194][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.008470][ T5768] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 191.021280][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.056584][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.094292][ T3157] Bluetooth: hci3: command 0x0406 tx timeout [ 191.112772][ T3157] Bluetooth: hci1: command 0x0406 tx timeout [ 191.132140][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.153228][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.207689][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.220097][ T5768] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 191.238256][ T5768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 191.247994][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.294593][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.335394][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.344369][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.390767][ T5768] attempt to access beyond end of device [ 191.390767][ T5768] loop0: rw=10241, want=53256, limit=40427 [ 191.442135][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.460908][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.542028][ T4184] attempt to access beyond end of device [ 191.542028][ T4184] loop0: rw=2049, want=45104, limit=40427 [ 191.925932][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.933465][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.027712][ T5570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.760239][ T5833] loop4: detected capacity change from 0 to 512 [ 192.862860][ T5840] loop1: detected capacity change from 0 to 512 [ 192.892636][ T5833] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 192.978269][ T5840] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 192.990557][ T5833] EXT4-fs (loop4): Remounting filesystem read-only [ 193.024575][ T5833] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.373: invalid indirect mapped block 4278190080 (level 0) [ 193.044247][ T5833] EXT4-fs (loop4): Remounting filesystem read-only [ 193.087615][ T5833] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.373: invalid indirect mapped block 1 (level 1) [ 193.217754][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 193.289898][ T5833] EXT4-fs (loop4): Remounting filesystem read-only [ 193.464443][ T5833] EXT4-fs (loop4): 1 truncate cleaned up [ 193.798627][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 194.119769][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.126149][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.250419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.264950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.329447][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.358681][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.368952][ T5866] loop0: detected capacity change from 0 to 512 [ 194.395303][ T5859] loop2: detected capacity change from 0 to 4096 [ 194.428350][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.656142][ T5859] EXT4-fs (loop2): Test dummy encryption mode enabled [ 194.664704][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.735433][ T5866] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.381: inode has both inline data and extents flags [ 194.847927][ T5570] device veth0_vlan entered promiscuous mode [ 194.922198][ T5859] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 195.037616][ T5866] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.381: couldn't read orphan inode 15 (err -117) [ 195.228050][ T5570] device veth1_vlan entered promiscuous mode [ 195.263082][ T5866] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 195.277705][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.297575][ T5859] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 195.319331][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.451608][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.514345][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.538246][ T5859] EXT4-fs (loop2): Test dummy encryption mode enabled [ 195.562892][ T5570] device veth0_macvtap entered promiscuous mode [ 195.611225][ T5859] EXT4-fs (loop2): re-mounted. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,. Quota mode: writeback. [ 195.617985][ T5570] device veth1_macvtap entered promiscuous mode [ 195.811645][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.083435][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.294621][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.365518][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.541184][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.568656][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.668653][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.693711][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.742249][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.865382][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.938055][ T5880] loop1: detected capacity change from 0 to 32768 [ 197.049684][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.121710][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.145658][ T5880] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 197.238080][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.256140][ T5859] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 197.272715][ T5859] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 197.281463][ T5859] System zones: 0-5 [ 197.286880][ T5859] EXT4-fs (loop2): re-mounted. Opts: journal_ioprio=0x0000000000000001,delalloc,init_itable,grpjquota=,data=writeback,noblock_validity,minixdf,block_validity,acl,max_batch_time=0x0000000000000006,. Quota mode: writeback. [ 197.328384][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.362792][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.380191][ T5570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.398924][ T5570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.447003][ T5570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.458231][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.467362][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.477483][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.513245][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.561723][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.605860][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.634270][ T5913] loop2: detected capacity change from 0 to 512 [ 197.646379][ T4193] ocfs2: Unmounting device (7,1) on (node local) [ 197.689915][ T5570] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.716268][ T5570] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.726271][ T5570] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.735776][ T5570] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.775302][ T5913] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 197.792795][ T5913] EXT4-fs (loop2): Remounting filesystem read-only [ 197.799595][ T5913] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.388: invalid indirect mapped block 4278190080 (level 0) [ 197.815744][ T5913] EXT4-fs (loop2): Remounting filesystem read-only [ 197.822749][ T5913] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.388: invalid indirect mapped block 1 (level 1) [ 197.855406][ T5913] EXT4-fs (loop2): Remounting filesystem read-only [ 197.862445][ T5913] EXT4-fs (loop2): 1 truncate cleaned up [ 197.868208][ T5913] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 198.053294][ T26] audit: type=1800 audit(1787772856.335:33): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.391" name="max_speed" dev="configfs" ino=40039 res=0 errno=0 [ 198.144952][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.212034][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.295376][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.365302][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.439677][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.514634][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.363474][ T5931] loop1: detected capacity change from 0 to 512 [ 199.382743][ T7] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 199.425633][ T7] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.461214][ T5931] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 201.172044][ T5926] loop2: detected capacity change from 0 to 32768 [ 202.280027][ T5994] loop5: detected capacity change from 0 to 512 [ 202.381964][ T5994] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.405: inode has both inline data and extents flags [ 202.446424][ T5994] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.405: couldn't read orphan inode 15 (err -117) [ 202.529693][ T6004] loop0: detected capacity change from 0 to 512 [ 202.544793][ T5994] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 202.591456][ T6004] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 205.156674][ T4589] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 205.234468][ T4589] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.407285][ T6044] loop0: detected capacity change from 0 to 32768 [ 206.455576][ T6044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.414 (6044) [ 206.632134][ T6071] loop5: detected capacity change from 0 to 512 [ 206.742628][ T6071] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 206.796611][ T6044] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 206.823705][ T6044] BTRFS info (device loop0): setting nodatasum [ 206.830261][ T6044] BTRFS info (device loop0): force zlib compression, level 3 [ 