last executing test programs: 10.844554948s ago: executing program 2 (id=696): socket(0x11, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x201}}}}}}}, 0x0) 10.530671363s ago: executing program 2 (id=701): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000593c437a5692b43a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000ab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b193c0191176f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x85, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000140)={0x2, 0x1, 0x400, 0xffff, 0x6, 0x5}) 10.211614743s ago: executing program 2 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) 9.873738081s ago: executing program 2 (id=707): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 9.525966759s ago: executing program 2 (id=708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0\n', 0x2) 9.17812234s ago: executing program 4 (id=712): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x130, 0xc8, 0x8, 0x130, 0x5803, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff7f, 0xfffffefe, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x84, 0xb7}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc, 0x100, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffffff], 'team0\x00', 'wg2\x00', {}, {}, 0x112, 0x6, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0x0, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000040)='ipvlan1\x00') 8.667076392s ago: executing program 2 (id=717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) 8.571189891s ago: executing program 1 (id=718): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, 0x0, 0x0) 8.373295027s ago: executing program 1 (id=720): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 8.1757681s ago: executing program 1 (id=723): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 8.173643407s ago: executing program 5 (id=724): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 8.009637745s ago: executing program 4 (id=726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6.971666631s ago: executing program 0 (id=728): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 6.865564882s ago: executing program 5 (id=729): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 6.812719593s ago: executing program 3 (id=730): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000593c437a5692b43a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000ab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b193c0191176f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x85, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000140)={0x2, 0x1, 0x400, 0xffff, 0x6, 0x5}) 6.653001328s ago: executing program 5 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x0) write$FUSE_INIT(r3, 0x0, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.629945089s ago: executing program 3 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x63) write(0xffffffffffffffff, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) 6.623346451s ago: executing program 0 (id=733): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 6.377511797s ago: executing program 3 (id=734): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) socket(0x11, 0x5, 0x400101) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) 5.205863965s ago: executing program 0 (id=735): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 5.169479697s ago: executing program 1 (id=736): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) 5.149857601s ago: executing program 4 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) 4.99403935s ago: executing program 4 (id=738): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x5]}}}}, 0x1b) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0xa, "315dcd4542a9187f"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 4.960387545s ago: executing program 3 (id=739): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x273, 0x100, 0x2, 0x11f}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, 0x0, 0x0, &(0x7f0000000480)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r5 = syz_open_pts(r4, 0xa0200) syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0xee00) dup3(r5, r4, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x0, 0x20000000, 0x800, 0x0, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e22}, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.712298663s ago: executing program 0 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) 3.750045665s ago: executing program 1 (id=741): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 3.731146177s ago: executing program 5 (id=742): socket(0x11, 0x2, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4}, &(0x7f0000000000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff4]}, 0x8, 0x800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xe}) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 3.074404911s ago: executing program 4 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 2.802561319s ago: executing program 0 (id=744): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000593c437a5692b43a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000ab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b193c0191176f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x85, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000140)={0x2, 0x1, 0x400, 0xffff, 0x6, 0x5}) 1.900216135s ago: executing program 4 (id=745): fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) close(r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)}}], 0x1, 0x2400c042) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) 1.557608033s ago: executing program 3 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) write(0xffffffffffffffff, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x63) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r1, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) 1.500714254s ago: executing program 0 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r0, 0x1000000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='./backing_file\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) 1.41374635s ago: executing program 3 (id=748): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) sendfile(0xffffffffffffffff, r0, 0x0, 0xc00) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0x20000) sendfile(r4, r0, 0x0, 0x20000) sendfile(r4, r0, 0x0, 0x20000) 1.413446064s ago: executing program 5 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FIONREAD(r7, 0x541b, 0x0) ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, 0x0) gettid() r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}}, 0x18) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 18.305479ms ago: executing program 1 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) 0s ago: executing program 5 (id=751): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 79.214327][ T5606] cgroup: Unknown subsys name 'net' [ 79.305743][ T5606] cgroup: Unknown subsys name 'cpuset' [ 