last executing test programs: 5m18.142246308s ago: executing program 0 (id=225): prlimit64(0x0, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m17.589954863s ago: executing program 0 (id=229): fsopen(0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x9800, 0xfffffffd, 0xfffffffc}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000080)=0x2) 5m17.270326529s ago: executing program 0 (id=230): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x19}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m14.995866503s ago: executing program 0 (id=236): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x37}, 0x24}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m14.745725624s ago: executing program 0 (id=238): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5m9.752733781s ago: executing program 0 (id=244): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fanotify_init(0x40, 0x80000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r3, &(0x7f0000001500)=""/4080, 0xff0) 2m50.66753575s ago: executing program 4 (id=417): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db6", 0x66}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e", 0xb6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f671f7a4683a945a1f547d2f9b381ef34c62bd754127361576a083cf5a37b03b062076d99189a", 0xff}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m48.582470572s ago: executing program 4 (id=420): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000580)={0xc1, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400009}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m46.323166251s ago: executing program 3 (id=423): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 2m46.316660729s ago: executing program 4 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f0000000100)="fbffff", 0x3) 2m45.207930424s ago: executing program 4 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x844) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) 2m45.064047245s ago: executing program 3 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@nobarrier}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "3e3235db0cf5547f3d952805d2de67b9"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x20000000) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000002c0)={0x2, 0x102, 0x1, {0x2, 0x1, 0xfffffeff, 0x400}}) prlimit64(0x0, 0x9, &(0x7f0000000040)={0x0, 0x7}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x23}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 2m43.442045899s ago: executing program 4 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) 2m42.207031628s ago: executing program 4 (id=432): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44c", 0x9b}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m34.751914438s ago: executing program 3 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 2m32.076152995s ago: executing program 3 (id=438): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e224e227f0000089210a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffe0f7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m29.519947483s ago: executing program 3 (id=440): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) brk(0x600000000000) mlockall(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m27.469775318s ago: executing program 3 (id=442): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e", 0xb6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f671f7a4683a945a1f547d2f9b381ef34c62bd754127361576a083cf5a37b03b062076d99189a", 0xff}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m26.585313138s ago: executing program 32 (id=432): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b", 0x83}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44c", 0x9b}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd2", 0x98}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m8.180742226s ago: executing program 33 (id=442): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e", 0xb6}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205a8d177ffe437570e15e55c72edfd43f3b828ce3dc05ea68517cf917ddc1fa4e5ad006f90fe2d02aa344b9f671f7a4683a945a1f547d2f9b381ef34c62bd754127361576a083cf5a37b03b062076d99189a", 0xff}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m52.436220022s ago: executing program 1 (id=469): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m51.100360083s ago: executing program 1 (id=470): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.756793921s ago: executing program 1 (id=472): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000340), 0x1000, 0x4040) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x800) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c696f636861727365743d63703933362c6572726f72733d72656d6f756e742d726f2c757466382c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030342c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c007718493fa5e1236995baf2ad873ae8a6dcba132eaa9b3fc33fca0eae1117284d531e0b15de5920ba8a9def72ef71fa641ef945666de6243e41bb8a0d9891ba7da5b33fb6bf7c7523288c5ee3cd60793ca5e511de63ffdaff0aee632ad6e89f82002b43d590db5fc4d2f43254f8930172f330adcd3cc857a05479d5b30736918a2cadb61c826243c33db0e3bf385b005236710fa3aef32a9eca8f6978e6f582ddb2514f7178088106458bf95f327c8ec213f75eb9a7942bdef6afca47a252fe8d2e6dca8f25704e6e7031521fa0f8aad51387e033e016b1a9c460", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x1, 0x153b, &(0x7f0000000a00)="$eJzs3AmYjlX7APD7Puc8Y0h6m2QZzjn3w5sshyTJkiRLkiRJki0haZJPEhJDtqQhCckyJMsQkmVi0tj3fUlIkiZJsmVLzv+a4lP/+r6vb/Vd39y/63ou537Oc5/nPO/9Pp5lrplvOg+p0ahm1QZEBP8U/PmfRACIBYABAHANAAQAUDaubFxmf3aJif/cTti/1kMpV3oG7Eri+mdtXP+sjeuftXH9szauf9bG9c/auP5ZG9efsaxs07T81/KSdRd+/5+V8fX/f0hGyTFfrCl5fReAmD+awvXP2rj+/7OCP7IR1z9r4/pnVbFXegLsvwCf/1lBtr/Yw/XP2rj+jGVlV/r9879/kX+1HyJZ4TP4K8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9B5zxlykAuNS+0vNijDHGGGOMMcbYv47PdqVnwBhjjDHGGGOMsX8/BAESFAQQA9kgFrJDDhAAcDXkgmsgAtdCHFwHueF6yAN5IR/kh3goAAVBgwELBCEUgsIQhRugCNwIRaEYFIcS4KAklIKboDTcDGXgFigLt0I5uA3KQwWoCJXgdqgMd0AVuBOqwl1QDapDDagJd0MtuAdqw71QB+6DunA/1IMHoD48CA3gIWgID0MjeAQaw6PQBJpCM2gOLf6h/BegO7wIPaAnJEIv6A0vQR/oC/2gPwyAl2EgvAKD4FVIgsEwBF6DofA6DIM3YDiMgJHwJoyCt2A0jIGxMA6SYTxMgLdhIrwDk2AyTIGpkALTYDq8CzNgJsyC92A2vA9zYC7Mg/mQCh/AAlgIafAhLIKPIB0WwxJYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgK22A77ICPYSd8ArtgN+z5c/3+nvzTv8j/FPZCFwQEFChQocIYjMFYjMUcmANzYk7MhbkwghGMwzjMjbkxD+bBfJgP4zEeC2JBNGiQkLAQFsIoRrEIFsGiWBSLY3F06LAUlsLSeDOWwTJYFstiOSyH5bECVsBKWAkrY2WsglWwKlbFalgNa2ANvBvvxl5YG2tjHayDdbHupddT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN2mIAJ2B7bYwfsgB2xI3bCTtgZO2MX7IpdM17IBvgivog9sZrohb2xN/bBpGz9sD/2x5dxIL6Cr+CrmISDcQi+hq/h6zgMT+FwHIEjcSRWFm/haByDJMZhMibjBJyAE3EiTsLJOBmnYgpOw+k4HWfgTJyJ7+FsfB/fx7k4F+djKqbiAlyIaZiGi/A0puNiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgxKgD8BHfjbkzCvbgX9+E+3I/78QAewAzMwIN4EA/hITyMh/EIHsGjeAyP4zE8iSfxFJ7GM3gGz+E5PI/PxX/V8ONiq5NAZFJCiRgRI2JFrMghcoicIqfIJXKJiIiIOBEncovcIo/II/KJfCJexIuCoqAwwggSYQwAiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuFeXEbaK8qCBau0qikqgs2rgq4k5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98YCoL3phP3xIZFamkRiMjcUQbCKaCnnxDGgphmEr0Vq0EU+IETgc24mWLkE8LdqL0dhB/EmMwWdFJzEOO4vnRRfRVXQTL4juopXrIXqKSdhL9BZTsY/oK/qJ/mIGVhfv4ezsNcSrIkkMFkPEa2I+vi6GiTfEcDFCjBRvilHiLTFajBFjxTiRLMaLCeJtMVG8IyaJyWKKmCpSxDQxXbwrZoiZYpZ4T8wW74s5Yq6YJ+aLVPGBWCAWijTxoVgkPhLpYrFYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghPhY7xSdil9gt9ohPxV7xmdgnPhf7xRfigPhSZIivxEHxtTgkvhGHxbfiiPhOHBXHxHFxQpwU34tT4rQ4I86Kc+IHcV78KC4IL0CiFFJKJQMZI7PJWJld5pBXyZwygF4/fbrXyjh5ncwtr5d5ZF6ZT+aX8bKALCi1NNJKkqEsJAvLqLxBFpE3yqKymCwuS0gnS8pS8iZZWt4sy8hbZFl5qywnb5PlZQVZUVaSt8vK8g4JkZ8rWE1WlzVkTXm3TIR7ZG15r6wj75N15f2ynnxA1pcPygbyIdlQPiwbyUdkY/mobCKbymayuWwhH5Mt5eOylWwt28gnZFv5pGwnn5IJ8mnZXvqLX5FnZSf5nOwsn5ddZFfZTf4oL0gve8ieEnqB7C1fkn1kX9lP9pcD5MtyoHxFDpKvyiQ5WA6Rr8mh8nU5TL4hh8sRcqR8U46Sb8nRcowcK8fJZDleTpBvy4nyHTlJTpZT5FSZIqfJfhdHmiXl38x/+5f5mZdeOU0O+mnvG+UmuVlukVvlNrld7pAfy51yp9wld8k9co/cK/fKfXKf3C/3ywPygMyQGfKgPCgPyUPysDwsj8gj8qg8Js/KE/Kk/F6ekqflaXlWnpPn5PmLnwEoVEJJpVSgYlQ2FauyqxzqKpVTXa1yqWtURF2r4tR1Kre6XuVReVU+lV/FqwKqoNLKKKtIhaqQKqyi6ga8eDqq4qqEcqqkKqVu+nvyVRF1oyqqiv0q/9L8Ev/C/FqoFqqlaqlaqVaqjWqj2qq2qp1qpxJUgmqv2qsOqoPqqDqqTqqT6qw6qy6qi+qmuqnuqrvqoXqoRJWoequXVB/VV/VT/dUA9bIaqAaqQWqQSlJJaogaooaqoWqYGqaGq+FqpBqpRqlRarQarcaqsSpZJasJaoKaqCaqSWqSmqKmqBSVoqar6WqGmqFmqVlqtpqt5qg5ap6ap1JVqlqgFqg0laYWqUUqXS1Wi9VStVQtV8vVSrVSrVar1Vq1Vq1X61W62qQ2qS1qi9qmtqkdaofaqXaqXWqX2qP2qL1qr9qn9qn9ar86oA6oDJWhDqqD6pA6pA6rw+qIOqKOqqPquDquTqqT6pQ6pc6oM+qcOqfOq/PqgrqgIBAgAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4mLRo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf0g86v1UNAweDhoFDwSNA4eDZoETYNmQfOgxb9k/AeDBkHm+N6fyvu466F76kTdS/fWL+k+uq/up/vrAfplPVC/ogfpV3WSHqyH6Nf0UP26Hqbf0MP1CD1Sv6lH6bf0aD1Gj9XjdLIeryfot/VE/Y6epCfrKXqqTtHT9HT9rp6hZ+pZ+j09W7+v5+i5ep6er1P1B3qBXqjT9Id6kf5Ip+vFeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h/5Y79Sf6F16t96jP9V79Wd6n/5c79df6AP6S52hv9IH9df6kP5GH9bf6iP6O31UH9PH9Ql9Un+vT+nT+ow+q8/pH/R5/aO+oH3mzX3m5d0oo0yMiTGxJtbkMDlMTpPT5DK5TMRETJyJM7lNbpPH5DH5TD4Tb+JNQVPQZCJDppApZKImaoqYIqaoKWqKm+LGGWdKmVKmtCltypgypqwpa8qZcqa8KW8qmormdnO7ucPcYe40d5q7zF2muqluapqappapZWqb2qaOqWPqmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimplmpoVpYVqalqaVaWXamDamrWlr2pl2JsEkmPamvelgOpiOpqPpZDqZzqaz6WK6mG6mm+luupsepodJNImmt+lt+pg+pp/pZwaYAWagGWgGmUEmySSZIWaIGWqGmmFmmBluRpiRmTeq5i0z2owxY804k2ySzQQzwUw0E80kM8lMMVNMikkx0810M8PMMLPMLDPbzDZzzBwzz8wzqSbVLDALTJpJM4vMIpNu0s0Ss8QsM8vMCrPCrDKrzBqzxqyDdWaD2WA2mU1mi9litpltZofZYXaanWaX2WX2mD1mr9lr9pl9Zr/Zbw6YAybDZJiD5qA5ZA6Zw+awOWKOmKPmqDlujpuT5qQ5ZU6ZM+aMOWfyXrxeehNrs9sc9iqb015tc9lr7P+P89n8Nt4WsAWttnls3l/Fxlpb1BazxW0J62xJW8re9Ju4vK1gK9pK9nZb2d5hq/wmrmXvsbXtvbaOvc/WtHf/Kq5r77f17CO2PiKAbWob2ua2kX3ENraP2ia2qW1mm9u29knbzj5lE+zTtr195jfxArvQrrKr7Rq71u6yu+0Ze9Yest/Yc/YH28P2tAPsy3agfcUOsq/aJDv4N/FI+6YdZd+yo+0YO9aO+008xU61KXaanW7ftTPszN/EqfYDO9um2Tl2rp1n5/8UZ84pzX5oF9mPbLoNYIldapfZ5XaFXfnnuS616+0Gu9HutJ/YLXar3Wa32x2XboTtbrvHfmr32s/sQfu13W+/sAfsYZthv/opzjy+w/Zbe8R+Z4/aY/a4PWFP2u/VpezMYz9hf7QXrLdASECSFAUUQ9kolrJTDrqKctLVlIuuoQhdS3F0HeWm6ykP5aV8lJ/iqQAVJE2GLBGFVIgKU5RuoEvTK04lyFFJKkU3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0NPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSIvWi3vQS9aG+1I/60wB6mQbSKzSIXqUkGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiZxtMEepsm0js0iSbTFJpKKTSNptO7NINm0ix6j2bT+zSH5tI8mk+p9AEtoIWURh/SIvqI0mkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pg76ig/Q1HaJv6DB963vSd3SUjtFxOkEn6Xs6RafpDJ2lc/QDnacf6QJ5ghBDEcpQhUEYE2YLY8PsYY7wqjBneHWYK7wmjITXhnHhdWHu8PowT5g3zBfmD+PDAmHBUIcmtCGFYVgoLBxGwxvCIuGNYdGwWFg8LBG6sGRYKrwpLB3eHJYJbwnLhreG5cLbwvJhhfCR+yqFt4eVwzvCKuGdYdXwrrBaWD2sEdYM7w5rhfeEtcN7wzrhfWGZ8P6wXvhAWD98MGwQPhQ2DB8OG4WPhI3DR8MmYdOwWdg8bBE+FrYMHw9bha3DNuETYdvwybBd+FSYED4dtg+f+an//oV/uT8x7BX2Dl8KXwq9v1fOi86PpkY/iC6ILoymRT+MLop+FE2PLo4uiS6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mel8zGzh0wkmnXOBiXDYX67K7HO4ql9Nd7XK5a1zEXevi3HUut7ve5XF5XT6X38W7Aq6g084468iFrpAr7KLuBlfE3eiKumKuuCvhnCvpSrnmroVr4Vq6x10r19q1cU+4J9yT7kn3lHvKPe3au2dcB/cn19E96zq559xz7nnXxXV13dwLrrsbn+vnczLR9Xa9XR/Xx/Vz/dwAN8ANdAPdIDfIJbkkN8QNcUPdUDfMDXPD3XA30o10o9woN9qNdmPdWJfskt0EN8FNdBPdJDfJTXFTXIpLcdPddDfDzXCVZ/68lzlujpvn5rlUl+oWuMx7xjS3yC1y6S7dLXFL3DK3zK1wK9wqt8qtcWvcOrfObXAb3Ca3yW1xW9w2t83tcDvcTrfT7fLX/Dyo2+v2uX1uv9vvDrgvXYb7yh10X7tD7ht32H3rjrjv3FF3zB13J9xJ97075U67M+6sO+d+cOfdj+6C8y45Mj4yIfJ2ZGLkncikyOTIlMjUSEpkWmR65N3IjMjMyKzIe5HZkfcjcyJzI/Mi8yOpkQ8iCyILI2mRDyOLIh9F0iOLI0siSyPLIssj3hfYEvpCvrCP+ht8EX+jL+qL+eK+hHe+pC/lb/Kl/c2+jL/Fl/W3+nL+Nl/eV/AV/aO+iW/qm/nmvoV/zLf0j/tWvrVv45/wbf2Tvp1/yif4p317/4zv4P/kO/pnfSf/nO/sn/ddfFffzb/gu/sXfQ/f0yf6Xr63f8n38X19P9/fD/Av+4H+FT/Iv+qT/GA/xL/mh/rX/TD/hh/uR/iRMW/6UZcekWGcT/bj/QT/tp/o3/GT/GQ/xU/1KX6an+7f9TP8TD/Lv+dn+/f9HD/Xz/Pzfar/wC/wC32a/9Av8h/5dL/40ktJv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+x3+k/8Lr/b7/Gf+r3+M7/Pf+73+y/8Af+lz/Bf+YP+a3/If+MP+2/9Ef+dP+qP+eP+hD/pv/en/Gl/xp/15/wP/rz/0V/g31ljjDHGGPtDxl9uil/3/Pw6v9fv5IhfbNwbAK7emj/jl/2Zd5Tr8vzc7ivi20YA4OmenR+6tFSrlpiYeHHbdAlB4bkAl34SlCkGLseLoQ08CQnQGkr/7vz7iq7n6G+MH70VIMcvcmLhcnx5/M8BMPF3xn/siZELyoVn4v7K+HMBiha+nJMdLseLoc1P71daQ5m/MP+8Lf/G/LN/kQzQ6hc5OeFyfHn+peBxeAYSfrXlX9H2j23GGGOMMcYYY+x/Q19RseOl58/g4rrfez6PV5dzssHl+G89nzPGGGOMMcYYY+zKe7Zrt6ceS0ho3fHvb1T5h7L+cKMx/F4XwL91p1m54T3ApTUKAP7JAQEyG/I/eRSb/yP7Srp46vz/rmVnfQD/HaX8xxtj/7zmCv/HxBhjjDHGGPuXu3z3/+v16kpNiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+E39X7EofI2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMXal/V8AAAD///9W/fM=") mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x5000000) msgget(0x3, 0x1a0) open(0x0, 0x8427e, 0x9a) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x52588107, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f000068d000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffffd7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd001, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m49.529951075s ago: executing program 1 (id=473): r0 = getpid() socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 1m48.355772022s ago: executing program 1 (id=474): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) read$FUSE(0xffffffffffffffff, &(0x7f0000001d00)={0x2020}, 0x2020) 1m43.600337076s ago: executing program 1 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x106) getdents64(r3, 0x0, 0x22) 6.5973121s ago: executing program 2 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$I2C(0x0, 0x0, 0x80) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x0, 0x5, 0x8, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000040)=0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0014000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a29045bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9d428d9ab6fd1364c3871e66b30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd8}], 0x1}, 0x0) 5.378157291s ago: executing program 2 (id=541): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 4.598058288s ago: executing program 2 (id=542): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) 3.827612088s ago: executing program 2 (id=543): r0 = fanotify_init(0x1, 0x2) fanotify_mark(r0, 0x455, 0x8001000, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fanotify_mark(r0, 0x7e, 0x8001010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.513081004s ago: executing program 2 (id=544): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x7, 0x1, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x3, 0xa, 0x20, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x55) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000000000010000"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) 0s ago: executing program 2 (id=545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x48000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x640100fe, 0x4e23, 0x8003, 'fo\x00', 0x1, 0x6, 0x1}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote, 0xfffffffb}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 21.354028][ T9] usb 4-1: USB disconnect, device number 2 [ 121.537627][ T5602] usb 3-1: USB disconnect, device number 2 [ 121.851643][ T1480] kworker/u8:12: attempt to access beyond end of device [ 121.851643][ T1480] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.912572][ T1480] CPU: 0 UID: 0 PID: 1480 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.912602][ T1480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.912614][ T1480] Workqueue: writeback wb_workfn (flush-7:0) [ 121.912660][ T1480] Call Trace: [ 121.912667][ T1480] [ 121.912674][ T1480] dump_stack_lvl+0xe8/0x150 [ 121.912701][ T1480] f2fs_stop_checkpoint+0x383/0x540 [ 121.912724][ T1480] f2fs_write_end_io+0x1274/0x1740 [ 121.912769][ T1480] __submit_merged_bio+0x256/0x6a0 [ 121.912797][ T1480] __submit_merged_write_cond+0x3c9/0x4e0 [ 121.912828][ T1480] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 121.912872][ T1480] f2fs_write_data_pages+0x287e/0x34f0 [ 121.912931][ T1480] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 121.912968][ T1480] ? __lock_acquire+0x6b5/0x2d10 [ 121.913028][ T1480] ? __lock_acquire+0x6b5/0x2d10 [ 121.913093][ T1480] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 121.913118][ T1480] do_writepages+0x32e/0x550 [ 121.913141][ T1480] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 121.913168][ T1480] ? reacquire_held_locks+0x104/0x190 [ 121.913186][ T1480] ? rt_spin_lock+0x1e0/0x400 [ 121.913218][ T1480] __writeback_single_inode+0x133/0x10e0 [ 121.913240][ T1480] ? rt_spin_unlock+0x160/0x200 [ 121.913269][ T1480] writeback_sb_inodes+0x97f/0x1980 [ 121.913325][ T1480] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 121.913378][ T1480] ? __pfx_rt_spin_lock+0x10/0x10 [ 121.913403][ T1480] ? rt_spin_unlock+0x14f/0x200 [ 121.913439][ T1480] wb_writeback+0x445/0xb00 [ 121.913462][ T1480] ? queue_io+0x271/0x440 [ 121.913487][ T1480] ? __pfx_wb_writeback+0x10/0x10 [ 121.913519][ T1480] wb_workfn+0x3fd/0xf20 [ 121.913546][ T1480] ? look_up_lock_class+0x57/0x110 [ 121.913578][ T1480] ? __pfx_wb_workfn+0x10/0x10 [ 121.913606][ T1480] ? do_raw_spin_unlock+0xf5/0x210 [ 121.913635][ T1480] ? process_one_work+0x8b7/0x1710 [ 121.913658][ T1480] ? process_one_work+0x8b7/0x1710 [ 121.913688][ T1480] ? process_one_work+0x8b7/0x1710 [ 121.913707][ T1480] process_one_work+0x9a3/0x1710 [ 121.913743][ T1480] ? __pfx_process_one_work+0x10/0x10 [ 121.913761][ T1480] ? do_raw_spin_lock+0x12b/0x2f0 [ 121.913822][ T1480] worker_thread+0xba8/0x11e0 [ 121.913890][ T1480] kthread+0x388/0x470 [ 121.913918][ T1480] ? __pfx_worker_thread+0x10/0x10 [ 121.913953][ T1480] ? __pfx_kthread+0x10/0x10 [ 121.913991][ T1480] ret_from_fork+0x514/0xb70 [ 121.914024][ T1480] ? __pfx_ret_from_fork+0x10/0x10 [ 121.914048][ T1480] ? __switch_to+0xc79/0x1410 [ 121.914078][ T1480] ? __pfx_kthread+0x10/0x10 [ 121.914108][ T1480] ret_from_fork_asm+0x1a/0x30 [ 121.914154][ T1480] [ 121.947843][ T1480] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 122.416825][ T5903] netlink: 76 bytes leftover after parsing attributes in process `syz.2.29'. [ 124.462195][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032899c00: rx timeout, send abort [ 124.962670][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880630f1000: rx timeout, send abort [ 124.963552][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032899c00: abort rx timeout. Force session deactivation [ 125.462746][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880630f1000: abort rx timeout. Force session deactivation [ 126.826360][ T5964] Zero length message leads to an empty skb [ 127.403709][ T821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.599950][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 127.604171][ T821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 127.604200][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.675505][ T821] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.675537][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.675559][ T821] usb 5-1: Product: syz [ 127.675573][ T821] usb 5-1: Manufacturer: syz [ 127.675588][ T821] usb 5-1: SerialNumber: syz [ 127.733387][ T821] usb 5-1: config 0 descriptor?? [ 127.825255][ T821] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.825290][ T821] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 128.458870][ T821] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 128.482049][ T821] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 128.676952][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.933493][ T32] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 128.933522][ T32] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 128.933626][ T32] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 128.933649][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.099853][ T5990] binder: 5989:5990 ioctl c0306201 2000000009c0 returned -14 [ 129.116828][ T821] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 129.370189][ T821] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 129.371122][ T821] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 129.371560][ T821] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 129.375008][ T821] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 129.379990][ T821] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 129.461530][ T821] usb 5-1: USB disconnect, device number 2 [ 129.662974][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.663412][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.504620][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.521370][ T821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.638367][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.638420][ T821] usb 2-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 137.638443][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.070932][ T821] usb 2-1: config 0 descriptor?? [ 138.122196][ T821] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 138.216242][ T6112] loop2: detected capacity change from 0 to 512 [ 138.332101][ T5602] usb 2-1: USB disconnect, device number 3 [ 138.839330][ T6112] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.87: inode has both inline data and extents flags [ 138.839577][ T6112] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.849544][ C0] EXT4-fs (loop2): initial error at time 1778008266: ext4_orphan_get:1397: inode 15 [ 138.849585][ C0] EXT4-fs (loop2): last error at time 1778008266: ext4_orphan_get:1397: inode 15 [ 138.970656][ T6112] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.87: couldn't read orphan inode 15 (err -117) [ 138.970853][ T6112] loop2: lost filesystem error report for type 5 error -117 [ 139.016387][ T6112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.069518][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.889286][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 139.892329][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 139.892351][ T9] usb 4-1: config 0 has no interface number 0 [ 139.892393][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 139.951746][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 139.951778][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.951801][ T9] usb 4-1: Product: syz [ 139.951816][ T9] usb 4-1: Manufacturer: syz [ 139.951832][ T9] usb 4-1: SerialNumber: syz [ 140.090510][ T6130] loop4: detected capacity change from 0 to 64 [ 140.162318][ T9] usb 4-1: config 0 descriptor?? [ 143.496693][ T9] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 143.496744][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 143.496759][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 143.496839][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 143.587943][ T9] usb 4-1: USB disconnect, device number 3 [ 146.364473][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.478232][ T6179] binder_alloc: 6178: binder_alloc_buf size 4294968248 failed, no address space [ 146.478288][ T6179] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 146.737031][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 147.583536][ T6191] tipc: Started in network mode [ 147.583568][ T6191] tipc: Node identity 2d66636e74202020002e, cluster identity 4711 [ 147.793355][ T6194] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 147.793379][ T6194] netlink: 768 bytes leftover after parsing attributes in process `syz.3.113'. [ 148.974212][ T6210] loop0: detected capacity change from 0 to 32768 [ 149.542201][ T6210] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.883382][ T6225] netlink: 52 bytes leftover after parsing attributes in process `syz.3.118'. [ 149.954673][ T6210] XFS (loop0): Ending clean mount [ 150.033472][ T6230] loop1: detected capacity change from 0 to 512 [ 150.051683][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.3.118'. [ 150.374018][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.374814][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.966727][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.966931][ T6231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.025947][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.026133][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.154317][ T6231] netlink: 52 bytes leftover after parsing attributes in process `syz.3.118'. [ 151.202421][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.203459][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.879864][ T6249] loop1: detected capacity change from 0 to 8192 [ 153.851244][ T5615] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.330871][ T6284] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 156.702780][ T6286] ref_ctr increment failed for inode: 0xa7 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888038334100 [ 157.850404][ T6286] uprobe: syz.1.133:6286 failed to unregister, leaking uprobe [ 159.019344][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.231313][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 159.236282][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 159.262028][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.262055][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.262073][ T9] usb 5-1: Product: syz [ 159.262092][ T9] usb 5-1: Manufacturer: syz [ 159.262105][ T9] usb 5-1: SerialNumber: syz [ 159.312246][ T9] usb 5-1: config 0 descriptor?? [ 159.327349][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.327390][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 159.369815][ T5619] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.377822][ T5619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.377847][ T5619] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 160.377881][ T5619] usb 3-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00 [ 160.377901][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.448077][ T5619] usb 3-1: config 0 descriptor?? [ 160.905890][ T5746] usb 3-1: USB disconnect, device number 3 [ 160.935417][ T6325] loop1: detected capacity change from 0 to 4096 [ 161.069090][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 161.263150][ T6327] netlink: 'syz.0.145': attribute type 21 has an invalid length. [ 161.263779][ T6327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.145'. [ 161.632829][ T6330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.814956][ T6332] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.890716][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 161.890744][ T9] em28xx 5-1:0.0: board has no eeprom [ 162.450206][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 162.450244][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 162.689326][ T37] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.829591][ T6325] syz.1.144 (6325) used greatest stack depth: 18976 bytes left [ 162.906242][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.906267][ T37] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.906303][ T37] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 162.906344][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.995932][ T1480] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.010057][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.011365][ T41] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.011406][ T41] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.015725][ T6302] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 163.035336][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 163.035374][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 163.091686][ T10] em28xx 5-1:0.0: Binding DVB extension [ 163.094833][ T37] usb 4-1: config 0 descriptor?? [ 163.289266][ T37] usb 5-1: USB disconnect, device number 3 [ 163.384129][ T37] em28xx 5-1:0.0: Disconnecting em28xx [ 163.403937][ T6101] usb 4-1: USB disconnect, device number 4 [ 163.793393][ T10] em28xx 5-1:0.0: Registering input extension [ 163.829249][ T38] audit: type=1326 audit(1778008290.984:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.2.151" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d541acdd9 code=0x0 [ 163.863334][ T37] em28xx 5-1:0.0: Closing input extension [ 166.477579][ T37] em28xx 5-1:0.0: Freeing device [ 169.511005][ T6377] input: syz0 as /devices/virtual/input/input6 [ 169.806256][ T6380] loop0: detected capacity change from 0 to 256 [ 169.807447][ T6380] exfat: Deprecated parameter 'utf8' [ 169.807517][ T6380] exfat: Deprecated parameter 'namecase' [ 169.807589][ T6380] exfat: Deprecated parameter 'namecase' [ 170.115810][ T6101] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.215313][ T6380] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 170.274210][ T6101] usb 5-1: Using ep0 maxpacket: 16 [ 170.279074][ T6101] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.279129][ T6101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.282267][ T6101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.282291][ T6101] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.282313][ T6101] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.340968][ T6101] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 170.341040][ T6101] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 170.341088][ T6101] usb 5-1: Manufacturer: syz [ 170.417042][ T6101] usb 5-1: config 0 descriptor?? [ 170.539172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.882547][ T6389] loop3: detected capacity change from 0 to 32768 [ 171.032011][ T6389] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.082855][ T5619] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.124113][ T6389] XFS (loop3): Ending clean mount [ 171.284200][ T6101] rc_core: IR keymap rc-hauppauge not found [ 171.284220][ T6101] Registered IR keymap rc-empty [ 171.305894][ T5619] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 171.305921][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.305941][ T5619] usb 2-1: Product: syz [ 171.305954][ T5619] usb 2-1: Manufacturer: syz [ 171.305968][ T5619] usb 2-1: SerialNumber: syz [ 171.307632][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.347620][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.367955][ T6101] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 171.389992][ T6101] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 171.458897][ T5619] usb 2-1: config 0 descriptor?? [ 172.056484][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.071356][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.087738][ C1] rc rc0: IR event FIFO is full! [ 172.087754][ C1] rc rc0: IR event FIFO is full! [ 172.087766][ C1] rc rc0: IR event FIFO is full! [ 172.087778][ C1] rc rc0: IR event FIFO is full! [ 172.087795][ C1] rc rc0: IR event FIFO is full! [ 172.087806][ C1] rc rc0: IR event FIFO is full! [ 172.087819][ C1] rc rc0: IR event FIFO is full! [ 172.087831][ C1] rc rc0: IR event FIFO is full! [ 172.088242][ C1] rc rc0: IR event FIFO is full! [ 172.088256][ C1] rc rc0: IR event FIFO is full! [ 172.088520][ C1] rc rc0: IR event FIFO is full! [ 172.088532][ C1] rc rc0: IR event FIFO is full! [ 172.088543][ C1] rc rc0: IR event FIFO is full! [ 172.088554][ C1] rc rc0: IR event FIFO is full! [ 172.088564][ C1] rc rc0: IR event FIFO is full! [ 172.088771][ C1] rc rc0: IR event FIFO is full! [ 172.088784][ C1] rc rc0: IR event FIFO is full! [ 172.089002][ C1] rc rc0: IR event FIFO is full! [ 172.089015][ C1] rc rc0: IR event FIFO is full! [ 172.089290][ C1] rc rc0: IR event FIFO is full! [ 172.089304][ C1] rc rc0: IR event FIFO is full! [ 172.089316][ C1] rc rc0: IR event FIFO is full! [ 172.089328][ C1] rc rc0: IR event FIFO is full! [ 172.089340][ C1] rc rc0: IR event FIFO is full! [ 172.089351][ C1] rc rc0: IR event FIFO is full! [ 172.089361][ C1] rc rc0: IR event FIFO is full! [ 172.089372][ C1] rc rc0: IR event FIFO is full! [ 172.089541][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.089628][ C1] rc rc0: IR event FIFO is full! [ 172.089644][ C1] rc rc0: IR event FIFO is full! [ 172.089658][ C1] rc rc0: IR event FIFO is full! [ 172.089671][ C1] rc rc0: IR event FIFO is full! [ 172.089685][ C1] rc rc0: IR event FIFO is full! [ 172.089699][ C1] rc rc0: IR event FIFO is full! [ 172.089712][ C1] rc rc0: IR event FIFO is full! [ 172.089939][ C1] rc rc0: IR event FIFO is full! [ 172.089955][ C1] rc rc0: IR event FIFO is full! [ 172.089969][ C1] rc rc0: IR event FIFO is full! [ 172.089983][ C1] rc rc0: IR event FIFO is full! [ 172.089998][ C1] rc rc0: IR event FIFO is full! [ 172.090011][ C1] rc rc0: IR event FIFO is full! [ 172.090024][ C1] rc rc0: IR event FIFO is full! [ 172.090038][ C1] rc rc0: IR event FIFO is full! [ 172.090292][ C1] rc rc0: IR event FIFO is full! [ 172.090309][ C1] rc rc0: IR event FIFO is full! [ 172.090325][ C1] rc rc0: IR event FIFO is full! [ 172.090341][ C1] rc rc0: IR event FIFO is full! [ 172.090355][ C1] rc rc0: IR event FIFO is full! [ 172.090369][ C1] rc rc0: IR event FIFO is full! [ 172.090837][ C1] rc rc0: IR event FIFO is full! [ 172.090854][ C1] rc rc0: IR event FIFO is full! [ 172.090868][ C1] rc rc0: IR event FIFO is full! [ 172.090883][ C1] rc rc0: IR event FIFO is full! [ 172.090897][ C1] rc rc0: IR event FIFO is full! [ 172.090910][ C1] rc rc0: IR event FIFO is full! [ 172.090924][ C1] rc rc0: IR event FIFO is full! [ 172.091170][ C1] rc rc0: IR event FIFO is full! [ 172.091185][ C1] rc rc0: IR event FIFO is full! [ 172.091199][ C1] rc rc0: IR event FIFO is full! [ 172.091451][ C1] rc rc0: IR event FIFO is full! [ 172.091466][ C1] rc