206.859317][ T6044] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 206.909383][ T6044] BTRFS info (device loop0): use lzo compression, level 0 [ 206.949865][ T6044] BTRFS info (device loop0): turning on flush-on-commit [ 206.970120][ T6044] BTRFS info (device loop0): enabling auto defrag [ 207.014444][ T6044] BTRFS info (device loop0): max_inline at 4096 [ 207.032138][ T6044] BTRFS info (device loop0): using free space tree [ 207.062798][ T6044] BTRFS info (device loop0): has skinny extents [ 207.178244][ T6066] loop1: detected capacity change from 0 to 32768 [ 207.319021][ T6066] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.417 (6066) [ 207.567157][ T6044] BTRFS error (device loop0): open_ctree failed: -12 [ 207.835926][ T6066] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 207.883525][ T6066] BTRFS info (device loop1): using free space tree [ 207.933771][ T6066] BTRFS info (device loop1): has skinny extents [ 208.103450][ T6066] BTRFS info (device loop1): enabling ssd optimizations [ 208.816277][ T6150] loop2: detected capacity change from 0 to 512 [ 209.047767][ T6150] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.429: inode has both inline data and extents flags [ 209.120884][ T6150] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.429: couldn't read orphan inode 15 (err -117) [ 209.191639][ T6150] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 209.751435][ T6166] loop0: detected capacity change from 0 to 512 [ 209.836658][ T6166] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 210.132629][ T4264] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 210.152651][ T4264] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.808536][ T6196] loop4: detected capacity change from 0 to 2048 [ 213.659571][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 214.998124][ T6245] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 215.005158][ T6245] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 215.051238][ T6245] vhci_hcd vhci_hcd.0: Device attached [ 215.243908][ T4285] vhci_hcd: vhci_device speed not set [ 215.263907][ T4403] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.323719][ T4285] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 215.693727][ T4403] usb 3-1: Using ep0 maxpacket: 16 [ 215.844510][ T4403] usb 3-1: config 0 has no interfaces? [ 216.054921][ T4403] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 216.183525][ T4403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.443257][ T4403] usb 3-1: Product: syz [ 216.463509][ T4403] usb 3-1: Manufacturer: syz [ 216.502908][ T4403] usb 3-1: SerialNumber: syz [ 216.543120][ T4403] usb 3-1: config 0 descriptor?? [ 216.874721][ T6246] usb 37-1: recv xbuf, 0 [ 216.880704][ T4403] usb 3-1: USB disconnect, device number 8 [ 216.924271][ T4889] vhci_hcd: stop threads [ 216.972554][ T4889] vhci_hcd: release socket [ 217.019126][ T4889] vhci_hcd: disconnect device [ 217.033512][ T6282] loop4: detected capacity change from 0 to 512 [ 217.873125][ T6282] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 217.964357][ T4285] vhci_hcd: vhci_device speed not set [ 218.127139][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.457'. [ 220.806967][ T6316] loop2: detected capacity change from 0 to 32768 [ 221.448414][ T6316] XFS (loop2): Mounting V5 Filesystem [ 221.703256][ T6358] loop0: detected capacity change from 0 to 512 [ 221.766120][ T6316] XFS (loop2): Ending clean mount [ 221.797346][ T6358] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 221.842064][ T6316] XFS (loop2): User initiated shutdown received. [ 221.850952][ T6316] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 221.864834][ T6316] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 221.914373][ T4188] XFS (loop2): Unmounting Filesystem [ 222.590099][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 226.021587][ T6421] loop2: detected capacity change from 0 to 512 [ 226.139379][ T6421] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 226.527778][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 229.603866][ T6485] loop4: detected capacity change from 0 to 512 [ 229.868677][ T6464] loop1: detected capacity change from 0 to 32768 [ 229.883094][ T6485] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 230.281546][ T6464] XFS (loop1): Mounting V5 Filesystem [ 230.877394][ T6464] XFS (loop1): Ending clean mount [ 231.399224][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 232.144631][ T4193] XFS (loop1): Unmounting Filesystem [ 234.335001][ T6555] loop5: detected capacity change from 0 to 512 [ 234.873720][ T6555] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 239.813707][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 239.916872][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 240.308707][ T6625] loop2: detected capacity change from 0 to 512 [ 240.362430][ T6625] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 240.560011][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 240.570659][ T6636] loop5: detected capacity change from 0 to 512 [ 240.682468][ T6636] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.526: inode has both inline data and extents flags [ 240.829435][ T6636] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.526: couldn't read orphan inode 15 (err -117) [ 240.900280][ T6636] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 241.008948][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 241.196550][ T6645] device batadv0 entered promiscuous mode [ 241.291583][ T6645] device macsec1 entered promiscuous mode [ 241.422832][ T6645] device batadv0 left promiscuous mode [ 243.589489][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 245.546421][ T6698] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.566905][ T6697] loop5: detected capacity change from 0 to 512 [ 245.600606][ T6697] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 246.960939][ T6717] loop1: detected capacity change from 0 to 512 [ 247.037897][ T6717] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.544: inode has both inline data and extents flags [ 247.167423][ T6717] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.544: couldn't read orphan inode 15 (err -117) [ 247.227270][ T6717] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 248.450502][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 248.484299][ T6732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.546'. [ 248.519253][ T6736] 9pnet: Insufficient options for proto=fd [ 248.614896][ T6738] loop0: detected capacity change from 0 to 512 [ 248.677876][ T6738] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 250.582028][ T6778] loop4: detected capacity change from 0 to 512 [ 250.600260][ T6777] loop0: detected capacity change from 0 to 512 [ 250.640275][ T6777] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 250.691157][ T6778] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.562: inode has both inline data and extents flags [ 250.775617][ T6778] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.562: couldn't read orphan inode 15 (err -117) [ 250.804857][ T6778] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 253.253262][ T6820] loop0: detected capacity change from 0 to 512 [ 254.060429][ T6820] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 254.423770][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'. [ 254.609371][ T4197] Bluetooth: Wrong link type (-22) [ 254.979751][ T6856] loop4: detected capacity change from 0 to 512 [ 255.052110][ T6856] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 255.552242][ T6871] loop5: detected capacity change from 0 to 512 [ 255.561160][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567898][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.704018][ T6871] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.597: inode has both inline data and extents flags [ 255.723954][ T6871] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.597: couldn't read orphan inode 15 (err -117) [ 255.807565][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 255.822526][ T6871] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 256.678308][ T6890] loop2: detected capacity change from 0 to 512 [ 256.732930][ T6890] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 260.100573][ T6938] loop4: detected capacity change from 0 to 512 [ 260.232327][ T6938] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 260.775423][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.626'. [ 261.234499][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.629'. [ 261.763848][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 261.833003][ T6985] loop5: detected capacity change from 0 to 512 [ 261.893927][ T6985] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 262.133873][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 262.284087][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.317755][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.346378][ T7000] tmpfs: Unknown parameter 'grpquota' [ 262.372233][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.393331][ T7000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.639'. [ 262.402922][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.455550][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.464575][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.534796][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.571773][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.739256][ T21] usb 5-1: SerialNumber: syz [ 263.102355][ T21] hub 5-1:1.0: bad descriptor, ignoring hub [ 263.227712][ T7003] netlink: 44 bytes leftover after parsing attributes in process `syz.1.639'. [ 263.295584][ T21] hub: probe of 5-1:1.0 failed with error -5 [ 263.360930][ T21] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 263.466041][ T21] usb 5-1: USB disconnect, device number 8 [ 264.721251][ T7025] loop1: detected capacity change from 0 to 512 [ 264.771060][ T7025] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 266.630466][ T7040] jffs2: notice: (7040) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 267.203863][ T4194] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 267.599857][ T4194] usb 6-1: Using ep0 maxpacket: 32 [ 268.853790][ T4194] usb 6-1: unable to get BOS descriptor or descriptor too short [ 268.924084][ T4194] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 268.937634][ T4194] usb 6-1: can't read configurations, error -71 [ 269.110663][ T4589] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 269.181937][ T7070] loop0: detected capacity change from 0 to 512 [ 269.427604][ T7070] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 269.923822][ T4589] usb 5-1: Using ep0 maxpacket: 16 [ 270.038502][ T7077] vivid-000: kernel_thread() failed [ 270.283957][ T4589] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.333616][ T4589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.741304][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 271.763623][ T4589] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.793598][ T4589] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.853829][ T4589] usb 5-1: string descriptor 0 read error: -71 [ 271.860372][ T4589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.883732][ T4589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.933949][ T4589] usb 5-1: can't set config #1, error -71 [ 271.954124][ T4589] usb 5-1: USB disconnect, device number 9 [ 272.147865][ T26] audit: type=1326 audit(1787772929.432:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.0.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81a32ed0d9 code=0x0 [ 272.527969][ T7113] loop2: detected capacity change from 0 to 512 [ 272.799621][ T7113] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 275.512901][ T7167] loop0: detected capacity change from 0 to 512 [ 275.701669][ T7167] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.689: inode has both inline data and extents flags [ 275.742843][ T7167] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.689: couldn't read orphan inode 15 (err -117) [ 275.870843][ T7167] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 275.937540][ T7186] loop5: detected capacity change from 0 to 512 [ 276.194413][ T7186] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 277.924582][ T4589] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 278.233856][ T4589] usb 3-1: Using ep0 maxpacket: 8 [ 278.364030][ T4589] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 278.421341][ T4589] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.524561][ T4589] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.570688][ T4589] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.615913][ T4589] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.683792][ T4589] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.692899][ T4589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.995632][ T7224] tipc: Started in network mode [ 279.013474][ T7224] tipc: Node identity , cluster identity 4711 [ 279.064960][ T7224] tipc: Failed to obtain node identity [ 279.101407][ T7224] tipc: Enabling of bearer rejected, failed to enable media [ 279.240913][ T4197] Bluetooth: hci2: link tx timeout [ 279.246756][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.256904][ T4197] Bluetooth: hci2: link tx timeout [ 279.262122][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.270238][ T4197] Bluetooth: hci2: link tx timeout [ 279.275541][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.288202][ T4197] Bluetooth: hci2: link tx timeout [ 279.293489][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.609996][ T4197] Bluetooth: hci2: link tx timeout [ 279.615288][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.643576][ T4197] Bluetooth: hci2: link tx timeout [ 279.648732][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.659105][ T4197] Bluetooth: hci2: link tx timeout [ 279.664330][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.684868][ T4197] Bluetooth: hci2: link tx timeout [ 279.690024][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.698832][ T4197] Bluetooth: hci2: link tx timeout [ 279.704068][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.713358][ T4197] Bluetooth: hci2: link tx timeout [ 279.714732][ T7231] usbtmc 3-1:16.0: simple control status returned b3 [ 279.719375][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.737706][ T4197] Bluetooth: hci2: link tx timeout [ 279.743082][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.758164][ T4197] Bluetooth: hci2: link tx timeout [ 279.763373][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.793929][ T4197] Bluetooth: hci2: link tx timeout [ 279.799166][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.815383][ T4197] Bluetooth: hci2: link tx timeout [ 279.820566][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.828665][ T4197] Bluetooth: hci2: link tx timeout [ 279.833834][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.841892][ T4197] Bluetooth: hci2: link tx timeout [ 279.847217][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.856233][ T4197] Bluetooth: hci2: link tx timeout [ 279.861367][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.869433][ T4197] Bluetooth: hci2: link tx timeout [ 279.874658][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.884852][ T4197] Bluetooth: hci2: link tx timeout [ 279.889979][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.898540][ T4197] Bluetooth: hci2: link tx timeout [ 279.903721][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.911773][ T4197] Bluetooth: hci2: link tx timeout [ 279.917156][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.925198][ T4197] Bluetooth: hci2: link tx timeout [ 279.930321][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.938415][ T4197] Bluetooth: hci2: link tx timeout [ 279.943537][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.951818][ T4197] Bluetooth: hci2: link tx timeout [ 279.957001][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.966077][ T4197] Bluetooth: hci2: link tx timeout [ 279.971213][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.979344][ T4197] Bluetooth: hci2: link tx timeout [ 279.984629][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.993687][ T4197] Bluetooth: hci2: link tx timeout [ 279.998837][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.007848][ T4197] Bluetooth: hci2: link tx timeout [ 280.013063][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.023623][ T4197] Bluetooth: hci2: link tx timeout [ 280.028776][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.036994][ T4197] Bluetooth: hci2: link tx timeout [ 280.042123][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.060343][ T4197] Bluetooth: hci2: link tx timeout [ 280.065549][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.073999][ T4197] Bluetooth: hci2: link tx timeout [ 280.079122][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.088104][ T4197] Bluetooth: hci2: link tx timeout [ 280.093244][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.102298][ T4197] Bluetooth: hci2: link tx timeout [ 280.107484][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.116492][ T4197] Bluetooth: hci2: link tx timeout [ 280.121632][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.130231][ T4197] Bluetooth: hci2: link tx timeout [ 280.135410][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.169820][ T4589] usb 3-1: USB disconnect, device number 9 [ 280.213977][ T4197] Bluetooth: hci2: link tx timeout [ 280.219132][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.247731][ T4197] Bluetooth: hci2: link tx timeout [ 280.254514][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.262507][ T4197] Bluetooth: hci2: link tx timeout [ 280.268061][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.276675][ T4197] Bluetooth: hci2: link tx timeout [ 280.281876][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.290067][ T4197] Bluetooth: hci2: link tx timeout [ 280.295541][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.303461][ T4197] Bluetooth: hci2: link tx timeout [ 280.309969][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.331026][ T4197] Bluetooth: hci2: link tx timeout [ 280.336593][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.353661][ T4197] Bluetooth: hci2: link tx timeout [ 280.359191][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.367284][ T4197] Bluetooth: hci2: link tx timeout [ 280.372456][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.387086][ T4197] Bluetooth: hci2: link tx timeout [ 280.392233][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.419886][ T4197] Bluetooth: hci2: link tx timeout [ 280.425214][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.432991][ T4197] Bluetooth: hci2: link tx timeout [ 280.438258][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.450537][ T4197] Bluetooth: hci2: link tx timeout [ 280.455854][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.471054][ T4197] Bluetooth: hci2: link tx timeout [ 280.476295][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.484870][ T4197] Bluetooth: hci2: link tx timeout [ 280.489999][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.508128][ T4197] Bluetooth: hci2: link tx timeout [ 280.513265][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.537115][ T4197] Bluetooth: hci2: link tx timeout [ 280.542273][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.564880][ T4197] Bluetooth: hci2: link tx timeout [ 280.570127][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.594471][ T4197] Bluetooth: hci2: link tx timeout [ 280.599776][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.607922][ T4197] Bluetooth: hci2: link tx timeout [ 280.613050][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.624289][ T4197] Bluetooth: hci2: link tx timeout [ 280.629581][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.638202][ T4197] Bluetooth: hci2: link tx timeout [ 280.643348][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.656380][ T4197] Bluetooth: hci2: link tx timeout [ 280.661512][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.669696][ T4197] Bluetooth: hci2: link tx timeout [ 280.674960][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.705837][ T4197] Bluetooth: hci2: link tx timeout [ 280.711146][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.721605][ T4197] Bluetooth: hci2: link tx timeout [ 280.726755][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.741850][ T4197] Bluetooth: hci2: link tx timeout [ 280.747028][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.758218][ T4197] Bluetooth: hci2: link tx timeout [ 280.763367][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.784333][ T4197] Bluetooth: hci2: link tx timeout [ 280.789745][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.823812][ T4197] Bluetooth: hci2: link tx timeout [ 280.828992][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.843766][ T4197] Bluetooth: hci2: link tx timeout [ 280.848917][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.889447][ T4197] Bluetooth: hci2: link tx timeout [ 280.894655][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.902515][ T4197] Bluetooth: hci2: link tx timeout [ 280.907723][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.915715][ T4197] Bluetooth: hci2: link tx timeout [ 280.920844][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.931122][ T4197] Bluetooth: hci2: link tx timeout [ 280.936375][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.944305][ T4197] Bluetooth: hci2: link tx timeout [ 280.949443][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.984688][ T4197] Bluetooth: hci2: link tx timeout [ 280.989848][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.999006][ T4197] Bluetooth: hci2: link tx timeout [ 281.004231][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.012039][ T4197] Bluetooth: hci2: link tx timeout [ 281.017251][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.025201][ T4197] Bluetooth: hci2: link tx timeout [ 281.030338][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.043635][ T4197] Bluetooth: hci2: link tx timeout [ 281.048885][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.057153][ T4197] Bluetooth: hci2: link tx timeout [ 281.062285][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.098635][ T4197] Bluetooth: hci2: link tx timeout [ 281.103936][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.137492][ T4197] Bluetooth: hci2: link tx timeout [ 281.142662][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.152430][ T4197] Bluetooth: hci2: link tx timeout [ 281.157662][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.165551][ T4197] Bluetooth: hci2: link tx timeout [ 281.170686][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.179102][ T4197] Bluetooth: hci2: link tx timeout [ 281.185085][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.195727][ T4197] Bluetooth: hci2: link tx timeout [ 281.200876][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.208967][ T4197] Bluetooth: hci2: link tx timeout [ 281.214191][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.233004][ T4197] Bluetooth: hci2: link tx timeout [ 281.238286][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.246408][ T4197] Bluetooth: hci2: link tx timeout [ 281.251538][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.261665][ T4197] Bluetooth: hci2: link tx timeout [ 281.266866][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.274750][ T4197] Bluetooth: hci2: link tx timeout [ 281.280105][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.288169][ T4197] Bluetooth: hci2: link tx timeout [ 281.293298][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.301423][ T4197] Bluetooth: hci2: link tx timeout [ 281.306590][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.314389][ T4589] Bluetooth: hci2: command 0x0406 tx timeout [ 281.320551][ T4197] Bluetooth: hci2: link tx timeout [ 281.325827][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.334711][ T4197] Bluetooth: hci2: link tx timeout [ 281.339850][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.380816][ T4197] Bluetooth: hci2: link tx timeout [ 281.386216][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.403890][ T4197] Bluetooth: hci2: link tx timeout [ 281.409092][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.417320][ T4197] Bluetooth: hci2: link tx timeout [ 281.422465][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.440441][ T4197] Bluetooth: hci2: link tx timeout [ 281.445842][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.457922][ T4197] Bluetooth: hci2: link tx timeout [ 281.463076][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.471224][ T4197] Bluetooth: hci2: link tx timeout [ 281.476445][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.486364][ T4197] Bluetooth: hci2: link tx timeout [ 281.491506][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.499613][ T4197] Bluetooth: hci2: link tx timeout [ 281.504779][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.523732][ T4197] Bluetooth: hci2: link tx timeout [ 281.528887][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.536979][ T4197] Bluetooth: hci2: link tx timeout [ 281.542118][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.550160][ T4197] Bluetooth: hci2: link tx timeout [ 281.555421][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.563247][ T4197] Bluetooth: hci2: link tx timeout [ 281.568486][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.582858][ T4197] Bluetooth: hci2: link tx timeout [ 281.588526][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.599073][ T4197] Bluetooth: hci2: link tx timeout [ 281.604288][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.612831][ T4197] Bluetooth: hci2: link tx timeout [ 281.618213][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.626346][ T4197] Bluetooth: hci2: link tx timeout [ 281.631480][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.639843][ T4197] Bluetooth: hci2: link tx timeout [ 281.645079][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.688294][ T4197] Bluetooth: hci2: link tx timeout [ 281.693462][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.701677][ T4197] Bluetooth: hci2: link tx timeout [ 281.706911][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.715046][ T4197] Bluetooth: hci2: link tx timeout [ 281.720177][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.728254][ T4197] Bluetooth: hci2: link tx timeout [ 281.733384][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.741502][ T4197] Bluetooth: hci2: link tx timeout [ 281.746668][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.754764][ T4197] Bluetooth: hci2: link tx timeout [ 281.759896][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.768392][ T4197] Bluetooth: hci2: link tx timeout [ 281.773522][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.781670][ T4197] Bluetooth: hci2: link tx timeout [ 281.786841][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.795221][ T4197] Bluetooth: hci2: link tx timeout [ 281.801019][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.843676][ T4197] Bluetooth: hci2: link tx timeout [ 281.848873][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.863740][ T4197] Bluetooth: hci2: link tx timeout [ 281.868892][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.891786][ T4197] Bluetooth: hci2: link tx timeout [ 281.897332][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.906349][ T4197] Bluetooth: hci2: link tx timeout [ 281.911490][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.920744][ T4197] Bluetooth: hci2: link tx timeout [ 281.925925][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.044301][ T4197] Bluetooth: hci2: link tx timeout [ 282.049456][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.057548][ T4197] Bluetooth: hci2: link tx timeout [ 282.062810][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.071556][ T4197] Bluetooth: hci2: link tx timeout [ 282.076855][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.098064][ T4197] Bluetooth: hci2: link tx timeout [ 282.103240][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.111848][ T4197] Bluetooth: hci2: link tx timeout [ 282.117033][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.133777][ T4197] Bluetooth: hci2: link tx timeout [ 282.138925][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.163004][ T7244] loop5: detected capacity change from 0 to 512 [ 282.226930][ T4197] Bluetooth: hci2: link tx timeout [ 282.232091][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.243636][ T4197] Bluetooth: hci2: link tx timeout [ 282.248827][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.258228][ T4197] Bluetooth: hci2: link tx timeout [ 282.263355][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.279518][ T4197] Bluetooth: hci2: link tx timeout [ 282.284836][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.304991][ T4197] Bluetooth: hci2: link tx timeout [ 282.310140][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.318206][ T4197] Bluetooth: hci2: link tx timeout [ 282.323336][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.331720][ T4197] Bluetooth: hci2: link tx timeout [ 282.336926][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.345282][ T4197] Bluetooth: hci2: link tx timeout [ 282.350406][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.365079][ T4197] Bluetooth: hci2: link tx timeout [ 282.370248][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.379636][ T4197] Bluetooth: hci2: link tx timeout [ 282.384810][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.402675][ T4197] Bluetooth: hci2: link tx timeout [ 282.408048][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.460263][ T7249] loop2: detected capacity change from 0 to 512 [ 282.499515][ T7244] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 282.649047][ T7249] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.707: inode has both inline data and extents flags [ 282.717021][ T7249] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.707: couldn't read orphan inode 15 (err -117) [ 282.752081][ T7249] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 284.845178][ T7296] loop0: detected capacity change from 0 to 512 [ 284.910931][ T7296] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 285.544743][ T7190] Set syz1 is full, maxelem 65536 reached [ 286.909434][ T7324] loop4: detected capacity change from 0 to 512 [ 286.969060][ T7324] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 287.372190][ T7343] loop2: detected capacity change from 0 to 512 [ 287.465624][ T7347] tmpfs: Unknown parameter 'usrquota' [ 287.592928][ T7343] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.741: inode has both inline data and extents flags [ 287.706512][ T7343] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.741: couldn't read orphan inode 15 (err -117) [ 287.870666][ T7343] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 290.841339][ T7410] loop1: detected capacity change from 0 to 512 [ 290.910076][ T7410] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 291.034825][ T7422] loop4: detected capacity change from 0 to 512 [ 291.120962][ T7422] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.766: inode has both inline data and extents flags [ 291.208729][ T7422] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.766: couldn't read orphan inode 15 (err -117) [ 291.234141][ T7422] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 291.278722][ T7426] serio: Serial port ptm0 [ 291.303736][ T4589] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 291.472395][ T7426] serio: Serial port ptm0 [ 291.573643][ T4589] usb 3-1: Using ep0 maxpacket: 32 [ 291.733875][ T4589] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 291.744695][ T4589] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 291.773829][ T4589] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 291.797989][ T4589] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 291.820463][ T4589] usb 3-1: config 0 interface 0 has no altsetting 0 [ 292.013852][ T4589] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 292.028685][ T4589] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 292.046835][ T4589] usb 3-1: Product: syz [ 292.055908][ T4589] usb 3-1: Manufacturer: syz [ 292.063767][ T4589] usb 3-1: SerialNumber: syz [ 292.087308][ T4589] usb 3-1: config 0 descriptor?? [ 292.145484][ T4589] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 292.167319][ T4589] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 292.483319][ T1108] usb 3-1: USB disconnect, device number 10 [ 292.494033][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 292.521191][ T7421] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 292.558247][ T1108] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 292.579458][ T7436] ldusb: No device or device unplugged -19 [ 293.054473][ T7449] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.068831][ T7452] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 293.095008][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.149302][ T7452] CIFS mount error: No usable UNC path provided in device string! [ 293.149302][ T7452] [ 293.166693][ T7452] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 293.508993][ T7463] loop4: detected capacity change from 0 to 512 [ 293.592428][ T7463] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 293.870984][ T7484] device syzkaller0 entered promiscuous mode [ 294.483384][ T7500] fuse: root generation should be zero [ 298.066436][ T7515] loop0: detected capacity change from 0 to 512 [ 298.138076][ T7515] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 298.391872][ T7538] binder: 7537:7538 ioctl c0306201 200000000080 returned -14 [ 298.412617][ T7536] overlayfs: upper fs does not support file handles, falling back to index=off. [ 298.424586][ T7539] 9pnet_virtio: no channels available for device syz [ 298.444444][ T7538] binder: 7537:7538 ioctl c0306201 2000000003c0 returned -14 [ 300.284198][ T4194] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 300.584129][ T4194] usb 2-1: Using ep0 maxpacket: 8 [ 300.714185][ T4194] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.837310][ T4194] usb 2-1: config 0 has no interface number 0 [ 300.884528][ T4194] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 300.923886][ T4194] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.949175][ T4194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.967411][ T4194] usb 2-1: config 0 descriptor?? [ 301.032285][ T4194] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 301.082651][ T7591] loop5: detected capacity change from 0 to 512 [ 301.133788][ T4557] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 301.212985][ T7591] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.815: inode has both inline data and extents flags [ 301.257424][ T7596] netlink: 'syz.2.819': attribute type 10 has an invalid length. [ 301.331186][ T7591] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.815: couldn't read orphan inode 15 (err -117) [ 301.452774][ T7591] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 301.853820][ T4557] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 302.202316][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 302.233902][ T4557] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 302.243133][ T4557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.254204][ T4557] usb 5-1: Product: syz [ 302.258802][ T4557] usb 5-1: Manufacturer: syz [ 302.263530][ T4557] usb 5-1: SerialNumber: syz [ 302.276368][ T4557] usb 5-1: config 0 descriptor?? [ 302.293928][ T7581] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 302.305085][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 302.335830][ T4557] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 302.400736][ T4404] usb 2-1: USB disconnect, device number 10 [ 302.562991][ T4557] usb 5-1: USB disconnect, device number 10 [ 304.356057][ T4589] Bluetooth: hci4: command 0x0406 tx timeout [ 305.660427][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.829'. [ 307.013623][ T4557] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 307.173667][ T4551] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 307.269206][ T4557] usb 2-1: Using ep0 maxpacket: 32 [ 307.394909][ T4557] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 307.409728][ T4557] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 307.423631][ T4551] usb 6-1: Using ep0 maxpacket: 16 [ 307.453614][ T4557] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 307.473794][ T4557] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 307.493796][ T4557] usb 2-1: config 0 interface 0 has no altsetting 0 [ 307.544005][ T4551] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.556873][ T4551] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.568230][ T4551] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.578964][ T4551] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.666632][ T4557] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 307.675941][ T4551] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.695407][ T4551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.704491][ T4557] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 307.719852][ T4551] usb 6-1: SerialNumber: syz [ 307.724928][ T4557] usb 2-1: Product: syz [ 307.729188][ T4557] usb 2-1: Manufacturer: syz [ 307.736598][ T4557] usb 2-1: SerialNumber: syz [ 307.751201][ T7686] device syzkaller0 entered promiscuous mode [ 307.758181][ T4557] usb 2-1: config 0 descriptor?? [ 307.774795][ T4551] hub 6-1:1.0: bad descriptor, ignoring hub [ 307.781295][ T4551] hub: probe of 6-1:1.0 failed with error -5 [ 307.789600][ T7686] tipc: Started in network mode [ 307.805428][ T4557] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 307.810530][ T7686] tipc: Node identity 82a04955d93a, cluster identity 4711 [ 307.820940][ T4551] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 307.833304][ T4557] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 307.850396][ T7686] tipc: Enabled