rc0: IR event FIFO is full! [ 172.091479][ C1] rc rc0: IR event FIFO is full! [ 172.091492][ C1] rc rc0: IR event FIFO is full! [ 172.091925][ C1] rc rc0: IR event FIFO is full! [ 172.091939][ C1] rc rc0: IR event FIFO is full! [ 172.092362][ C1] rc rc0: IR event FIFO is full! [ 172.092376][ C1] rc rc0: IR event FIFO is full! [ 172.092389][ C1] rc rc0: IR event FIFO is full! [ 172.092400][ C1] rc rc0: IR event FIFO is full! [ 172.092412][ C1] rc rc0: IR event FIFO is full! [ 172.092425][ C1] rc rc0: IR event FIFO is full! [ 172.092437][ C1] rc rc0: IR event FIFO is full! [ 172.092652][ C1] rc rc0: IR event FIFO is full! [ 172.092666][ C1] rc rc0: IR event FIFO is full! [ 172.092678][ C1] rc rc0: IR event FIFO is full! [ 172.092895][ C1] rc rc0: IR event FIFO is full! [ 172.092908][ C1] rc rc0: IR event FIFO is full! [ 172.092919][ C1] rc rc0: IR event FIFO is full! [ 172.092931][ C1] rc rc0: IR event FIFO is full! [ 172.092942][ C1] rc rc0: IR event FIFO is full! [ 172.092954][ C1] rc rc0: IR event FIFO is full! [ 172.092966][ C1] rc rc0: IR event FIFO is full! [ 172.093318][ C1] rc rc0: IR event FIFO is full! [ 172.093348][ C1] rc rc0: IR event FIFO is full! [ 172.093361][ C1] rc rc0: IR event FIFO is full! [ 172.093372][ C1] rc rc0: IR event FIFO is full! [ 172.093384][ C1] rc rc0: IR event FIFO is full! [ 172.093395][ C1] rc rc0: IR event FIFO is full! [ 172.093407][ C1] rc rc0: IR event FIFO is full! [ 172.093419][ C1] rc rc0: IR event FIFO is full! [ 172.094194][ C1] rc rc0: IR event FIFO is full! [ 172.094209][ C1] rc rc0: IR event FIFO is full! [ 172.094221][ C1] rc rc0: IR event FIFO is full! [ 172.094444][ C1] rc rc0: IR event FIFO is full! [ 172.094462][ C1] rc rc0: IR event FIFO is full! [ 172.094486][ C1] rc rc0: IR event FIFO is full! [ 172.094498][ C1] rc rc0: IR event FIFO is full! [ 172.094509][ C1] rc rc0: IR event FIFO is full! [ 172.094521][ C1] rc rc0: IR event FIFO is full! [ 172.094532][ C1] rc rc0: IR event FIFO is full! [ 172.094763][ C1] rc rc0: IR event FIFO is full! [ 172.094803][ C1] rc rc0: IR event FIFO is full! [ 172.094815][ C1] rc rc0: IR event FIFO is full! [ 172.094827][ C1] rc rc0: IR event FIFO is full! [ 172.094839][ C1] rc rc0: IR event FIFO is full! [ 172.094851][ C1] rc rc0: IR event FIFO is full! [ 172.095077][ C1] rc rc0: IR event FIFO is full! [ 172.095321][ C1] rc rc0: IR event FIFO is full! [ 172.095332][ C1] rc rc0: IR event FIFO is full! [ 172.095340][ C1] rc rc0: IR event FIFO is full! [ 172.095347][ C1] rc rc0: IR event FIFO is full! [ 172.095355][ C1] rc rc0: IR event FIFO is full! [ 172.095580][ C1] rc rc0: IR event FIFO is full! [ 172.095592][ C1] rc rc0: IR event FIFO is full! [ 172.095615][ C1] rc rc0: IR event FIFO is full! [ 172.095623][ C1] rc rc0: IR event FIFO is full! [ 172.095630][ C1] rc rc0: IR event FIFO is full! [ 172.095853][ C1] rc rc0: IR event FIFO is full! [ 172.095866][ C1] rc rc0: IR event FIFO is full! [ 172.095878][ C1] rc rc0: IR event FIFO is full! [ 172.095891][ C1] rc rc0: IR event FIFO is full! [ 172.095903][ C1] rc rc0: IR event FIFO is full! [ 172.095915][ C1] rc rc0: IR event FIFO is full! [ 172.096141][ C1] rc rc0: IR event FIFO is full! [ 172.096154][ C1] rc rc0: IR event FIFO is full! [ 172.096166][ C1] rc rc0: IR event FIFO is full! [ 172.096178][ C1] rc rc0: IR event FIFO is full! [ 172.096189][ C1] rc rc0: IR event FIFO is full! [ 172.096410][ C1] rc rc0: IR event FIFO is full! [ 172.096426][ C1] rc rc0: IR event FIFO is full! [ 172.096440][ C1] rc rc0: IR event FIFO is full! [ 172.096452][ C1] rc rc0: IR event FIFO is full! [ 172.096464][ C1] rc rc0: IR event FIFO is full! [ 172.096476][ C1] rc rc0: IR event FIFO is full! [ 172.096488][ C1] rc rc0: IR event FIFO is full! [ 172.096737][ C1] rc rc0: IR event FIFO is full! [ 172.096751][ C1] rc rc0: IR event FIFO is full! [ 172.096763][ C1] rc rc0: IR event FIFO is full! [ 172.096777][ C1] rc rc0: IR event FIFO is full! [ 172.096795][ C1] rc rc0: IR event FIFO is full! [ 172.096807][ C1] rc rc0: IR event FIFO is full! [ 172.096820][ C1] rc rc0: IR event FIFO is full! [ 172.097051][ C1] rc rc0: IR event FIFO is full! [ 172.097065][ C1] rc rc0: IR event FIFO is full! [ 172.097284][ C1] rc rc0: IR event FIFO is full! [ 172.097500][ C1] rc rc0: IR event FIFO is full! [ 172.097513][ C1] rc rc0: IR event FIFO is full! [ 172.097525][ C1] rc rc0: IR event FIFO is full! [ 172.097536][ C1] rc rc0: IR event FIFO is full! [ 172.097547][ C1] rc rc0: IR event FIFO is full! [ 172.097563][ C1] rc rc0: IR event FIFO is full! [ 172.097575][ C1] rc rc0: IR event FIFO is full! [ 172.097830][ C1] rc rc0: IR event FIFO is full! [ 172.097845][ C1] rc rc0: IR event FIFO is full! [ 172.097860][ C1] rc rc0: IR event FIFO is full! [ 172.098102][ C1] rc rc0: IR event FIFO is full! [ 172.098119][ C1] rc rc0: IR event FIFO is full! [ 172.098132][ C1] rc rc0: IR event FIFO is full! [ 172.098367][ C1] rc rc0: IR event FIFO is full! [ 172.098383][ C1] rc rc0: IR event FIFO is full! [ 172.098398][ C1] rc rc0: IR event FIFO is full! [ 172.098412][ C1] rc rc0: IR event FIFO is full! [ 172.098425][ C1] rc rc0: IR event FIFO is full! [ 172.098438][ C1] rc rc0: IR event FIFO is full! [ 172.098451][ C1] rc rc0: IR event FIFO is full! [ 172.098464][ C1] rc rc0: IR event FIFO is full! [ 172.098476][ C1] rc rc0: IR event FIFO is full! [ 172.098716][ C1] rc rc0: IR event FIFO is full! [ 172.098731][ C1] rc rc0: IR event FIFO is full! [ 172.098759][ C1] rc rc0: IR event FIFO is full! [ 172.098773][ C1] rc rc0: IR event FIFO is full! [ 172.099002][ C1] rc rc0: IR event FIFO is full! [ 172.099015][ C1] rc rc0: IR event FIFO is full! [ 172.099028][ C1] rc rc0: IR event FIFO is full! [ 172.099038][ C1] rc rc0: IR event FIFO is full! [ 172.099638][ C1] rc rc0: IR event FIFO is full! [ 172.099656][ C1] rc rc0: IR event FIFO is full! [ 172.099670][ C1] rc rc0: IR event FIFO is full! [ 172.099686][ C1] rc rc0: IR event FIFO is full! [ 172.099700][ C1] rc rc0: IR event FIFO is full! [ 172.099714][ C1] rc rc0: IR event FIFO is full! [ 172.099970][ C1] rc rc0: IR event FIFO is full! [ 172.099987][ C1] rc rc0: IR event FIFO is full! [ 172.100001][ C1] rc rc0: IR event FIFO is full! [ 172.100014][ C1] rc rc0: IR event FIFO is full! [ 172.100028][ C1] rc rc0: IR event FIFO is full! [ 172.100042][ C1] rc rc0: IR event FIFO is full! [ 172.100510][ C1] rc rc0: IR event FIFO is full! [ 172.100527][ C1] rc rc0: IR event FIFO is full! [ 172.100542][ C1] rc rc0: IR event FIFO is full! [ 172.101262][ C1] rc rc0: IR event FIFO is full! [ 172.101277][ C1] rc rc0: IR event FIFO is full! [ 172.101289][ C1] rc rc0: IR event FIFO is full! [ 172.101306][ C1] rc rc0: IR event FIFO is full! [ 172.101315][ C1] rc rc0: IR event FIFO is full! [ 172.101324][ C1] rc rc0: IR event FIFO is full! [ 172.101332][ C1] rc rc0: IR event FIFO is full! [ 172.101340][ C1] rc rc0: IR event FIFO is full! [ 172.101575][ C1] rc rc0: IR event FIFO is full! [ 172.101588][ C1] rc rc0: IR event FIFO is full! [ 172.101600][ C1] rc rc0: IR event FIFO is full! [ 172.101617][ C1] rc rc0: IR event FIFO is full! [ 172.101626][ C1] rc rc0: IR event FIFO is full! [ 172.101635][ C1] rc rc0: IR event FIFO is full! [ 172.101894][ C1] rc rc0: IR event FIFO is full! [ 172.101907][ C1] rc rc0: IR event FIFO is full! [ 172.101919][ C1] rc rc0: IR event FIFO is full! [ 172.101931][ C1] rc rc0: IR event FIFO is full! [ 172.101942][ C1] rc rc0: IR event FIFO is full! [ 172.101954][ C1] rc rc0: IR event FIFO is full! [ 172.102174][ C1] rc rc0: IR event FIFO is full! [ 172.102188][ C1] rc rc0: IR event FIFO is full! [ 172.102200][ C1] rc rc0: IR event FIFO is full! [ 172.102211][ C1] rc rc0: IR event FIFO is full! [ 172.102222][ C1] rc rc0: IR event FIFO is full! [ 172.102233][ C1] rc rc0: IR event FIFO is full! [ 172.102244][ C1] rc rc0: IR event FIFO is full! [ 172.102255][ C1] rc rc0: IR event FIFO is full! [ 172.102472][ C1] rc rc0: IR event FIFO is full! [ 172.102486][ C1] rc rc0: IR event FIFO is full! [ 172.102497][ C1] rc rc0: IR event FIFO is full! [ 172.102510][ C1] rc rc0: IR event FIFO is full! [ 172.102522][ C1] rc rc0: IR event FIFO is full! [ 172.102742][ C1] rc rc0: IR event FIFO is full! [ 172.102763][ C1] rc rc0: IR event FIFO is full! [ 172.102775][ C1] rc rc0: IR event FIFO is full! [ 172.103010][ C1] rc rc0: IR event FIFO is full! [ 172.103024][ C1] rc rc0: IR event FIFO is full! [ 172.103036][ C1] rc rc0: IR event FIFO is full! [ 172.103047][ C1] rc rc0: IR event FIFO is full! [ 172.103260][ C1] rc rc0: IR event FIFO is full! [ 172.103273][ C1] rc rc0: IR event FIFO is full! [ 172.103284][ C1] rc rc0: IR event FIFO is full! [ 172.103295][ C1] rc rc0: IR event FIFO is full! [ 172.103305][ C1] rc rc0: IR event FIFO is full! [ 172.103321][ C1] rc rc0: IR event FIFO is full! [ 172.103329][ C1] rc rc0: IR event FIFO is full! [ 172.103337][ C1] rc rc0: IR event FIFO is full! [ 172.103558][ C1] rc rc0: IR event FIFO is full! [ 172.103777][ C1] rc rc0: IR event FIFO is full! [ 172.103797][ C1] rc rc0: IR event FIFO is full! [ 172.103808][ C1] rc rc0: IR event FIFO is full! [ 172.103820][ C1] rc rc0: IR event FIFO is full! [ 172.104041][ C1] rc rc0: IR event FIFO is full! [ 172.104054][ C1] rc rc0: IR event FIFO is full! [ 172.104066][ C1] rc rc0: IR event FIFO is full! [ 172.104077][ C1] rc rc0: IR event FIFO is full! [ 172.104089][ C1] rc rc0: IR event FIFO is full! [ 172.104103][ C1] rc rc0: IR event FIFO is full! [ 172.104114][ C1] rc rc0: IR event FIFO is full! [ 172.104334][ C1] rc rc0: IR event FIFO is full! [ 172.104348][ C1] rc rc0: IR event FIFO is full! [ 172.104360][ C1] rc rc0: IR event FIFO is full! [ 172.104372][ C1] rc rc0: IR event FIFO is full! [ 172.104384][ C1] rc rc0: IR event FIFO is full! [ 172.104395][ C1] rc rc0: IR event FIFO is full! [ 172.104407][ C1] rc rc0: IR event FIFO is full! [ 172.104625][ C1] rc rc0: IR event FIFO is full! [ 172.104638][ C1] rc rc0: IR event FIFO is full! [ 172.104649][ C1] rc rc0: IR event FIFO is full! [ 172.104661][ C1] rc rc0: IR event FIFO is full! [ 172.104673][ C1] rc rc0: IR event FIFO is full! [ 172.104894][ C1] rc rc0: IR event FIFO is full! [ 172.104907][ C1] rc rc0: IR event FIFO is full! [ 172.104919][ C1] rc rc0: IR event FIFO is full! [ 172.104931][ C1] rc rc0: IR event FIFO is full! [ 172.104943][ C1] rc rc0: IR event FIFO is full! [ 172.104954][ C1] rc rc0: IR event FIFO is full! [ 172.104966][ C1] rc rc0: IR event FIFO is full! [ 172.105180][ C1] rc rc0: IR event FIFO is full! [ 172.105192][ C1] rc rc0: IR event FIFO is full! [ 172.105204][ C1] rc rc0: IR event FIFO is full! [ 172.105215][ C1] rc rc0: IR event FIFO is full! [ 172.105227][ C1] rc rc0: IR event FIFO is full! [ 172.105239][ C1] rc rc0: IR event FIFO is full! [ 172.105251][ C1] rc rc0: IR event FIFO is full! [ 172.105262][ C1] rc rc0: IR event FIFO is full! [ 172.105274][ C1] rc rc0: IR event FIFO is full! [ 172.105484][ C1] rc rc0: IR event FIFO is full! [ 172.105497][ C1] rc rc0: IR event FIFO is full! [ 172.105508][ C1] rc rc0: IR event FIFO is full! [ 172.105520][ C1] rc rc0: IR event FIFO is full! [ 172.105532][ C1] rc rc0: IR event FIFO is full! [ 172.105543][ C1] rc rc0: IR event FIFO is full! [ 172.105555][ C1] rc rc0: IR event FIFO is full! [ 172.105585][ C1] rc rc0: IR event FIFO is full! [ 172.105597][ C1] rc rc0: IR event FIFO is full! [ 172.105608][ C1] rc rc0: IR event FIFO is full! [ 172.292017][ T5619] usb 2-1: Firmware: major: 226, minor: 19, hardware type: UNKNOWN (46) [ 172.422211][ T5619] usb 2-1: Firmware: build  [ 172.433610][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.472015][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.692555][ T5619] usb 2-1: no permanent extended address found, random address set [ 172.692675][ T5619] usb 2-1: atusb_probe: initialization failed, error = -524 [ 172.693388][ T5619] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 173.174805][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.233686][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.251865][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.272552][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.539247][ T6101] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.249309][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.252331][ T1244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 174.252350][ T1244] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 174.343764][ T6101] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 174.343786][ T6101] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.379074][ T5619] usb 2-1: USB disconnect, device number 4 [ 174.534209][ T6101] usb 5-1: USB disconnect, device number 4 [ 175.040400][ T5617] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.565181][ T6430] loop0: detected capacity change from 0 to 256 [ 175.566180][ T6430] ======================================================= [ 175.566180][ T6430] WARNING: The mand mount option has been deprecated and [ 175.566180][ T6430] and is ignored by this kernel. Remove the mand [ 175.566180][ T6430] option from the mount to silence this warning. [ 175.566180][ T6430] ======================================================= [ 175.755992][ T6430] FAT-fs (loop0): Directory bread(block 64) failed [ 175.756026][ T6430] FAT-fs (loop0): Directory bread(block 65) failed [ 175.756155][ T6430] FAT-fs (loop0): Directory bread(block 66) failed [ 175.756179][ T6430] FAT-fs (loop0): Directory bread(block 67) failed [ 175.756284][ T6430] FAT-fs (loop0): Directory bread(block 68) failed [ 175.756309][ T6430] FAT-fs (loop0): Directory bread(block 69) failed [ 175.756406][ T6430] FAT-fs (loop0): Directory bread(block 70) failed [ 175.756430][ T6430] FAT-fs (loop0): Directory bread(block 71) failed [ 175.756527][ T6430] FAT-fs (loop0): Directory bread(block 72) failed [ 175.756550][ T6430] FAT-fs (loop0): Directory bread(block 73) failed [ 176.329093][ T6441] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 176.329175][ T6441] netlink: 228 bytes leftover after parsing attributes in process `syz.0.163'. [ 176.852711][ T6426] syzkaller0: entered allmulticast mode [ 177.529283][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.531383][ T1244] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 177.531404][ T1244] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 177.645344][ T6449] loop0: detected capacity change from 0 to 4096 [ 177.668305][ T6449] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 178.051877][ T6101] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.074615][ T6461] binder: BINDER_SET_CONTEXT_MGR already set [ 178.074629][ T6461] binder: 6460:6461 ioctl 4018620d 200000004a80 returned -16 [ 178.213019][ T6101] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.213045][ T6101] usb 5-1: config 0 has no interface number 0 [ 178.213076][ T6101] usb 5-1: config 0 interface 1 has no altsetting 0 [ 178.213107][ T6101] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 178.213139][ T6101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.297598][ T6101] usb 5-1: config 0 descriptor?? [ 178.387136][ T6101] usb 5-1: selecting invalid altsetting 1 [ 178.425543][ T6449] ntfs3(loop0): ino=19, mi_enum_attr [ 178.425806][ T6449] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 178.502106][ T6101] dvb_ttusb_budget: ttusb_init_controller: error [ 178.502294][ T6101] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.893873][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 179.073627][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 179.104616][ T37] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 179.104646][ T37] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.104667][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.104686][ T37] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 179.104724][ T37] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.104747][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.351072][ T6101] DVB: Unable to find symbol cx22700_attach() [ 179.611356][ T6101] DVB: Unable to find symbol tda10046_attach() [ 179.611386][ T6101] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 179.613080][ T5619] usb 2-1: USB disconnect, device number 5 [ 179.659345][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.692411][ T6101] usb 5-1: USB disconnect, device number 5 [ 179.729201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.749195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.759191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.769182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.779181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.789182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.799189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.809180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.819184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.429362][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.837685][ T1244] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 181.837710][ T1244] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 181.849343][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 181.867630][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.867662][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.867683][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.867720][ T37] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 181.867742][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.119943][ T37] usb 3-1: config 0 descriptor?? [ 182.648581][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 182.648665][ T37] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 182.686828][ T37] usb 3-1: USB disconnect, device number 4 [ 185.357295][ T1244] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 185.357373][ T1244] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 185.651971][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.075637][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 186.254044][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 186.254770][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 186.322023][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 186.339294][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 186.348772][ T6524] ceph: No mds server is up or the cluster is laggy [ 186.601370][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 186.601540][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 186.632032][ T6544] loop0: detected capacity change from 0 to 256 [ 186.713691][ T6550] loop2: detected capacity change from 0 to 2048 [ 186.738300][ T6544] FAT-fs (loop0): Directory bread(block 64) failed [ 186.738329][ T6544] FAT-fs (loop0): Directory bread(block 65) failed [ 186.738434][ T6544] FAT-fs (loop0): Directory bread(block 66) failed [ 186.738474][ T6544] FAT-fs (loop0): Directory bread(block 67) failed [ 186.738672][ T6544] FAT-fs (loop0): Directory bread(block 68) failed [ 186.738693][ T6544] FAT-fs (loop0): Directory bread(block 69) failed [ 186.738779][ T6544] FAT-fs (loop0): Directory bread(block 70) failed [ 186.738799][ T6544] FAT-fs (loop0): Directory bread(block 71) failed [ 186.738902][ T6544] FAT-fs (loop0): Directory bread(block 72) failed [ 186.738922][ T6544] FAT-fs (loop0): Directory bread(block 73) failed [ 187.382603][ T6554] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 187.382673][ T6554] netlink: 228 bytes leftover after parsing attributes in process `syz.0.182'. [ 188.249777][ T1244] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 188.249859][ T1244] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 188.413438][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.662595][ T6550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.105206][ T6550] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 189.922219][ T6590] capability: warning: `syz.1.203' uses deprecated v2 capabilities in a way that may be insecure [ 190.457191][ T6594] loop2: detected capacity change from 0 to 1024 [ 190.722668][ T6594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.979646][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 193.646760][ T6616] loop3: detected capacity change from 0 to 256 [ 193.715580][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.766916][ T6616] FAT-fs (loop3): Directory bread(block 64) failed [ 193.766945][ T6616] FAT-fs (loop3): Directory bread(block 65) failed [ 193.767023][ T6616] FAT-fs (loop3): Directory bread(block 66) failed [ 193.767042][ T6616] FAT-fs (loop3): Directory bread(block 67) failed [ 193.767117][ T6616] FAT-fs (loop3): Directory bread(block 68) failed [ 193.767144][ T6616] FAT-fs (loop3): Directory bread(block 69) failed [ 193.767219][ T6616] FAT-fs (loop3): Directory bread(block 70) failed [ 193.767237][ T6616] FAT-fs (loop3): Directory bread(block 71) failed [ 193.767312][ T6616] FAT-fs (loop3): Directory bread(block 72) failed [ 193.767331][ T6616] FAT-fs (loop3): Directory bread(block 73) failed [ 195.008231][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.621142][ T6628] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 195.621164][ T6628] netlink: 228 bytes leftover after parsing attributes in process `syz.3.207'. [ 196.277948][ T6559] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.749673][ T6559] usb 5-1: Using ep0 maxpacket: 32 [ 197.515721][ T6559] usb 5-1: device descriptor read/all, error -71 [ 198.790920][ T5726] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.865577][ T6633] gtp0: entered allmulticast mode [ 198.880602][ T6633] team0: Device gtp0 is of different type [ 198.989005][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 199.517097][ T5726] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 199.517126][ T5726] usb 2-1: config 2 has no interface number 0 [ 199.517173][ T5726] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 199.517200][ T5726] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.526260][ T5726] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 199.526288][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.526322][ T5726] usb 2-1: Product: syz [ 199.526379][ T5726] usb 2-1: Manufacturer: syz [ 199.526431][ T5726] usb 2-1: SerialNumber: syz [ 199.624246][ T5726] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 199.660697][ T6667] loop2: detected capacity change from 0 to 128 [ 199.784621][ T6667] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 200.352992][ T5726] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 200.475278][ T5726] usb 2-1: USB disconnect, device number 6 [ 200.827888][ T5726] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 200.846797][ T5726] kobil_sct 2-1:2.45: device disconnected [ 202.402420][ T5613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.402447][ T5613] FAT-fs (loop2): Filesystem has been set read-only [ 203.653384][ T6710] loop1: detected capacity change from 0 to 256 [ 203.743060][ T6710] FAT-fs (loop1): Directory bread(block 64) failed [ 203.743093][ T6710] FAT-fs (loop1): Directory bread(block 65) failed [ 203.743201][ T6710] FAT-fs (loop1): Directory bread(block 66) failed [ 203.743226][ T6710] FAT-fs (loop1): Directory bread(block 67) failed [ 203.743326][ T6710] FAT-fs (loop1): Directory bread(block 68) failed [ 203.743358][ T6710] FAT-fs (loop1): Directory bread(block 69) failed [ 203.743480][ T6710] FAT-fs (loop1): Directory bread(block 70) failed [ 203.743505][ T6710] FAT-fs (loop1): Directory bread(block 71) failed [ 203.743633][ T6710] FAT-fs (loop1): Directory bread(block 72) failed [ 203.743656][ T6710] FAT-fs (loop1): Directory bread(block 73) failed [ 204.434480][ T6713] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 204.434552][ T6713] netlink: 228 bytes leftover after parsing attributes in process `syz.1.223'. [ 205.515434][ T6718] loop4: detected capacity change from 0 to 4096 [ 205.862302][ T5726] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.871569][ T6718] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 206.081663][ T6718] ntfs3(loop4): Failed to load $Extend (-22). [ 206.081688][ T6718] ntfs3(loop4): Failed to initialize $Extend. [ 206.134589][ T6735] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by ""[6735] [ 206.306276][ T6733] loop2: detected capacity change from 0 to 32768 [ 206.318907][ T6733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.231 (6733) [ 206.339617][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 206.363874][ T5726] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 206.363899][ T5726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.407326][ T6733] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.407356][ T6733] BTRFS info (device loop2): using sha256 checksum algorithm [ 206.443063][ T5726] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.443832][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.443847][ T5726] usb 4-1: Product: syz [ 206.443856][ T5726] usb 4-1: Manufacturer: syz [ 206.443865][ T5726] usb 4-1: SerialNumber: syz [ 206.512312][ T5726] usb 4-1: 0:2 : does not exist [ 206.755563][ T6733] BTRFS info (device loop2): setting nodatasum [ 206.755592][ T6733] BTRFS info (device loop2): enabling ssd optimizations [ 206.755616][ T6733] BTRFS info (device loop2): turning on async discard [ 206.755637][ T6733] BTRFS info (device loop2): enabling free space tree [ 206.908219][ T6729] bridge1: entered promiscuous mode [ 206.908244][ T6729] bridge1: entered allmulticast mode [ 207.007197][ T6729] team0: Port device bridge1 added [ 208.169741][ T5726] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 208.195093][ T6761] cgroup: fork rejected by pids controller in /syz0 [ 208.398985][ T6766] loop1: detected capacity change from 0 to 256 [ 208.490939][ T6766] FAT-fs (loop1): Directory bread(block 64) failed [ 208.490969][ T6766] FAT-fs (loop1): Directory bread(block 65) failed [ 208.491163][ T6766] FAT-fs (loop1): Directory bread(block 66) failed [ 208.491186][ T6766] FAT-fs (loop1): Directory bread(block 67) failed [ 208.491281][ T6766] FAT-fs (loop1): Directory bread(block 68) failed [ 208.491303][ T6766] FAT-fs (loop1): Directory bread(block 69) failed [ 208.491389][ T6766] FAT-fs (loop1): Directory bread(block 70) failed [ 208.491410][ T6766] FAT-fs (loop1): Directory bread(block 71) failed [ 208.491498][ T6766] FAT-fs (loop1): Directory bread(block 72) failed [ 208.491523][ T6766] FAT-fs (loop1): Directory bread(block 73) failed [ 209.147402][ T6771] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 209.147460][ T6771] netlink: 228 bytes leftover after parsing attributes in process `syz.1.237'. [ 209.538006][ T5726] usb 4-1: USB disconnect, device number 5 [ 210.127770][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.277731][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.779394][ T5726] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 211.966533][ T6786] netlink: 182 bytes leftover after parsing attributes in process `syz.4.242'. [ 212.949755][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 212.954269][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 212.963945][ T5726] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.963975][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.963996][ T5726] usb 2-1: Product: syz [ 212.964011][ T5726] usb 2-1: Manufacturer: syz [ 212.964027][ T5726] usb 2-1: SerialNumber: syz [ 213.133479][ T5726] usb 2-1: config 0 descriptor?? [ 213.178603][ T5726] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 213.178639][ T5726] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 213.368540][ T5619] usb 1-1: USB disconnect, device number 2 [ 213.784844][ T5726] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 214.015450][ T1194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.035754][ T6796] binder: 6795:6796 unknown command 0 [ 214.035767][ T6796] binder: 6795:6796 ioctl c0306201 200000004a40 returned -22 [ 214.219099][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.308835][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.313294][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.354972][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.371456][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.038457][ T5726] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 215.106176][ T5726] em28xx 2-1:0.0: board has no eeprom [ 215.459538][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.465099][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.588433][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.624386][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.640125][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.832335][ T5726] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 215.832363][ T5726] em28xx 2-1:0.0: dvb set to bulk mode. [ 215.832666][ T5619] em28xx 2-1:0.0: Binding DVB extension [ 215.964153][ T5726] usb 2-1: USB disconnect, device number 7 [ 216.041047][ T5726] em28xx 2-1:0.0: Disconnecting em28xx [ 216.152206][ T6809] loop2: detected capacity change from 0 to 256 [ 216.195293][ T5619] em28xx 2-1:0.0: Registering input extension [ 216.195509][ T5726] em28xx 2-1:0.0: Closing input extension [ 216.245434][ T6809] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.245451][ T6809] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 216.324704][ T6809] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 216.325362][ T6809] exFAT-fs (loop2): failed to load alloc-bitmap [ 216.325373][ T6809] exFAT-fs (loop2): failed to recognize exfat type [ 216.560321][ T1194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.597179][ T5726] em28xx 2-1:0.0: Freeing device [ 216.974283][ T6824] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.249'. [ 217.859656][ T5623] Bluetooth: hci2: command tx timeout [ 219.371962][ T6831] loop3: detected capacity change from 0 to 32768 [ 219.372785][ T6831] btrfs: Deprecated parameter 'usebackuproot' [ 219.374560][ T6831] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 219.429576][ T6831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.252 (6831) [ 219.498517][ T6831] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.498550][ T6831] BTRFS info (device loop3): using crc32c checksum algorithm [ 219.947350][ T5623] Bluetooth: hci2: command tx timeout [ 220.101738][ T67] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 220.102109][ T6831] BTRFS error (device loop3): failed to load root extent [ 220.102141][ T6831] BTRFS warning (device loop3): try to load backup roots slot 1 [ 220.250105][ T1466] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 220.306464][ T6831] BTRFS warning (device loop3): couldn't read tree root [ 220.306490][ T6831] BTRFS warning (device loop3): try to load backup roots slot 2 [ 220.366424][ T67] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 220.366536][ T6831] BTRFS warning (device loop3): couldn't read tree root [ 220.366556][ T6831] BTRFS warning (device loop3): try to load backup roots slot 3 [ 220.428010][ T6831] BTRFS info (device loop3): rebuilding free space tree [ 220.501336][ T1194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.552590][ T6831] BTRFS info (device loop3): checking UUID tree [ 220.563587][ T6831] BTRFS info (device loop3): enabling ssd optimizations [ 220.563642][ T6831] BTRFS info (device loop3): turning on async discard [ 220.563682][ T6831] BTRFS info (device loop3): enabling free space tree [ 220.563723][ T6831] BTRFS info (device loop3): force clearing of disk cache [ 220.563772][ T6831] BTRFS info (device loop3): enabling auto defrag [ 220.563812][ T6831] BTRFS info (device loop3): trying to use backup root at mount time [ 220.833400][ T6858] batman_adv: batadv0: Adding interface: dummy0 [ 220.833419][ T6858] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.833464][ T6858] batman_adv: batadv0: Interface activated: dummy0 [ 221.038662][ T6858] batadv0: mtu less than device minimum [ 221.081908][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.104403][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.132277][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.153407][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.172520][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.193827][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.215141][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.235925][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.258777][ T6858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.868083][ T1194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.167193][ T5623] Bluetooth: hci2: command tx timeout [ 223.434068][ T5617] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.951416][ T6887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.171062][ T5623] Bluetooth: hci2: command tx timeout [ 224.406451][ T6890] bridge0: port 3(macvlan2) entered blocking state [ 224.407139][ T6890] bridge0: port 3(macvlan2) entered disabled state [ 224.407495][ T6890] macvlan2: entered allmulticast mode [ 224.407513][ T6890] ip6gretap0: entered allmulticast mode [ 224.521894][ T6890] macvlan2: entered promiscuous mode [ 226.635482][ T6905] capability: warning: `syz.1.266' uses 32-bit capabilities (legacy support in use) [ 227.796232][ T6910] loop4: detected capacity change from 0 to 1024 [ 229.899116][ T5602] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 231.894589][ T6933] loop2: detected capacity change from 0 to 4096 [ 232.880784][ T6933] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 234.298847][ T6933] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 238.101139][ T6956] net_ratelimit: 10 callbacks suppressed [ 238.101164][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.101394][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.101625][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.101848][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.102081][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.102303][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.102537][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.102752][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.102950][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.103153][ T6956] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.214178][ T1244] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 238.317156][ T6961] process 'syz.4.280' launched './file1' with NULL argv: empty string added [ 239.466423][ T1244] usb 4-1: Using ep0 maxpacket: 16 [ 239.470998][ T1244] usb 4-1: device descriptor read/all, error -71 [ 239.616923][ T6966] loop1: detected capacity change from 0 to 256 [ 239.755086][ T6966] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 241.913913][ T6990] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 242.935431][ T6996] loop3: detected capacity change from 0 to 256 [ 243.017444][ T6996] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 243.099827][ T1194] bridge_slave_1: left allmulticast mode [ 243.126130][ T1194] bridge_slave_1: left promiscuous mode [ 243.180762][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.584973][ T1194] bridge_slave_0: left allmulticast mode [ 243.585008][ T1194] bridge_slave_0: left promiscuous mode [ 243.585534][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.689002][ T7011] binder: BINDER_SET_CONTEXT_MGR already set [ 243.689017][ T7011] binder: 7008:7011 ioctl 4018620d 200000004a80 returned -16 [ 249.858662][ T7044] IPv6: NLM_F_REPLACE set, but no existing node found! [ 254.740403][ T1194] team0: Port device bridge1 removed [ 254.971126][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.087120][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.181408][ T1194] bond0 (unregistering): Released all slaves [ 255.377020][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.854807][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.936662][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 256.787655][ T7077] team0: Port device team_slave_0 removed [ 262.728512][ T7116] binder_alloc: 7115: pid 7115 spamming oneway? 1 buffers allocated for a total size of 4096 [ 266.000785][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.001063][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.001334][ T6797] bridge_slave_0: entered allmulticast mode [ 266.133450][ T6797] bridge_slave_0: entered promiscuous mode [ 267.439455][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.439817][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.440167][ T6797] bridge_slave_1: entered allmulticast mode [ 267.498361][ T6797] bridge_slave_1: entered promiscuous mode [ 269.819229][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 270.029227][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 270.038856][ T10] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 270.038885][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.038904][ T10] usb 5-1: Product: syz [ 270.038918][ T10] usb 5-1: Manufacturer: syz [ 270.038932][ T10] usb 5-1: SerialNumber: syz [ 270.052044][ T37] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 270.971582][ T10] usb 5-1: config 0 descriptor?? [ 271.203498][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.329'. [ 271.733362][ T37] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 271.733396][ T37] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 271.733424][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.741865][ T37] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.741892][ T37] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 271.741911][ T37] usb 3-1: Product: syz [ 271.741923][ T37] usb 3-1: Manufacturer: syz [ 271.741936][ T37] usb 3-1: SerialNumber: syz [ 271.848580][ T37] usb 3-1: config 0 descriptor?? [ 271.875824][ T37] usb 3-1: selecting invalid altsetting 0 [ 272.009941][ T10] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 272.009971][ T10] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 272.146695][ T1194] hsr_slave_0: left promiscuous mode [ 272.199310][ T1194] hsr_slave_1: left promiscuous mode [ 272.293431][ T10] usb 5-1: USB disconnect, device number 9 [ 272.477952][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.478074][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.647548][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.647576][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.698764][ T37] usb 3-1: USB disconnect, device number 5 [ 278.068292][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.388487][ T1194] veth1_macvtap: left promiscuous mode [ 278.388664][ T1194] veth0_macvtap: left promiscuous mode [ 278.445021][ T1194] veth1_vlan: left promiscuous mode [ 278.512159][ T1194] veth0_vlan: left promiscuous mode [ 287.011590][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.746816][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.751042][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.760473][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.762350][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.343377][ T5623] Bluetooth: hci5: command tx timeout [ 293.220764][ T5623] Bluetooth: hci5: command tx timeout [ 295.290040][ T5623] Bluetooth: hci5: command tx timeout [ 295.531203][ T7239] 9pnet_fd: p9_fd_create_tcp (7239): problem connecting socket to 127.0.0.1 [ 296.291518][ T5600] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 297.804699][ T5623] Bluetooth: hci5: command tx timeout [ 297.829214][ T5600] usb 4-1: Using ep0 maxpacket: 16 [ 297.860772][ T5600] usb 4-1: config 0 has no interfaces? [ 297.863274][ T5600] usb 4-1: config 0 has no interfaces? [ 297.864668][ T5600] usb 4-1: config 0 has no interfaces? [ 297.890751][ T5600] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 297.890781][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 297.890802][ T5600] usb 4-1: Product: syz [ 297.890817][ T5600] usb 4-1: Manufacturer: syz [ 297.964760][ T5600] usb 4-1: config 0 descriptor?? [ 298.112543][ T7274] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 298.154961][ T7276] loop4: detected capacity change from 0 to 256 [ 298.177739][ T7274] loop2: detected capacity change from 0 to 128 [ 298.186136][ T7274] FAT-fs (loop2): bogus sectors per cluster 0 [ 298.186154][ T7274] FAT-fs (loop2): Can't find a valid FAT filesystem [ 298.298229][ T7276] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 298.586341][ T7276] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 298.851707][ T38] audit: type=1800 audit(298.382:3): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.353" name="bus" dev="loop4" ino=1048632 res=0 errno=0 [ 299.210334][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 299.246205][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 299.289841][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 299.386969][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 299.556646][ T7295] TCP: TCP_TX_DELAY enabled [ 300.774042][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 302.153421][ T5600] usb 4-1: USB disconnect, device number 8 [ 302.228833][ T7290] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 302.232837][ T7291] bond1: entered promiscuous mode [ 302.232857][ T7291] bridge1: entered promiscuous mode [ 302.233361][ T7291] bond1: entered allmulticast mode [ 302.233376][ T7291] bridge1: entered allmulticast mode [ 302.236990][ T7291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.624472][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 302.781918][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 302.797292][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 302.797322][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.797343][ T10] usb 2-1: Product: syz [ 302.797359][ T10] usb 2-1: Manufacturer: syz [ 302.797374][ T10] usb 2-1: SerialNumber: syz [ 302.880157][ T10] usb 2-1: config 0 descriptor?? [ 303.451991][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 308.640761][ T10] gspca_ov534_9: reg_r err -110 [ 308.879217][ T10] gspca_ov534_9: Unknown sensor 0000 [ 308.879292][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 308.974339][ T10] usb 2-1: USB disconnect, device number 8 [ 310.746397][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 312.811920][ T7375] loop2: detected capacity change from 0 to 8 [ 312.987136][ T7378] netlink: 'syz.1.375': attribute type 32 has an invalid length. [ 313.586842][ T7383] SQUASHFS error: lzo decompression failed, data probably corrupt [ 313.587124][ T7383] SQUASHFS error: Failed to read block 0x0: -5 [ 313.589547][ T7383] SQUASHFS error: Failed to read block 0xff: -5 [ 313.597550][ T7383] SQUASHFS error: lzo decompression failed, data probably corrupt [ 313.597786][ T7383] SQUASHFS error: Failed to read block 0x0: -5 [ 313.719245][ T38] audit: type=1800 audit(313.192:4): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.373" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 315.543221][ T1194] bridge_slave_1: left allmulticast mode [ 315.543256][ T1194] bridge_slave_1: left promiscuous mode [ 315.543546][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.283316][ T1194] bridge_slave_0: left allmulticast mode [ 317.283351][ T1194] bridge_slave_0: left promiscuous mode [ 317.283623][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.335625][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.957997][ T1194] bond0 (unregistering): Released all slaves [ 318.035025][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 327.480111][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.480469][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.482759][ T7219] bridge_slave_0: entered allmulticast mode [ 327.987905][ T7219] bridge_slave_0: entered promiscuous mode [ 328.583507][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.583856][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.584175][ T7219] bridge_slave_1: entered allmulticast mode [ 328.668433][ T7219] bridge_slave_1: entered promiscuous mode [ 330.571024][ T7219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.646253][ T7219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.679858][ T7468] loop2: detected capacity change from 0 to 32768 [ 330.684239][ T7468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.393 (7468) [ 330.726846][ T7468] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.726879][ T7468] BTRFS info (device loop2): using sha256 checksum algorithm [ 331.031746][ T7468] BTRFS info (device loop2): enabling ssd optimizations [ 331.031771][ T7468] BTRFS info (device loop2): turning on async discard [ 331.031787][ T7468] BTRFS info (device loop2): enabling free space tree [ 332.647552][ T7219] team0: Port device team_slave_0 added [ 333.074520][ T7219] team0: Port device team_slave_1 added [ 333.572283][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.572299][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.572324][ T7219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.695556][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 333.726891][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.726904][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.726924][ T7219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.946915][ T7219] hsr_slave_0: entered promiscuous mode [ 333.955704][ T7219] hsr_slave_1: entered promiscuous mode [ 336.218470][ T7525] loop4: detected capacity change from 0 to 32768 [ 336.316610][ T7525] loop4: p1 p2 p3 < p5 p6 > [ 336.327574][ T7525] loop4: p2 size 16775168 extends beyond EOD, truncated [ 336.335807][ T7525] loop4: p5 start 4294970168 is beyond EOD, truncated [ 336.480359][ T7521] loop3: detected capacity change from 0 to 256 [ 341.359425][ T7551] netlink: 60 bytes leftover after parsing attributes in process `syz.1.404'. [ 344.445777][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.134916][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.161958][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.178088][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.202012][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.354792][ T5623] Bluetooth: hci2: command tx timeout [ 348.299739][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 348.300150][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 348.300171][ T7590] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 348.300186][ T7590] UDF-fs: Scanning with blocksize 512 failed [ 348.302316][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 348.302553][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 348.302572][ T7590] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 348.302584][ T7590] UDF-fs: Scanning with blocksize 1024 failed [ 348.303541][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 348.303737][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 348.303757][ T7590] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 348.303771][ T7590] UDF-fs: Scanning with blocksize 2048 failed [ 348.304499][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 348.304691][ T7590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 348.304711][ T7590] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 348.304724][ T7590] UDF-fs: Scanning with blocksize 4096 failed [ 348.304735][ T7590] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 349.386858][ T5623] Bluetooth: hci2: command tx timeout [ 351.450038][ T5623] Bluetooth: hci2: command tx timeout [ 352.569420][ T7266] udevd[7266]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 352.641222][ T7247] udevd[7247]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 352.902772][ T7309] udevd[7309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 352.903616][ T7264] udevd[7264]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 353.534130][ T5623] Bluetooth: hci2: command tx timeout [ 354.361738][ T7617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 354.677981][ T1417] bridge_slave_1: left allmulticast mode [ 354.678018][ T1417] bridge_slave_1: left promiscuous mode [ 354.678300][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.770683][ T1417] bridge_slave_0: left allmulticast mode [ 354.770724][ T1417] bridge_slave_0: left promiscuous mode [ 354.770951][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.886439][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 355.889197][ T7634] netlink: 44 bytes leftover after parsing attributes in process `syz.3.422'. [ 356.739041][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.914627][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.010230][ T1417] bond0 (unregistering): Released all slaves [ 360.870928][ T7667] loop3: detected capacity change from 0 to 512 [ 360.894081][ T7667] EXT4-fs: Ignoring removed nobh option [ 360.972052][ T7667] EXT4-fs (loop3): orphan cleanup on readonly fs [ 366.387918][ T1417] hsr_slave_0: left promiscuous mode [ 366.464412][ T1417] hsr_slave_1: left promiscuous mode [ 366.466689][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.503743][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.565174][ T7667] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.426: corrupted inode contents [ 366.565209][ T7667] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 366.569841][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 366.569865][ C1] EXT4-fs (loop3): initial error at time 366: ext4_do_update_inode:5690: inode 15 [ 366.569898][ C1] EXT4-fs (loop3): last error at time 366: ext4_do_update_inode:5690: inode 15 [ 366.709817][ T7667] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 366.709846][ T7667] loop3: lost filesystem error report for type 5 error -117 [ 366.738128][ T7667] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.426: corrupted inode contents [ 366.738169][ T7667] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 366.738500][ T7667] EXT4-fs error (device loop3): ext4_evict_inode:315: inode #15: comm syz.3.426: mark_inode_dirty error [ 366.738527][ T7667] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 366.739041][ T7667] EXT4-fs (loop3): 1 orphan inode deleted [ 368.022542][ T7667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 