bearer , priority 0 [ 307.892968][ T7685] tipc: Resetting bearer [ 307.949662][ T7685] tipc: Disabling bearer [ 308.302731][ T4194] usb 6-1: USB disconnect, device number 4 [ 308.821713][ T3157] usb 2-1: USB disconnect, device number 11 [ 308.827759][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 308.846946][ T7667] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 308.867275][ T7692] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 308.898595][ T3157] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 308.905881][ T7696] loop5: detected capacity change from 0 to 512 [ 308.983075][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 309.016377][ T7696] EXT4-fs (loop5): bad s_min_extra_isize: 544 [ 310.303178][ T7723] capability: warning: `syz.2.855' uses deprecated v2 capabilities in a way that may be insecure [ 310.955817][ T4194] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 311.528050][ T7746] loop0: detected capacity change from 0 to 512 [ 311.564706][ T7746] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 311.643622][ T4194] usb 6-1: Using ep0 maxpacket: 16 [ 311.783965][ T4194] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.804948][ T4194] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.859318][ T4194] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.907555][ T4194] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.946874][ T7759] nvmet: adding nsid 1 to subsystem testsubsys [ 312.094021][ T4194] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.138612][ T4194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.180449][ T7773] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 312.182266][ T4194] usb 6-1: SerialNumber: syz [ 312.221547][ T7773] (syz.1.869,7773,0):ocfs2_get_sector:1774 ERROR: status = -5 [ 312.443936][ T7773] (syz.1.869,7773,1):ocfs2_sb_probe:750 ERROR: status = -5 [ 312.851056][ T4194] hub 6-1:1.0: bad descriptor, ignoring hub [ 312.908642][ T4194] hub: probe of 6-1:1.0 failed with error -5 [ 312.933841][ T7773] (syz.1.869,7773,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 313.125006][ T4194] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 313.145892][ T7773] (syz.1.869,7773,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 313.307604][ T4264] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 313.392696][ T7789] loop0: detected capacity change from 0 to 512 [ 313.447516][ T4194] usb 6-1: USB disconnect, device number 5 [ 313.479592][ T7789] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 313.553645][ T4264] usb 5-1: Using ep0 maxpacket: 16 [ 313.722814][ T4264] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 313.933757][ T4264] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 313.947171][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.956078][ T4264] usb 5-1: Product: syz [ 313.960318][ T4264] usb 5-1: Manufacturer: syz [ 313.965489][ T4264] usb 5-1: SerialNumber: syz [ 313.983347][ T4264] r8152-cfgselector 5-1: config 0 descriptor?? [ 315.373827][ T4264] r8152-cfgselector 5-1: Unknown version 0x0000 [ 315.394251][ T4264] r8152-cfgselector 5-1: Unknown version 0x0000 [ 315.401682][ T4264] r8152-cfgselector 5-1: bad CDC descriptors [ 315.485370][ T4264] r8152-cfgselector 5-1: Unknown version 0x0000 [ 315.514419][ T7838] loop2: detected capacity change from 0 to 512 [ 315.567049][ T4264] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 315.635582][ T7838] EXT4-fs (loop2): bad s_min_extra_isize: 544 [ 316.999780][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.006212][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.143418][ T7854] loop4: detected capacity change from 0 to 512 [ 317.230503][ T7854] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.891: inode has both inline data and extents flags [ 317.312601][ T7854] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.891: couldn't read orphan inode 15 (err -117) [ 317.380468][ T7854] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback. [ 319.690448][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.896'. [ 319.858002][ T7880] loop4: detected capacity change from 0 to 512 [ 319.888946][ T7886] netlink: 52 bytes leftover after parsing attributes in process `syz.0.900'. [ 319.909870][ T7886] ubi0: attaching mtd0 [ 319.922382][ T7886] ubi0: scanning is finished [ 319.931254][ T7886] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 320.011315][ T7880] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 320.099517][ T7886] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 321.103656][ T4285] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 322.973684][ T4285] usb 6-1: Using ep0 maxpacket: 16 [ 323.093767][ T4285] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.110478][ T4285] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.179801][ T4285] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.220259][ T4285] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 323.339694][ T7919] loop4: detected capacity change from 0 to 512 [ 323.393709][ T4285] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.423328][ T7919] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 323.431141][ T4285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 323.483789][ T4285] usb 6-1: can't set config #1, error -71 [ 323.503913][ T4285] usb 6-1: USB disconnect, device number 6 [ 325.271325][ T26] audit: type=1800 audit(1787772981.547:35): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.917" name="idProduct" dev="configfs" ino=49884 res=0 errno=0 [ 326.133227][ T7941] netlink: 'syz.0.920': attribute type 3 has an invalid length. [ 326.207234][ T7941] netlink: 'syz.0.920': attribute type 3 has an invalid length. [ 326.779016][ T7948] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.064153][ T7964] jffs2: notice: (7964) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 327.137342][ T7948] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.214429][ T7963] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 328.201150][ T7948] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.278038][ T7975] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 328.336426][ T7975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.429868][ T7976] bond1: (slave geneve2): making interface the new active one [ 328.461035][ T7976] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 328.492884][ T784] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 328.602530][ T7976] syz.1.931 (7976) used greatest stack depth: 17968 bytes left [ 328.620453][ T7948] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.929428][ T7948] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.966242][ T7948] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.007763][ T7948] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.029339][ T7948] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.131897][ T7984] mmap: syz.4.934 (7984) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 329.609409][ T8008] jffs2: notice: (8008) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 329.973447][ T4197] Bluetooth: hci4: hcon ffff888078da4000 sent 3 < count 1025 [ 331.251028][ T8039] loop0: detected capacity change from 0 to 256 [ 340.615036][ T4404] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 340.905384][ T4404] usb 6-1: Using ep0 maxpacket: 8 [ 341.085091][ T4404] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 341.092734][ T4404] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 341.153820][ T4404] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 341.226293][ T4404] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 341.243002][ T4704] blk_update_request: I/O error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 341.255654][ T4704] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 102439) [ 341.267997][ T4704] Buffer I/O error on device sda1, logical block 102400 [ 341.276957][ T4704] blk_update_request: I/O error, dev sda, sector 827662 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 341.289611][ T4704] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 103462) [ 341.302464][ T4704] Buffer I/O error on device sda1, logical block 103419 [ 341.309789][ T4704] Buffer I/O error on device sda1, logical block 103420 [ 341.317235][ T4704] Buffer I/O error on device sda1, logical block 103421 [ 341.324591][ T4704] Buffer I/O error on device sda1, logical block 103422 [ 341.332047][ T4704] Buffer I/O error on device sda1, logical block 103423 [ 341.340220][ T4704] blk_update_request: I/O error, dev sda, sector 831526 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 0 [ 341.351950][ T4704] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 103974) [ 341.363794][ T4704] Buffer I/O error on device sda1, logical block 103902 [ 341.371043][ T4704] Buffer I/O error on device sda1, logical block 103903 [ 341.378399][ T4704] Buffer I/O error on device sda1, logical block 103904 [ 341.385893][ T4704] Buffer I/O error on device sda1, logical block 103905 [ 341.431699][ T4404] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 341.446656][ T4404] usb 6-1: config 168 interface 0 has no altsetting 0 [ 341.575945][ T4404] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 341.623682][ T4404] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 341.673779][ T4404] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 341.734932][ T4404] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 341.811313][ T4404] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 341.903400][ T4404] usb 6-1: config 168 interface 0 has no altsetting 0 [ 