368.129360][ T32] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 368.620371][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.766562][ T7703] loop2: detected capacity change from 0 to 128 [ 369.249627][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 369.423487][ T10] usb 3-1: config index 0 descriptor too short (expected 14330, got 27) [ 369.423516][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.423536][ T10] usb 3-1: config 0 has no interfaces? [ 369.423576][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 369.423602][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.614000][ T10] usb 3-1: config 0 descriptor?? [ 370.940272][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.944425][ T32] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 370.944460][ T32] usb 2-1: can't read configurations, error -71 [ 371.131826][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 371.246185][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 373.537654][ T5602] usb 3-1: USB disconnect, device number 6 [ 378.436615][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.461324][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.464299][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.465687][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.466398][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.088636][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.529302][ T5623] Bluetooth: hci5: command tx timeout [ 383.793286][ T7768] loop2: detected capacity change from 0 to 2048 [ 384.774481][ T7768] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 384.774625][ T7768] System zones: 0-4 [ 384.794306][ T7768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.172073][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.332977][ T7773] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7774] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[7773] [ 385.609295][ T5623] Bluetooth: hci5: command tx timeout [ 387.697177][ T5623] Bluetooth: hci5: command tx timeout [ 392.865343][ T5623] Bluetooth: hci5: command tx timeout [ 395.621427][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.671263][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.715242][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.731441][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.733031][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.119072][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.422630][ T7838] loop1: detected capacity change from 0 to 40427 [ 396.430065][ T7838] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 396.430089][ T7838] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 396.441675][ T7838] F2FS-fs (loop1): invalid crc value [ 396.548522][ T7838] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 396.611852][ T7838] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 396.611878][ T7838] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 397.563459][ T38] audit: type=1800 audit(396.642:5): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.459" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 397.851698][ T5623] Bluetooth: hci3: command tx timeout [ 398.826144][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 398.922572][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 398.943243][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 398.965001][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 398.980976][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 399.398831][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.543302][ T57] kworker/u8:3: attempt to access beyond end of device [ 399.543302][ T57] loop1: rw=1, sector=77824, nr_sectors = 1464 limit=40427 [ 401.184060][ T5626] Bluetooth: hci6: command tx timeout [ 401.460987][ T5626] Bluetooth: hci3: command tx timeout [ 404.105000][ T5626] Bluetooth: hci6: command tx timeout [ 404.105026][ T5626] Bluetooth: hci3: command tx timeout [ 404.892056][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.505506][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.730965][ T7884] syz.1.464 uses obsolete (PF_INET,SOCK_PACKET) [ 406.754700][ T5623] Bluetooth: hci3: command tx timeout [ 406.754733][ T5623] Bluetooth: hci6: command tx timeout [ 409.059899][ T5626] Bluetooth: hci6: command tx timeout [ 411.733977][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.734266][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.735813][ T7737] bridge_slave_0: entered allmulticast mode [ 411.777383][ T7737] bridge_slave_0: entered promiscuous mode [ 411.924379][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.924598][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.924992][ T7737] bridge_slave_1: entered allmulticast mode [ 411.976801][ T7737] bridge_slave_1: entered promiscuous mode [ 412.668625][ T7924] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 412.680528][ T7924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 412.898603][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.108949][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.208746][ T7831] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.217225][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.217419][ T7831] bridge_slave_0: entered allmulticast mode [ 413.247395][ T7831] bridge_slave_0: entered promiscuous mode [ 413.356711][ T7831] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.356962][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.357163][ T7831] bridge_slave_1: entered allmulticast mode [ 413.381933][ T7831] bridge_slave_1: entered promiscuous mode [ 413.394904][ T7737] team0: Port device team_slave_0 added [ 413.395332][ T7933] loop1: detected capacity change from 0 to 256 [ 413.396432][ T7933] exfat: Deprecated parameter 'utf8' [ 413.425557][ T7933] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 414.719637][ T67] bridge_slave_1: left allmulticast mode [ 414.719673][ T67] bridge_slave_1: left promiscuous mode [ 414.719951][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.796915][ T67] bridge_slave_0: left allmulticast mode [ 414.796941][ T67] bridge_slave_0: left promiscuous mode [ 414.797712][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.163968][ T67] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 416.329004][ T67] bridge1 (unregistering): left promiscuous mode [ 416.686982][ T67] bridge1 (unregistering): left allmulticast mode [ 418.567451][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.640069][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.684379][ T67] bond0 (unregistering): Released all slaves [ 418.704281][ T67] bond1 (unregistering): Released all slaves [ 418.803669][ T7737] team0: Port device team_slave_1 added [ 419.141909][ T7949] loop2: detected capacity change from 0 to 512 [ 419.148201][ T7949] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 419.148218][ T7949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 419.207602][ T7949] EXT4-fs (loop2): 1 truncate cleaned up [ 419.221176][ T7949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.447526][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.591552][ T67] tipc: Left network mode [ 419.632425][ T7831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.757121][ T7831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.761143][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.761155][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.761178][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.075589][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.710515][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.710533][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.710563][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.768033][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.768468][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.768821][ T7857] bridge_slave_0: entered allmulticast mode [ 420.797537][ T7857] bridge_slave_0: entered promiscuous mode [ 420.937540][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.947798][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.967875][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.986118][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.033450][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.033799][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.034117][ T7857] bridge_slave_1: entered allmulticast mode [ 421.038930][ T7857] bridge_slave_1: entered promiscuous mode [ 422.374547][ T7831] team0: Port device team_slave_0 added [ 423.098463][ T7831] team0: Port device team_slave_1 added [ 423.132031][ T5626] Bluetooth: hci0: command tx timeout [ 423.243853][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.523259][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.683947][ T7831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.683963][ T7831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.683986][ T7831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.333283][ T7737] hsr_slave_0: entered promiscuous mode [ 424.342316][ T7737] hsr_slave_1: entered promiscuous mode [ 424.474256][ T7831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.474272][ T7831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.474316][ T7831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.929419][ T7857] team0: Port device team_slave_0 added [ 425.033914][ T7857] team0: Port device team_slave_1 added [ 425.210095][ T5626] Bluetooth: hci0: command tx timeout [ 426.659434][ T67] hsr_slave_0: left promiscuous mode [ 426.679751][ T67] hsr_slave_1: left promiscuous mode [ 426.777889][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.777954][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.872668][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.872687][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.140637][ T67] veth1_macvtap: left promiscuous mode [ 427.140726][ T67] veth0_macvtap: left promiscuous mode [ 427.140919][ T67] veth1_vlan: left promiscuous mode [ 427.141124][ T67] veth0_vlan: left promiscuous mode [ 429.312991][ T5626] Bluetooth: hci0: command tx timeout [ 430.539979][ T67] team0 (unregistering): Port device team_slave_1 removed [ 430.572557][ T67] team0 (unregistering): Port device team_slave_0 removed [ 430.762536][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.762554][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.762581][ T7857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.870464][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 430.940461][ T7831] hsr_slave_0: entered promiscuous mode [ 430.948236][ T7831] hsr_slave_1: entered promiscuous mode [ 430.966951][ T7831] debugfs: 'hsr0' already exists in 'hsr' [ 430.966973][ T7831] Cannot create hsr debugfs directory [ 431.083939][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.083952][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.083972][ T7857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.369889][ T5626] Bluetooth: hci0: command tx timeout [ 433.027471][ T7857] hsr_slave_0: entered promiscuous mode [ 433.030098][ T7857] hsr_slave_1: entered promiscuous mode [ 433.032078][ T7857] debugfs: 'hsr0' already exists in 'hsr' [ 433.032100][ T7857] Cannot create hsr debugfs directory [ 434.301025][ T6559] IPVS: starting estimator thread 0... [ 434.705705][ T8023] IPVS: using max 11 ests per chain, 26400 per kthread [ 436.263300][ T7737] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 436.308737][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.343090][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 436.581815][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.624614][ T7737] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 436.645945][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.746124][ T7737] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 436.808039][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.956681][ T7737] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.068415][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.460193][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.336635][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.817889][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.142561][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.236004][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.424558][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.425342][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.837701][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.432552][ T8076] loop2: detected capacity change from 0 to 512 [ 443.707516][ T5626] Bluetooth: hci2: command tx timeout [ 444.380902][ T8076] EXT4-fs (loop2): orphan cleanup on readonly fs [ 444.445726][ T8076] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 444.451486][ T8076] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 444.454393][ T8076] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.495: couldn't read orphan inode 26 (err -116) [ 444.454465][ T8076] loop2: lost filesystem error report for type 5 error -116 [ 444.469114][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 444.470284][ C1] EXT4-fs (loop2): initial error at time 444: ext4_orphan_get:1402 [ 444.470363][ C1] EXT4-fs (loop2): last error at time 444: ext4_orphan_get:1402 [ 444.565830][ T8076] EXT4-fs (loop2): Remounting filesystem read-only [ 444.620215][ T8076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 445.769131][ T5626] Bluetooth: hci2: command tx timeout [ 446.191761][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.597454][ T8089] loop2: detected capacity change from 0 to 512 [ 447.645917][ T8089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.853854][ T5626] Bluetooth: hci2: command tx timeout [ 447.878169][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.207592][ T7831] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.252999][ T7831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.276303][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.378945][ T7831] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.462499][ T7831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.930381][ T5626] Bluetooth: hci2: command tx timeout [ 451.586886][ T7831] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 451.668835][ T7831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.676517][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.676838][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.677121][ T7957] bridge_slave_0: entered allmulticast mode [ 451.707580][ T7957] bridge_slave_0: entered promiscuous mode [ 451.755330][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 451.760507][ T7831] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.818214][ T7831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.830690][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.831038][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.831308][ T7957] bridge_slave_1: entered allmulticast mode [ 451.836980][ T7957] bridge_slave_1: entered promiscuous mode [ 452.774911][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.188167][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.581423][ T7957] team0: Port device team_slave_0 added [ 453.612995][ T7957] team0: Port device team_slave_1 added [ 453.998685][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.143850][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.143861][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.143879][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.175522][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.175537][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.175558][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.312374][ T5747] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 454.487110][ T5747] usb 3-1: unable to get BOS descriptor or descriptor too short [ 454.499845][ T5747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.499872][ T5747] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 454.499927][ T5747] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 454.503130][ T5747] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 454.503160][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.503173][ T5747] usb 3-1: Product: syz [ 454.503181][ T5747] usb 3-1: Manufacturer: syz [ 454.503199][ T5747] usb 3-1: SerialNumber: syz [ 454.698033][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.246330][ T5747] usb 3-1: Can't get UAC3 power state for id 10 [ 455.258557][ T5747] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 455.275466][ T5747] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 455.275495][ T5747] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 455.275513][ T5747] usb 3-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 455.380380][ T7957] hsr_slave_0: entered promiscuous mode [ 455.385765][ T7957] hsr_slave_1: entered promiscuous mode [ 455.400157][ T7957] debugfs: 'hsr0' already exists in 'hsr' [ 455.400184][ T7957] Cannot create hsr debugfs directory [ 455.634510][ T5747] usb 3-1: USB disconnect, device number 7 [ 455.963112][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.028226][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.110827][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.131496][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.136920][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.140604][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.528103][ T8154] loop2: detected capacity change from 0 to 4096 [ 456.540601][ T8141] udevd[8141]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.515583][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.766082][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 458.384324][ T5626] Bluetooth: hci4: command tx timeout [ 460.093939][ T5747] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 460.112011][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 460.192347][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 460.193815][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 460.207831][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 460.220710][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 460.249205][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 460.363731][ T5747] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 460.363761][ T5747] usb 3-1: config 0 has no interface number 0 [ 460.384017][ T5747] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 460.384047][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.384068][ T5747] usb 3-1: Product: syz [ 460.384084][ T5747] usb 3-1: Manufacturer: syz [ 460.384098][ T5747] usb 3-1: SerialNumber: syz [ 460.409222][ T5623] Bluetooth: hci4: command tx timeout [ 460.469875][ T5747] usb 3-1: config 0 descriptor?? [ 460.915700][ T5747] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 460.915731][ T5747] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 460.992228][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.992674][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.993012][ T8055] bridge_slave_0: entered allmulticast mode [ 461.006186][ T8055] bridge_slave_0: entered promiscuous mode [ 461.554473][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.554782][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.555081][ T8055] bridge_slave_1: entered allmulticast mode [ 461.571482][ T8055] bridge_slave_1: entered promiscuous mode [ 462.153466][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.489940][ T5626] Bluetooth: hci4: command tx timeout [ 462.489994][ T5623] Bluetooth: hci3: command tx timeout [ 462.758337][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.202385][ T8055] team0: Port device team_slave_0 added [ 463.365040][ T8055] team0: Port device team_slave_1 added [ 463.679836][ T67] bridge_slave_1: left allmulticast mode [ 463.679884][ T67] bridge_slave_1: left promiscuous mode [ 463.680194][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.740876][ T67] bridge_slave_0: left allmulticast mode [ 463.740917][ T67] bridge_slave_0: left promiscuous mode [ 463.747065][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.777804][ T5747] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 463.778032][ T5747] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 463.816051][ T5747] usb 3-1: USB disconnect, device number 8 [ 464.109675][ T67] macvlan2: left allmulticast mode [ 464.109700][ T67] ip6gretap0: left allmulticast mode [ 464.123264][ T67] macvlan2: left promiscuous mode [ 464.123726][ T67] bridge0: port 3(macvlan2) entered disabled state [ 464.170453][ T67] bridge_slave_1: left allmulticast mode [ 464.170481][ T67] bridge_slave_1: left promiscuous mode [ 464.170704][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.230953][ T67] bridge_slave_0: left allmulticast mode [ 464.230980][ T67] bridge_slave_0: left promiscuous mode [ 464.231166][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.569197][ T5623] Bluetooth: hci3: command tx timeout [ 464.712260][ T5623] Bluetooth: hci4: command tx timeout [ 466.979679][ T5623] Bluetooth: hci3: command tx timeout [ 470.075209][ T5623] Bluetooth: hci3: command tx timeout [ 470.380132][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.460635][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.502684][ T67] bond0 (unregistering): Released all slaves [ 470.718508][ T67] bond0 (unregistering): Released all slaves [ 474.069882][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.156134][ T8279] nfs: Unknown parameter 'ntext' [ 474.922014][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.962884][ T67] bond0 (unregistering): Released all slaves [ 476.323546][ T8285] loop2: detected capacity change from 0 to 32768 [ 476.329378][ T8285] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.517 (8285) [ 476.406378][ T8285] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 476.406476][ T8285] BTRFS info (device loop2): using sha256 checksum algorithm [ 476.671968][ T8285] BTRFS info (device loop2): enabling ssd optimizations [ 476.672002][ T8285] BTRFS info (device loop2): turning on async discard [ 476.672034][ T8285] BTRFS info (device loop2): enabling free space tree [ 476.781265][ T38] audit: type=1800 audit(476.322:6): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.517" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 476.862131][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.862149][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.862177][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.554525][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.554539][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.554561][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.003913][ T5613] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 479.188742][ T8055] hsr_slave_0: entered promiscuous mode [ 479.235761][ T8055] hsr_slave_1: entered promiscuous mode [ 479.237496][ T8055] debugfs: 'hsr0' already exists in 'hsr' [ 479.237637][ T8055] Cannot create hsr debugfs directory [ 481.942242][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.537357][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.593858][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.597407][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.598396][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.070792][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.071137][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.071469][ T8150] bridge_slave_0: entered allmulticast mode [ 483.078855][ T8150] bridge_slave_0: entered promiscuous mode [ 484.733694][ T5623] Bluetooth: hci5: command tx timeout [ 484.768718][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.783457][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.783767][ T8150] bridge_slave_1: entered allmulticast mode [ 484.802612][ T8150] bridge_slave_1: entered promiscuous mode [ 485.594292][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.888472][ T8385] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 486.457071][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.749179][ T67] hsr_slave_0: left promiscuous mode [ 486.769318][ T67] hsr_slave_1: left promiscuous mode [ 486.770258][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.770276][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.818861][ T5623] Bluetooth: hci5: command tx timeout [ 487.912237][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.912263][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.992378][ T5623] Bluetooth: hci5: command tx timeout [ 489.039497][ T67] hsr_slave_0: left promiscuous mode [ 489.090263][ T67] hsr_slave_1: left promiscuous mode [ 489.091255][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.091272][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.122152][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.123684][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.270229][ T67] veth1_macvtap: left promiscuous mode [ 489.270317][ T67] veth0_macvtap: left promiscuous mode [ 489.302381][ T67] veth1_vlan: left promiscuous mode [ 489.302515][ T67] veth0_vlan: left promiscuous mode [ 489.419481][ T67] veth1_macvtap: left promiscuous mode [ 489.419558][ T67] veth0_macvtap: left promiscuous mode [ 489.419754][ T67] veth1_vlan: left promiscuous mode [ 489.419885][ T67] veth0_vlan: left promiscuous mode [ 492.312274][ T5623] Bluetooth: hci5: command tx timeout [ 492.641878][ T67] team0 (unregistering): Port device team_slave_1 removed [ 492.721319][ T67] team0 (unregistering): Port device team_slave_0 removed [ 494.529918][ T67] team0 (unregistering): Port device team_slave_1 removed [ 494.590032][ T67] team0 (unregistering): Port device team_slave_0 removed [ 494.843459][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.843774][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.844006][ T8191] bridge_slave_0: entered allmulticast mode [ 494.846822][ T8191] bridge_slave_0: entered promiscuous mode [ 495.082383][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.082724][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.082983][ T8191] bridge_slave_1: entered allmulticast mode [ 495.086678][ T8191] bridge_slave_1: entered promiscuous mode [ 495.098931][ T8150] team0: Port device team_slave_0 added [ 495.180712][ T8150] team0: Port device team_slave_1 added [ 495.418096][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.562139][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.784678][ T8423] netlink: 76 bytes leftover after parsing attributes in process `syz.2.528'. [ 499.557970][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.729675][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.784111][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.946822][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.948070][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 500.125583][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.125602][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.125634][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.561703][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.561722][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.561754][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.634143][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.643375][ T8191] team0: Port device team_slave_0 added [ 501.732258][ T8191] team0: Port device team_slave_1 added [ 502.009398][ T5626] Bluetooth: hci0: command tx timeout [ 502.290770][ T8461] loop2: detected capacity change from 0 to 40427 [ 502.297246][ T8461] F2FS-fs (loop2): invalid crc value [ 502.532929][ T8461] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 502.564472][ T8461] F2FS-fs (loop2): Start checkpoint disabled! [ 502.629591][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.629609][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.629640][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.733753][ T8461] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 502.734563][ T8461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 503.268753][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.268766][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.268788][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.402893][ T8150] hsr_slave_0: entered promiscuous mode [ 503.439461][ T8150] hsr_slave_1: entered promiscuous mode [ 503.446743][ T8150] debugfs: 'hsr0' already exists in 'hsr' [ 503.446762][ T8150] Cannot create hsr debugfs directory [ 503.605000][ T13] kworker/u8:1: attempt to access beyond end of device [ 503.605000][ T13] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 503.605116][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 503.605144][ T13] Tainted: [L]=SOFTLOCKUP [ 503.605150][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.605163][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 503.605200][ T13] Call Trace: [ 503.605214][ T13] [ 503.605222][ T13] dump_stack_lvl+0xe8/0x150 [ 503.605250][ T13] f2fs_stop_checkpoint+0x383/0x540 [ 503.605275][ T13] f2fs_write_end_io+0x1274/0x1740 [ 503.605322][ T13] __submit_merged_bio+0x256/0x6a0 [ 503.605349][ T13] __submit_merged_write_cond+0x3c9/0x4e0 [ 503.605379][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 503.605423][ T13] f2fs_write_data_pages+0x287e/0x34f0 [ 503.605481][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 503.605519][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 503.605582][ T13] ? __lock_acquire+0x6b5/0x2d10 [ 503.605626][ T13] ? __lock_acquire+0x6b5/0x2d10 [ 503.605693][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 503.605736][ T13] do_writepages+0x32e/0x550 [ 503.605765][ T13] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 503.605792][ T13] ? reacquire_held_locks+0x104/0x190 [ 503.605831][ T13] ? rt_spin_lock+0x1e0/0x400 [ 503.605875][ T13] __writeback_single_inode+0x133/0x10e0 [ 503.605902][ T13] ? rt_spin_unlock+0x160/0x200 [ 503.605938][ T13] writeback_sb_inodes+0x97f/0x1980 [ 503.605981][ T13] ? lockdep_hardirqs_on+0x7a/0x110 [ 503.606014][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 503.606082][ T13] ? rcu_is_watching+0x15/0xb0 [ 503.606115][ T13] wb_writeback+0x445/0xb00 [ 503.606143][ T13] ? queue_io+0x271/0x440 [ 503.606174][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 503.606223][ T13] wb_workfn+0x3fd/0xf20 [ 503.606257][ T13] ? look_up_lock_class+0x57/0x110 [ 503.606283][ T13] ? lapic_next_event+0x11/0x20 [ 503.606327][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 503.606362][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 503.606393][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.606426][ T13] ? process_one_work+0x8b7/0x1710 [ 503.606454][ T13] ? process_one_work+0x8b7/0x1710 [ 503.606494][ T13] ? process_one_work+0x8b7/0x1710 [ 503.606519][ T13] process_one_work+0x9a3/0x1710 [ 503.606571][ T13] ? __pfx_process_one_work+0x10/0x10 [ 503.606595][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 503.606650][ T13] worker_thread+0xba8/0x11e0 [ 503.606706][ T13] kthread+0x388/0x470 [ 503.606737][ T13] ? __pfx_worker_thread+0x10/0x10 [ 503.606762][ T13] ? __pfx_kthread+0x10/0x10 [ 503.606790][ T13] ret_from_fork+0x514/0xb70 [ 503.606815][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 503.606838][ T13] ? __switch_to+0xc79/0x1410 [ 503.606858][ T13] ? __pfx_kthread+0x10/0x10 [ 503.606886][ T13] ret_from_fork_asm+0x1a/0x30 [ 503.606925][ T13] [ 503.638519][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 504.111124][ T5626] Bluetooth: hci0: command tx timeout [ 504.580761][ T8191] hsr_slave_0: entered promiscuous mode [ 504.588879][ T8191] hsr_slave_1: entered promiscuous mode [ 504.596421][ T8191] debugfs: 'hsr0' already exists in 'hsr' [ 504.596441][ T8191] Cannot create hsr debugfs directory [ 506.169369][ T5626] Bluetooth: hci0: command tx timeout [ 507.634191][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.634599][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.634907][ T8357] bridge_slave_0: entered allmulticast mode [ 507.638686][ T8357] bridge_slave_0: entered promiscuous mode [ 507.720365][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 507.801262][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.801572][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.802028][ T8357] bridge_slave_1: entered allmulticast mode [ 507.805661][ T8357] bridge_slave_1: entered promiscuous mode [ 507.870449][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 507.874161][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.875548][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 507.909270][ T10] usb 3-1: string descriptor 0 read error: -22 [ 507.909370][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 507.909389][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 507.997736][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 508.130107][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.130542][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 508.130602][ T10] usb 3-1: media controller created [ 508.183346][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.212971][ T8503] trusted_key: encrypted_key: insufficient parameters specified [ 508.249364][ T5626] Bluetooth: hci0: command tx timeout [ 