341.956774][ T3519] blk_update_request: I/O error, dev sda, sector 1051998 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 0 [ 342.044798][ T3519] Aborting journal on device sda1-8. [ 342.045009][ T4404] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 342.045087][ T4404] usb 6-1: can't read configurations, error -71 [ 342.078194][ T263] blk_update_request: I/O error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 342.090781][ T263] blk_update_request: I/O error, dev sda, sector 1048886 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 342.102892][ T263] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 342.216035][ T3519] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 342.267764][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 342.349582][ T150] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 342.361444][ T150] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 342.372872][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 342.404031][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 342.413394][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 342.514814][ T4704] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm kworker/u4:14: Detected aborted journal [ 342.535010][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 342.621159][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 342.633307][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 342.644630][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 342.686196][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 342.693119][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 342.706818][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 342.748301][ T4704] EXT4-fs (sda1): I/O error while writing superblock [ 342.773665][ T4704] EXT4-fs (sda1): Remounting filesystem read-only [ 342.813699][ T4704] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775806 pages, ino 2028; err -30 [ 342.899665][ T4704] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2028 starting block 90151) [ 342.917506][ T8064] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.963: Detected aborted journal [ 343.002259][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 343.018837][ T8064] EXT4-fs (sda1): I/O error while writing superblock [ 343.034947][ T8064] EXT4-fs (sda1): Remounting filesystem read-only [ 343.050161][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 343.125095][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 343.146029][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 343.158462][ T8065] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.964: Detected aborted journal [ 343.243481][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 343.306945][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 343.360698][ T8064] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.963: Detected aborted journal [ 343.404920][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 343.435774][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 343.512606][ T8065] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.964: Detected aborted journal [ 343.598634][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 343.635726][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 346.899517][ T263] print_req_error: 62 callbacks suppressed [ 346.899542][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 346.918658][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 346.934472][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 346.946002][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 346.960766][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 346.972483][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 346.986883][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 347.001396][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 347.016018][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 347.028731][ T263] blk_update_request: I/O error, dev sda, sector 310 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 0 [ 347.705834][ T4171] EXT4-fs error: 29 callbacks suppressed [ 347.705858][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 347.884314][ T8070] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.965: Detected aborted journal [ 348.562305][ T150] buffer_io_error: 30 callbacks suppressed [ 348.562320][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 348.578644][ T8070] EXT4-fs: 69 callbacks suppressed [ 348.578661][ T8070] EXT4-fs (sda1): I/O error while writing superblock [ 349.060658][ T8070] EXT4-fs (sda1): Remounting filesystem read-only [ 349.074974][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 349.085059][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 349.091854][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 349.264903][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 349.345186][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 349.355486][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 349.362389][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 349.421327][ T8074] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.966: Detected aborted journal [ 349.435210][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 349.454790][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 349.464035][ T8074] EXT4-fs (sda1): I/O error while writing superblock [ 349.470927][ T8074] EXT4-fs (sda1): Remounting filesystem read-only [ 349.580731][ T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 349.592258][ T4171] EXT4-fs (sda1): I/O error while writing superblock [ 349.617991][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 349.655646][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 349.688629][ T8075] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.967: Detected aborted journal [ 349.763990][ T4171] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 349.773309][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 349.814633][ T8075] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 349.892994][ T8074] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.966: Detected aborted journal [ 349.934380][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 350.253055][ T8052] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 352.093833][ T4264] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 352.475803][ T4264] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 352.504013][ T4264] usb 2-1: config 0 has no interface number 0 [ 352.544297][ T4264] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 352.764652][ T4264] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 352.779073][ T8084] EXT4-fs error: 43 callbacks suppressed [ 352.779091][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 352.804250][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 352.863700][ T4264] usb 2-1: Product: syz [ 352.888399][ T4264] usb 2-1: SerialNumber: syz [ 352.923187][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 353.024203][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 353.041827][ T4264] usb 2-1: config 0 descriptor?? [ 353.145288][ T8089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.971: Detected aborted journal [ 353.175257][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 353.338934][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 353.464552][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 353.550430][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 353.644230][ T8084] EXT4-fs: 57 callbacks suppressed [ 353.644259][ T8084] EXT4-fs (sda1): Remounting filesystem read-only [ 353.689187][ T8089] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.971: Detected aborted journal [ 353.806791][ T8084] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.970: Detected aborted journal [ 353.904544][ T8084] EXT4-fs (sda1): Remounting filesystem read-only [ 353.911639][ T8084] EXT4-fs (sda1): Remounting filesystem read-only [ 353.953701][ T8089] EXT4-fs (sda1): Remounting filesystem read-only [ 353.997548][ T8084] EXT4-fs (sda1): Remounting filesystem read-only [ 354.074758][ T8084] EXT4-fs (sda1): Remounting filesystem read-only [ 354.091678][ T8089] EXT4-fs (sda1): Remounting filesystem read-only [ 354.184573][ T8089] EXT4-fs (sda1): Remounting filesystem read-only [ 354.381915][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 354.534116][ T4264] usb 2-1: can't set config #0, error -71 [ 354.566044][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 354.608048][ T4264] usb 2-1: USB disconnect, device number 12 [ 355.351298][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 355.808414][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 356.258218][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 356.701005][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 357.067747][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 357.272944][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 357.549858][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 358.381898][ T4171] EXT4-fs error: 28 callbacks suppressed [ 358.381927][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 358.742439][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 358.774113][ T4171] EXT4-fs: 20 callbacks suppressed [ 358.774138][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 358.885378][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 358.980354][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 359.019980][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 359.081934][ T8107] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1265: comm syz-executor: reading directory lblock 0 [ 359.087999][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 359.202600][ T8108] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.976: Detected aborted journal [ 359.218046][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 359.311062][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 359.344115][ T8108] EXT4-fs (sda1): Remounting filesystem read-only [ 359.351742][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 359.444649][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 359.479697][ T4171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 359.555650][ T8108] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.976: Detected aborted journal [ 359.575724][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 359.613441][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 359.635085][ T8108] EXT4-fs (sda1): Remounting filesystem read-only [ 359.684954][ T4171] EXT4-fs (sda1): Remounting filesystem read-only [ 467.623605][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 467.630726][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8118/1:b..l [ 467.639605][ C0] (detected by 0, t=10502 jiffies, g=33069, q=21) [ 467.646256][ C0] task:syz.0.979 state:R running task stack:25952 pid: 8118 ppid: 4184 flags:0x00004000 [ 467.658566][ C0] Call Trace: [ 467.661969][ C0] [ 467.665172][ C0] __schedule+0x11c3/0x4350 [ 467.669820][ C0] ? trace_buffer_unlock_commit_regs+0x124/0x5c0 [ 467.676686][ C0] ? perf_trace_lock_acquire+0x3f0/0x3f0 [ 467.682557][ C0] ? release_firmware_map_entry+0x190/0x190 [ 467.688762][ C0] ? preempt_schedule+0xbc/0xd0 [ 467.693862][ C0] preempt_schedule_common+0x82/0xd0 [ 467.699285][ C0] preempt_schedule+0xbc/0xd0 [ 467.704154][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 467.709927][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 467.715310][ C0] preempt_schedule_thunk+0x16/0x18 [ 467.720786][ C0] _raw_spin_unlock+0x36/0x40 [ 467.725585][ C0] filemap_map_pages+0x10a5/0x1450 [ 467.731154][ C0] ? filemap_read_page+0x4b0/0x4b0 [ 467.736355][ C0] ? count_memcg_event_mm+0x324/0x370 [ 467.742249][ C0] handle_mm_fault+0x25bb/0x4440 [ 467.747532][ C0] ? get_page+0xe0/0xe0 [ 467.752087][ C0] ? vmacache_find+0x238/0x590 [ 467.757037][ C0] ? find_vma+0xd2/0x230 [ 467.761639][ C0] do_user_addr_fault+0x494/0xc90 [ 467.767069][ C0] exc_page_fault+0x60/0x100 [ 467.771854][ C0] asm_exc_page_fault+0x22/0x30 [ 467.776883][ C0] RIP: 0033:0x7f81a31c1900 [ 467.781514][ C0] RSP: 002b:00007ffe701ee9c0 EFLAGS: 00010202 [ 467.787693][ C0] RAX: 000000110c2c0000 RBX: ffffffff819d4cd3 RCX: 0000000000000002 [ 467.795749][ C0] RDX: 0000000000000cd3 RSI: 0000000000003533 RDI: 0000000000000004 [ 467.803821][ C0] RBP: 0000000000000000 R08: 00007f81a355f000 R09: 00007f81a3561000 [ 467.811910][ C0] R10: 00000000819d4cd7 R11: 0000000000000000 R12: 00007f81a3575038 [ 467.820036][ C0] R13: 00000000000001e3 R14: ffffffff819d4998 R15: 00007f81a40a4720 [ 467.828205][ C0] ? trace_user_exit+0x8/0x190 [ 467.833063][ C0] ? context_tracking_user_exit+0x13/0x20 [ 467.839107][ C0] [ 467.842316][ C0] rcu: rcu_preempt kthread starved for 10516 jiffies! g33069 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 467.853648][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 467.863675][ C0] rcu: RCU grace-period kthread stack dump: [ 467.869646][ C0] task:rcu_preempt state:R running task stack:27824 pid: 15 ppid: 2 flags:0x00004000 [ 467.880662][ C0] Call Trace: [ 467.884089][ C0] [ 467.887223][ C0] __schedule+0x11c3/0x4350 [ 467.891834][ C0] ? ring_buffer_unlock_commit+0x472/0x5f0 [ 467.897760][ C0] ? trace_event_buffer_lock_reserve+0xed/0x6a0 [ 467.904282][ C0] ? trace_buffer_unlock_commit_regs+0x124/0x5c0 [ 467.911016][ C0] ? release_firmware_map_entry+0x190/0x190 [ 467.917107][ C0] ? perf_trace_lock_acquire+0x3f0/0x3f0 [ 467.923055][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 467.928488][ C0] preempt_schedule_irq+0xbb/0x160 [ 467.933749][ C0] ? __cond_resched+0xd0/0xd0 [ 467.938804][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 467.944758][ C0] irqentry_exit+0x63/0x70 [ 467.949341][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 467.954939][ C0] RIP: 0010:__timer_delete_sync+0x175/0x290 [ 467.960980][ C0] Code: 00 4d 85 f6 75 16 e8 7a d6 10 00 eb 15 e8 73 d6 10 00 e8 fe 1a 58 08 4d 85 f6 74 ea e8 64 d6 10 00 fb 65 44 8b 35 83 46 9a 7e <44> 89 f6 81 e6 00 00 0f 00 31 ff e8 ab d9 10 00 41 81 e6 00 00 0f [ 467.980942][ C0] RSP: 0018:ffffc90000d47ae0 EFLAGS: 00000293 [ 467.987155][ C0] RAX: ffffffff8168293c RBX: ffffc90000d47be0 RCX: ffff88813fe2bb80 [ 467.995211][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.003293][ C0] RBP: ffffc90000d47bb0 R08: ffffffff8d8b0d6f R09: 1ffffffff1b161ad [ 468.011401][ C0] R10: dffffc0000000000 R11: fffffbfff1b161ae R12: 1ffff920001a8f60 [ 468.019504][ C0] R13: dffffc0000000000 R14: 0000000080000000 R15: 0000000000000000 [ 468.027730][ C0] ? __timer_delete_sync+0x16c/0x290 [ 468.033320][ C0] ? timer_delete_sync+0x20/0x20 [ 468.038681][ C0] schedule_timeout+0x18e/0x2d0 [ 468.043655][ C0] ? console_conditional_schedule+0x40/0x40 [ 468.049661][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 468.055761][ C0] ? update_process_times+0x200/0x200 [ 468.061390][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 468.067191][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 468.072319][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 468.077707][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 468.083946][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 468.088852][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 468.093939][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 468.099223][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 468.104583][ C0] rcu_gp_kthread+0x9a/0x370 [ 468.109424][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 468.114715][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 468.120759][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 468.126094][ C0] kthread+0x42e/0x520 [ 468.130359][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 468.135577][ C0] ? kthread_blkcg+0xd0/0xd0 [ 468.140290][ C0] ret_from_fork+0x1f/0x30 [ 468.145410][ C0] [ 468.148501][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 468.154900][ C0] NMI backtrace for cpu 0 [ 468.159368][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 468.166526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.176722][ C0] Call Trace: [ 468.180162][ C0] [ 468.183111][ C0] dump_stack_lvl+0x188/0x250 [ 468.187949][ C0] ? show_regs_print_info+0x20/0x20 [ 468.193320][ C0] ? load_image+0x410/0x410 [ 468.198167][ C0] ? irq_work_queue+0xbf/0x140 [ 468.203125][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 468.208273][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 468.214574][ C0] ? _printk+0xda/0x130 [ 468.218949][ C0] ? cpu_online+0x1d/0x30 [ 468.223406][ C0] ? load_image+0x410/0x410 [ 468.228131][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 468.234435][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 468.240578][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 468.246918][ C0] print_other_cpu_stall+0x1110/0x1270 [ 468.252782][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 468.257831][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 468.263632][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 468.269061][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 468.274119][ C0] ? hrtimer_run_queues+0x162/0x400 [ 468.279485][ C0] ? account_process_tick+0x22a/0x3a0 [ 468.285118][ C0] update_process_times+0x193/0x200 [ 468.290464][ C0] tick_sched_timer+0x37d/0x560 [ 468.295462][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 468.301233][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 468.306599][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 468.312976][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 468.318321][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 468.324644][ C0] hrtimer_interrupt+0x397/0x8b0 [ 468.330168][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 468.336304][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 468.342095][ C0] [ 468.345167][ C0] [ 468.348299][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 468.354368][ C0] RIP: 0010:default_idle+0xb/0x10 [ 468.359490][ C0] Code: b7 48 89 df e8 16 90 f4 f7 eb ad e8 4f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 35 5c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 468.379276][ C0] RSP: 0018:ffffffff8c007dc8 EFLAGS: 000002c6 [ 468.385622][ C0] RAX: 00ec96e58de22a00 RBX: ffffffff8c0bc480 RCX: 00ec96e58de22a00 [ 468.393743][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a42c0 [ 468.401881][ C0] RBP: ffffffff8c007ef8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 468.409929][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: 1ffffffff1800fc4 [ 468.417989][ C0] R13: dffffc0000000000 R14: 1ffffffff1817890 R15: 0000000000000000 [ 468.426450][ C0] default_idle_call+0x81/0xc0 [ 468.431356][ C0] do_idle+0x251/0x650 [ 468.435614][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 468.440995][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 468.447470][ C0] ? schedule_idle+0x57/0x90 [ 468.452241][ C0] cpu_startup_entry+0x14/0x20 [ 468.457157][ C0] ? time_init+0x40/0x40 [ 468.461559][ C0] start_kernel+0x489/0x540 [ 468.466305][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 468.472576][ C0] [ 468.476483][ C0] vkms_vblank_simulate: vblank timer overrun