509.013051][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.089396][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.451170][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 509.655732][ T8357] team0: Port device team_slave_0 added [ 509.703614][ T8357] team0: Port device team_slave_1 added [ 509.927813][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.927832][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.927860][ T8357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.162686][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.162699][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.162718][ T8357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.333956][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.335004][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.335276][ T8441] bridge_slave_0: entered allmulticast mode [ 510.361922][ T8441] bridge_slave_0: entered promiscuous mode [ 510.386632][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.386944][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.387195][ T8441] bridge_slave_1: entered allmulticast mode [ 510.412175][ T8441] bridge_slave_1: entered promiscuous mode [ 510.748362][ T10] usb 3-1: USB disconnect, device number 9 [ 512.374731][ T8441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.426964][ T8357] hsr_slave_0: entered promiscuous mode [ 512.593758][ T8357] hsr_slave_1: entered promiscuous mode [ 513.122323][ T8357] debugfs: 'hsr0' already exists in 'hsr' [ 513.123651][ T8357] Cannot create hsr debugfs directory [ 513.442452][ T8441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.885418][ T8441] team0: Port device team_slave_0 added [ 513.922746][ T8441] team0: Port device team_slave_1 added [ 514.844060][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.844078][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.844119][ T8441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.957850][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.957861][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.957878][ T8441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.281832][ T8441] hsr_slave_0: entered promiscuous mode [ 516.284268][ T8441] hsr_slave_1: entered promiscuous mode [ 516.286324][ T8441] debugfs: 'hsr0' already exists in 'hsr' [ 516.286349][ T8441] Cannot create hsr debugfs directory [ 516.738485][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.762150][ T67] bridge_slave_1: left allmulticast mode [ 516.762196][ T67] bridge_slave_1: left promiscuous mode [ 516.762363][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.762485][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.765763][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 516.767116][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 516.768476][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 516.839512][ T8602] netlink: 'syz.2.540': attribute type 20 has an invalid length. [ 517.656807][ T67] bridge_slave_0: left allmulticast mode [ 517.656845][ T67] bridge_slave_0: left promiscuous mode [ 517.657130][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.353432][ T67] bridge_slave_1: left allmulticast mode [ 518.353469][ T67] bridge_slave_1: left promiscuous mode [ 518.353726][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.413871][ T67] bridge_slave_0: left allmulticast mode [ 518.413903][ T67] bridge_slave_0: left promiscuous mode [ 518.414155][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.589567][ T67] bridge_slave_1: left allmulticast mode [ 518.589620][ T67] bridge_slave_1: left promiscuous mode [ 518.589929][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.655173][ T67] bridge_slave_0: left allmulticast mode [ 518.655258][ T67] bridge_slave_0: left promiscuous mode [ 518.656780][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.999270][ T67] bridge_slave_1: left allmulticast mode [ 518.999306][ T67] bridge_slave_1: left promiscuous mode [ 518.999567][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.061038][ T67] bridge_slave_0: left allmulticast mode [ 519.061070][ T67] bridge_slave_0: left promiscuous mode [ 519.087500][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.367042][ T5626] Bluetooth: hci2: command tx timeout [ 521.449536][ T67] bridge_slave_1: left allmulticast mode [ 521.449574][ T67] bridge_slave_1: left promiscuous mode [ 521.449858][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.541683][ T67] bridge_slave_0: left allmulticast mode [ 521.541719][ T67] bridge_slave_0: left promiscuous mode [ 521.541971][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.794197][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 521.797732][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 521.814080][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 521.816899][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 521.817583][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 523.370586][ T8631] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 523.370610][ T8631] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8631, name: syz.2.545 [ 523.370630][ T8631] preempt_count: 1, expected: 0 [ 523.370641][ T8631] RCU nest depth: 2, expected: 2 [ 523.370658][ T8631] 4 locks held by syz.2.545/8631: [ 523.370672][ T8631] #0: ffffffff8dfc8200 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 523.370735][ T8631] #1: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 523.370804][ T8631] #2: ffffffff8dfc8200 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 523.370854][ T8631] #3: ffff888034caa8f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 523.370911][ T8631] Preemption disabled at: [ 523.370916][ T8631] [] hlist_bl_lock+0x18/0x110 [ 523.370969][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.2.545 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.370997][ T8631] Tainted: [L]=SOFTLOCKUP [ 523.371004][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.371017][ T8631] Call Trace: [ 523.371030][ T8631] [ 523.371039][ T8631] dump_stack_lvl+0xe8/0x150 [ 523.371068][ T8631] __might_resched+0x329/0x480 [ 523.371096][ T8631] ? hlist_bl_lock+0x18/0x110 [ 523.371124][ T8631] rt_spin_lock+0xc2/0x400 [ 523.371159][ T8631] ? __pfx_rt_spin_lock+0x10/0x10 [ 523.371191][ T8631] ? ip_vs_conn_new+0x14ab/0x25f0 [ 523.371225][ T8631] ip_vs_conn_new+0x14fe/0x25f0 [ 523.371257][ T8631] ? ip_vs_conn_new+0x1491/0x25f0 [ 523.371300][ T8631] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 523.371324][ T8631] ? irqentry_exit+0x218/0x730 [ 523.371346][ T8631] ? rcu_is_watching+0x15/0xb0 [ 523.371398][ T8631] ip_vs_schedule+0x10fd/0x1d70 [ 523.371469][ T8631] ? __pfx_ip_vs_schedule+0x10/0x10 [ 523.371521][ T8631] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 523.371567][ T8631] ? ip_vs_service_find+0xbc/0x3c0 [ 523.371608][ T8631] udp_conn_schedule+0x391/0x7a0 [ 523.371644][ T8631] ? __pfx_udp_conn_schedule+0x10/0x10 [ 523.371687][ T8631] ip_vs_in_hook+0xc50/0x1bf0 [ 523.371731][ T8631] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 523.371786][ T8631] ? nf_hook+0xa1/0x3a0 [ 523.371811][ T8631] ? nf_hook+0xa1/0x3a0 [ 523.371833][ T8631] ? ipv4_conntrack_defrag+0x2aa/0x5c0 [ 523.371859][ T8631] ? ipv4_conntrack_local+0x126/0x210 [ 523.371885][ T8631] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 523.371920][ T8631] nf_hook_slow+0xc5/0x220 [ 523.371948][ T8631] ? __pfx_dst_output+0x10/0x10 [ 523.371973][ T8631] nf_hook+0x22a/0x3a0 [ 523.371996][ T8631] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 523.372032][ T8631] ? nf_hook+0xa1/0x3a0 [ 523.372055][ T8631] ? __pfx_nf_hook+0x10/0x10 [ 523.372084][ T8631] ? __pfx_dst_output+0x10/0x10 [ 523.372123][ T8631] __ip_local_out+0x558/0x6a0 [ 523.372147][ T8631] ? __pfx_dst_output+0x10/0x10 [ 523.372177][ T8631] ip_local_out+0x2a/0x190 [ 523.372206][ T8631] ip_send_skb+0x45/0xc0 [ 523.372234][ T8631] udp_send_skb+0x7e4/0xf70 [ 523.372279][ T8631] udp_sendmsg+0x1937/0x21a0 [ 523.372330][ T8631] ? __pfx_udp_sendmsg+0x10/0x10 [ 523.372384][ T8631] ? irqentry_exit+0x218/0x730 [ 523.372441][ T8631] udpv6_sendmsg+0x996/0x25c0 [ 523.372481][ T8631] ? __lock_acquire+0x6b5/0x2d10 [ 523.372519][ T8631] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 523.372557][ T8631] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 523.372584][ T8631] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 523.372652][ T8631] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 523.372697][ T8631] ? inet_send_prepare+0x1b9/0x270 [ 523.372727][ T8631] ? inet6_sendmsg+0xe4/0x120 [ 523.372750][ T8631] ? __pfx_inet6_sendmsg+0x10/0x10 [ 523.372770][ T8631] sock_sendmsg_nosec+0x90/0x150 [ 523.372801][ T8631] ____sys_sendmsg+0x55c/0x870 [ 523.372830][ T8631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.372862][ T8631] ? import_iovec+0x73/0xa0 [ 523.372894][ T8631] ___sys_sendmsg+0x2a5/0x360 [ 523.372915][ T8631] ? __lock_acquire+0x6b5/0x2d10 [ 523.372951][ T8631] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.372981][ T8631] ? futex_wake+0x4af/0x580 [ 523.373040][ T8631] ? __fget_files+0x2a/0x420 [ 523.373062][ T8631] ? __fget_files+0x3a6/0x420 [ 523.373097][ T8631] __x64_sys_sendmsg+0x1c3/0x2a0 [ 523.373123][ T8631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.373156][ T8631] ? rcu_is_watching+0x15/0xb0 [ 523.373187][ T8631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.373211][ T8631] do_syscall_64+0x15f/0xf80 [ 523.373233][ T8631] ? trace_irq_disable+0x3b/0x140 [ 523.373261][ T8631] ? clear_bhb_loop+0x40/0x90 [ 523.373287][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.373308][ T8631] RIP: 0033:0x7f3d541acdd9 [ 523.373338][ T8631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.373356][ T8631] RSP: 002b:00007f3d523c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.373377][ T8631] RAX: ffffffffffffffda RBX: 00007f3d54426180 RCX: 00007f3d541acdd9 [ 523.373393][ T8631] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 523.373406][ T8631] RBP: 00007f3d54242d69 R08: 0000000000000000 R09: 0000000000000000 [ 523.373419][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.373431][ T8631] R13: 00007f3d54426218 R14: 00007f3d54426180 R15: 00007ffd1f129f68 [ 523.373466][ T8631] [ 523.423733][ T5623] Bluetooth: hci2: command tx timeout [ 524.630175][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.729957][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.801889][ T67] bond0 (unregistering): Released all slaves [ 524.889761][ T5623] Bluetooth: hci6: command tx timeout [ 524.970259][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.050087][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.111521][ T67] bond0 (unregistering): Released all slaves [ 525.299760][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.379804][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.441012][ T67] bond0 (unregistering): Released all slaves [ 525.459478][ T5623] Bluetooth: hci2: command tx timeout [ 525.649934][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.729787][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.792872][ T67] bond0 (unregistering): Released all slaves [ 525.959855][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.040616][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.100898][ T67] bond0 (unregistering): Released all slaves [ 526.979486][ T5623] Bluetooth: hci6: command tx timeout [ 527.471232][ C0] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 527.471257][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 527.471274][ C0] preempt_count: 1, expected: 0 [ 527.471284][ C0] RCU nest depth: 3, expected: 3 [ 527.471293][ C0] 8 locks held by ktimers/0/16: [ 527.471305][ C0] #0: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 527.471366][ C0] #1: ffffffff8dfc8200 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 527.471417][ C0] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x120/0x9f0 [ 527.471482][ C0] #3: ffffffff8dfc8200 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 527.471535][ C0] #4: ffffc90000157a80 ((&cp->timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 527.471579][ C0] #5: ffffffff8dfc8200 (rcu_read_lock){....}-{1:3}, at: ip_vs_conn_expire+0x257/0x2390 [ 527.471630][ C0] #6: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 527.471679][ C0] #7: ffff888034caa8f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_expire+0xd4a/0x2390 [ 527.471733][ C0] Preemption disabled at: [ 527.471738][ C0] [] hlist_bl_lock+0x18/0x110 [ 527.471775][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 527.471805][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 527.471813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.471825][ C0] Call Trace: [ 527.471832][ C0] [ 527.471840][ C0] dump_stack_lvl+0xe8/0x150 [ 527.471868][ C0] __might_resched+0x329/0x480 [ 527.471895][ C0] ? hlist_bl_lock+0x18/0x110 [ 527.471920][ C0] rt_spin_lock+0xc2/0x400 [ 527.471949][ C0] ? ip_vs_conn_expire+0x257/0x2390 [ 527.471973][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 527.472012][ C0] ip_vs_conn_expire+0xd4a/0x2390 [ 527.472035][ C0] ? trace_irq_disable+0x3b/0x140 [ 527.472070][ C0] ? ip_vs_conn_expire+0x257/0x2390 [ 527.472099][ C0] ? __pfx_ip_vs_conn_expire+0x10/0x10 [ 527.472124][ C0] ? lock_acquire+0x221/0x350 [ 527.472160][ C0] call_timer_fn+0x192/0x5e0 [ 527.472179][ C0] ? __pfx_ip_vs_conn_expire+0x10/0x10 [ 527.472201][ C0] ? call_timer_fn+0xd4/0x5e0 [ 527.472219][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 527.472247][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.472269][ C0] ? __pfx_ip_vs_conn_expire+0x10/0x10 [ 527.472294][ C0] __run_timer_base+0x6a3/0x9f0 [ 527.472339][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 527.472374][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 527.472408][ C0] run_timer_softirq+0xb7/0x170 [ 527.472445][ C0] handle_softirqs+0x1de/0x6d0 [ 527.472479][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 527.472505][ C0] run_ktimerd+0x69/0x100 [ 527.472531][ C0] smpboot_thread_fn+0x541/0xa50 [ 527.472559][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 527.472595][ C0] kthread+0x388/0x470 [ 527.472624][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 527.472649][ C0] ? __pfx_kthread+0x10/0x10 [ 527.472680][ C0] ret_from_fork+0x514/0xb70 [ 527.472708][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 527.472733][ C0] ? __switch_to+0xc79/0x1410 [ 527.472757][ C0] ? __pfx_kthread+0x10/0x10 [ 527.472786][ C0] ret_from_fork_asm+0x1a/0x30 [ 527.472831][ C0] [ 527.539857][ T5623] Bluetooth: hci2: command tx timeout [ 528.549200][ T67] hsr_slave_0: left promiscuous mode [ 528.569433][ T67] hsr_slave_1: left promiscuous mode [ 528.570303][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.610148][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.769139][ T67] hsr_slave_0: left promiscuous mode [ 528.810245][ T67] hsr_slave_1: left promiscuous mode [ 528.812558][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.832605][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.989156][ T67] hsr_slave_0: left promiscuous mode [ 529.009400][ T67] hsr_slave_1: left promiscuous mode [ 529.010273][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.050313][ T5623] Bluetooth: hci6: command tx timeout [ 529.052254][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.209237][ T67] hsr_slave_0: left promiscuous mode [ 529.229222][ T67] hsr_slave_1: left promiscuous mode [ 529.230141][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.269887][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.429174][ T67] hsr_slave_0: left promiscuous mode [ 529.449242][ T67] hsr_slave_1: left promiscuous mode [ 529.450201][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.491227][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.950142][ T67] team0 (unregistering): Port device team_slave_1 removed [ 529.999787][ T67] team0 (unregistering): Port device team_slave_0 removed [ 530.521546][ T67] team0 (unregistering): Port device team_slave_1 removed [ 530.570085][ T67] team0 (unregistering): Port device team_slave_0 removed [ 531.069950][ T67] team0 (unregistering): Port device team_slave_1 removed [ 531.120026][ T67] team0 (unregistering): Port device team_slave_0 removed [ 531.130355][ T5623] Bluetooth: hci6: command tx timeout [ 531.729867][ T67] team0 (unregistering): Port device team_slave_1 removed [ 531.790958][ T67] team0 (unregistering): Port device team_slave_0 removed [ 532.302830][ T67] team0 (unregistering): Port device team_slave_1 removed [ 532.349771][ T67] team0 (unregistering): Port device team_slave_0 removed [ 532.835519][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1