79.315021][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.745756][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.297966][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.306588][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.320177][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.330753][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.339471][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.339956][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.347218][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.362260][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.371716][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.379064][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.386500][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.396063][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.404515][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.418193][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.426048][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.443347][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.446745][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.453149][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.467335][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.474490][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.481921][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.493603][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.496076][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.508495][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.519205][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.527244][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.544431][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.557586][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.567686][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.579478][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.432763][ T5643] Bluetooth: hci2: command tx timeout [ 85.522802][ T5643] Bluetooth: hci0: command tx timeout [ 85.591597][ T5637] Bluetooth: hci1: command tx timeout [ 85.597511][ T51] Bluetooth: hci5: command tx timeout [ 85.603252][ T5643] Bluetooth: hci3: command tx timeout [ 85.671704][ T5643] Bluetooth: hci4: command tx timeout [ 85.848012][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.855343][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.863149][ T5622] bridge_slave_0: entered allmulticast mode [ 85.870636][ T5622] bridge_slave_0: entered promiscuous mode [ 85.937385][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.944591][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.952487][ T5624] bridge_slave_0: entered allmulticast mode [ 85.959986][ T5624] bridge_slave_0: entered promiscuous mode [ 85.968001][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.975232][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.982602][ T5622] bridge_slave_1: entered allmulticast mode [ 85.990123][ T5622] bridge_slave_1: entered promiscuous mode [ 86.015800][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.023266][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.030488][ T5619] bridge_slave_0: entered allmulticast mode [ 86.040050][ T5619] bridge_slave_0: entered promiscuous mode [ 86.050498][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.057787][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.065328][ T5619] bridge_slave_1: entered allmulticast mode [ 86.076314][ T5619] bridge_slave_1: entered promiscuous mode [ 86.115262][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.131597][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.144479][ T5624] bridge_slave_1: entered allmulticast mode [ 86.160505][ T5624] bridge_slave_1: entered promiscuous mode [ 86.230781][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.240257][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.248221][ T5621] bridge_slave_0: entered allmulticast mode [ 86.256970][ T5621] bridge_slave_0: entered promiscuous mode [ 86.266807][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.274020][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.281264][ T5621] bridge_slave_1: entered allmulticast mode [ 86.290193][ T5621] bridge_slave_1: entered promiscuous mode [ 86.365539][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.415987][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.434591][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.464449][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.477460][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.489966][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.534622][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.603205][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.645835][ T5622] team0: Port device team_slave_0 added [ 86.665335][ T5619] team0: Port device team_slave_0 added [ 86.698005][ T5624] team0: Port device team_slave_0 added [ 86.706271][ T5622] team0: Port device team_slave_1 added [ 86.712253][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.719452][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.726754][ T5620] bridge_slave_0: entered allmulticast mode [ 86.734269][ T5620] bridge_slave_0: entered promiscuous mode [ 86.744219][ T5619] team0: Port device team_slave_1 added [ 86.761303][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.768794][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.776473][ T5625] bridge_slave_0: entered allmulticast mode [ 86.783959][ T5625] bridge_slave_0: entered promiscuous mode [ 86.793602][ T5624] team0: Port device team_slave_1 added [ 86.811677][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.818877][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.826227][ T5620] bridge_slave_1: entered allmulticast mode [ 86.833841][ T5620] bridge_slave_1: entered promiscuous mode [ 86.854640][ T5621] team0: Port device team_slave_0 added [ 86.860367][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.867689][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.875080][ T5625] bridge_slave_1: entered allmulticast mode [ 86.882666][ T5625] bridge_slave_1: entered promiscuous mode [ 86.940469][ T5621] team0: Port device team_slave_1 added [ 86.982304][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.989318][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.015278][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.043875][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.050898][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.076846][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.116066][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.123333][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.149732][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.161396][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.168632][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.194805][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.208565][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.218342][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.225592][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.251783][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.263412][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.270405][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.296354][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.310173][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.320121][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.327385][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.353847][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.377491][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.407238][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.414213][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.441255][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.455392][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.507509][ T5620] team0: Port device team_slave_0 added [ 87.513180][ T5643] Bluetooth: hci2: command tx timeout [ 87.568069][ T5622] hsr_slave_0: entered promiscuous mode [ 87.575369][ T5622] hsr_slave_1: entered promiscuous mode [ 87.584168][ T5620] team0: Port device team_slave_1 added [ 87.592293][ T5643] Bluetooth: hci0: command tx timeout [ 87.606069][ T5625] team0: Port device team_slave_0 added [ 87.654929][ T5619] hsr_slave_0: entered promiscuous mode [ 87.661359][ T5619] hsr_slave_1: entered promiscuous mode [ 87.667626][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 87.673443][ T5643] Bluetooth: hci3: command tx timeout [ 87.673480][ T51] Bluetooth: hci5: command tx timeout [ 87.679315][ T5619] Cannot create hsr debugfs directory [ 87.684673][ T5637] Bluetooth: hci1: command tx timeout [ 87.709763][ T5625] team0: Port device team_slave_1 added [ 87.752197][ T51] Bluetooth: hci4: command tx timeout [ 87.807337][ T5621] hsr_slave_0: entered promiscuous mode [ 87.818946][ T5621] hsr_slave_1: entered promiscuous mode [ 87.826103][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 87.832267][ T5621] Cannot create hsr debugfs directory [ 87.838613][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.845948][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.872520][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.902068][ T5624] hsr_slave_0: entered promiscuous mode [ 87.908517][ T5624] hsr_slave_1: entered promiscuous mode [ 87.915208][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 87.920923][ T5624] Cannot create hsr debugfs directory [ 87.954757][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.961914][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.987897][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.012793][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.019756][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.045887][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.095848][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.102893][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.129722][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.342591][ T5620] hsr_slave_0: entered promiscuous mode [ 88.349052][ T5620] hsr_slave_1: entered promiscuous mode [ 88.355340][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 88.361054][ T5620] Cannot create hsr debugfs directory [ 88.478579][ T5625] hsr_slave_0: entered promiscuous mode [ 88.485090][ T5625] hsr_slave_1: entered promiscuous mode [ 88.491218][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 88.497446][ T5625] Cannot create hsr debugfs directory [ 88.919088][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.932056][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.940426][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.951413][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.982821][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.993035][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.020131][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.030958][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.103307][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.119195][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.135560][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.146817][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.157299][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.168141][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.188579][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.199123][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.283253][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.293912][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.307085][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.316702][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.339175][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.349119][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.363201][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.373456][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.479870][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.491373][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.509802][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.522241][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.530290][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.540508][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.548604][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.558949][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.576968][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.591550][ T51] Bluetooth: hci2: command tx timeout [ 89.671994][ T51] Bluetooth: hci0: command tx timeout [ 89.686696][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.698043][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.706494][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.717691][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.726375][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.736709][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.744861][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.752348][ T51] Bluetooth: hci3: command tx timeout [ 89.753785][ T5637] Bluetooth: hci5: command tx timeout [ 89.758068][ T5643] Bluetooth: hci1: command tx timeout [ 89.774488][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.819266][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.832218][ T5643] Bluetooth: hci4: command tx timeout [ 89.839776][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.867417][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.874817][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.948796][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.955939][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.990261][ T5625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.000974][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.019806][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.032273][ T5625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.043498][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.067901][ T5625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.079370][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.089344][ T5625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.099717][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.120235][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.127427][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.183515][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.190657][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.216963][ T5622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.243684][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.329164][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.389071][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.396383][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.461098][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.473739][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.480923][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.506872][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.572885][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.658211][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.674502][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.681698][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.716302][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.723509][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.781578][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.788759][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.823813][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.839229][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.846451][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.903055][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.971323][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.978535][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.033517][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.055344][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.062536][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.126354][ T10] cfg80211: failed to load regulatory.db [ 91.332739][ T5625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.673042][ T5643] Bluetooth: hci2: command tx timeout [ 91.756907][ T5643] Bluetooth: hci0: command tx timeout [ 91.831607][ T5643] Bluetooth: hci3: command tx timeout [ 91.837045][ T5643] Bluetooth: hci5: command tx timeout [ 91.837791][ T51] Bluetooth: hci1: command tx timeout [ 91.911788][ T51] Bluetooth: hci4: command tx timeout [ 92.006599][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.035921][ T5622] veth0_vlan: entered promiscuous mode [ 92.089338][ T5622] veth1_vlan: entered promiscuous mode [ 92.321197][ T5619] veth0_vlan: entered promiscuous mode [ 92.356584][ T5622] veth0_macvtap: entered promiscuous mode [ 92.399584][ T5619] veth1_vlan: entered promiscuous mode [ 92.416017][ T5622] veth1_macvtap: entered promiscuous mode [ 92.444259][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.539934][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.600650][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.643236][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.666896][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.708258][ T5619] veth0_macvtap: entered promiscuous mode [ 92.747905][ T5621] veth0_vlan: entered promiscuous mode [ 92.767253][ T5619] veth1_macvtap: entered promiscuous mode [ 92.785565][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.801036][ T5621] veth1_vlan: entered promiscuous mode [ 92.851718][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.902034][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.911888][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.945379][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.961561][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.010112][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.030709][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.091278][ T5620] veth0_vlan: entered promiscuous mode [ 93.103640][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.129585][ T5621] veth0_macvtap: entered promiscuous mode [ 93.156230][ T5624] veth0_vlan: entered promiscuous mode [ 93.163285][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.178033][ T5620] veth1_vlan: entered promiscuous mode [ 93.186339][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.197646][ T5621] veth1_macvtap: entered promiscuous mode [ 93.296394][ T5624] veth1_vlan: entered promiscuous mode [ 93.319004][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.334124][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354846][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.391761][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415149][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.428595][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.444690][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.482963][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.528615][ T5862] tipc: Started in network mode [ 93.533796][ T5862] tipc: Node identity 4, cluster identity 4711 [ 93.539956][ T5862] tipc: Node number set to 4 [ 93.546281][ T5620] veth0_macvtap: entered promiscuous mode [ 93.594128][ T5625] veth0_vlan: entered promiscuous mode [ 93.616897][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.635721][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.638562][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.653057][ T5620] veth1_macvtap: entered promiscuous mode [ 93.684272][ T5624] veth0_macvtap: entered promiscuous mode [ 93.747980][ T5624] veth1_macvtap: entered promiscuous mode [ 93.770732][ T5625] veth1_vlan: entered promiscuous mode [ 93.819987][ T5625] veth0_macvtap: entered promiscuous mode [ 93.847472][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.861661][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.872878][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.883024][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.896740][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.017105][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.056156][ T5625] veth1_macvtap: entered promiscuous mode [ 94.098781][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.171978][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.197794][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.242004][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.244841][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270823][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.301851][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.320962][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.422140][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.437996][ T5818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.449403][ T5818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.462546][ T1052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.484067][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541774][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.506272][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.604481][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.621885][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.631872][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654855][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.691571][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708284][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.890432][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.899562][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.920057][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.038364][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'. [ 96.086169][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.092218][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 96.104381][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 96.118212][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.260811][ T5896] team0: Port device bridge1 added [ 96.311426][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.341643][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.617505][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.646945][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.720911][ T5893] loop2: detected capacity change from 0 to 32768 [ 96.745791][ T5893] ======================================================= [ 96.745791][ T5893] WARNING: The mand mount option has been deprecated and [ 96.745791][ T5893] and is ignored by this kernel. Remove the mand [ 96.745791][ T5893] option from the mount to silence this warning. [ 96.745791][ T5893] ======================================================= [ 96.967009][ T5893] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 97.067372][ T5906] syzkaller0: entered promiscuous mode [ 97.140573][ T5906] syzkaller0: entered allmulticast mode [ 97.204913][ T5921] kAFS: unable to lookup cell 'џ' [ 98.100386][ T5923] (syz.2.16,5923,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 98.194732][ T5893] (syz.2.16,5893,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 98.444562][ T5619] ocfs2: Unmounting device (7,2) on (node local) [ 99.935251][ T5951] loop2: detected capacity change from 0 to 256 [ 99.955823][ T5951] exfat: Deprecated parameter 'namecase' [ 99.973444][ T5951] exfat: Deprecated parameter 'namecase' [ 100.045988][ T5951] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 100.175009][ T31] audit: type=1800 audit(1785924415.201:2): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file1" dev="loop2" ino=1048608 res=0 errno=0 [ 100.454292][ T5944] loop0: detected capacity change from 0 to 32768 [ 101.349434][ T5944] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.504817][ T5944] XFS (loop0): Ending clean mount [ 101.828899][ T5990] kAFS: unable to lookup cell 'џ' [ 102.095807][ T5620] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 103.006639][ T5818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.015880][ T5818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.060735][ T5961] tipc: Enabling of bearer rejected, failed to enable media [ 103.122574][ T5763] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.304616][ T5763] usb 1-1: Using ep0 maxpacket: 16 [ 103.340642][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.388777][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.435154][ T5763] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 103.489651][ T5763] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 103.543876][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.606064][ T5763] usb 1-1: config 0 descriptor?? [ 103.676221][ T6014] loop3: detected capacity change from 0 to 256 [ 103.723884][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.732485][ T6014] exfat: Deprecated parameter 'namecase' [ 103.770475][ T6012] smpboot: CPU 1 is now offline [ 103.803947][ T6014] exfat: Deprecated parameter 'namecase' [ 103.884184][ T6014] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 103.961240][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.047022][ T6015] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 104.056520][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 104.096368][ T31] audit: type=1800 audit(1785924419.111:3): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.48" name="file1" dev="loop3" ino=1048624 res=0 errno=0 [ 104.177542][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 104.247108][ T5763] usbhid 1-1:0.0: can't add hid device: -71 [ 104.255743][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.284793][ T5763] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 104.416730][ T5763] usb 1-1: USB disconnect, device number 2 [ 104.615540][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 105.150877][ T6018] loop5: detected capacity change from 0 to 32768 [ 105.228218][ T6018] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.49 (6018) [ 105.369411][ T6018] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.418531][ T10] gud 3-1:1.0: USB-1: Failed to add properties (ret=-5) [ 105.441368][ T6018] BTRFS info (device loop5): using crc32c checksum algorithm [ 105.447754][ T10] gud 3-1:1.0: Failed to get connectors (error=-5) [ 105.467508][ T6020] loop4: detected capacity change from 0 to 32768 [ 105.510765][ T10] gud 3-1:1.0: probe with driver gud failed with error -5 [ 105.618205][ T6020] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.629061][ T37] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 105.654433][ T6018] BTRFS warning (device loop5): couldn't read tree root [ 105.684622][ T10] usb 3-1: USB disconnect, device number 2 [ 105.701599][ T6018] BTRFS warning (device loop5): try to load backup roots slot 1 [ 105.766238][ T399] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 105.855083][ T6020] XFS (loop4): Ending clean mount [ 105.986488][ T6018] BTRFS warning (device loop5): couldn't read tree root [ 105.993785][ T6018] BTRFS warning (device loop5): try to load backup roots slot 2 [ 106.003701][ T399] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 106.014720][ T6018] BTRFS warning (device loop5): couldn't read tree root [ 106.038717][ T6018] BTRFS warning (device loop5): try to load backup roots slot 3 [ 106.762231][ T6018] BTRFS info (device loop5): checking UUID tree [ 106.784692][ T6018] BTRFS error (device loop5): failed to check the UUID tree: -4 [ 106.857725][ T5622] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.959128][ T6018] BTRFS error (device loop5): open_ctree failed: -4 [ 107.007279][ T6083] loop1: detected capacity change from 0 to 256 [ 107.009255][ T6085] process 'syz.2.66' launched '/dev/fd/5' with NULL argv: empty string added [ 107.046938][ T6083] exfat: Deprecated parameter 'namecase' [ 109.108074][ T6083] exfat: Deprecated parameter 'namecase' [ 110.701415][ T6083] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 111.587522][ T6107] syz.4.65 (6107) used greatest stack depth: 18312 bytes left [ 111.667918][ T6123] netlink: 112 bytes leftover after parsing attributes in process `syz.2.80'. [ 113.345580][ T6116] loop5: detected capacity change from 0 to 32768 [ 113.387233][ T6116] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.476051][ T6116] XFS (loop5): Ending clean mount [ 113.541617][ T5763] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.629916][ T5625] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.723952][ T5763] usb 4-1: Using ep0 maxpacket: 16 [ 113.758442][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.814679][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.878899][ T5763] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.953175][ T5763] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.992411][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.072819][ T5763] usb 4-1: config 0 descriptor?? [ 114.121836][ T6137] loop4: detected capacity change from 0 to 32768 [ 114.157095][ T6137] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.84 (6137) [ 114.257731][ T6137] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 114.302860][ T6137] BTRFS info (device loop4): using crc32c checksum algorithm [ 114.558373][ T6137] BTRFS info (device loop4): enabling ssd optimizations [ 114.591706][ T6137] BTRFS info (device loop4): turning on async discard [ 114.612655][ T6137] BTRFS info (device loop4): enabling free space tree [ 114.740067][ T5763] usbhid 4-1:0.0: can't add hid device: -71 [ 114.786666][ T5763] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.016126][ T5763] usb 4-1: USB disconnect, device number 2 [ 116.304707][ T5622] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 116.454186][ T31] audit: type=1326 audit(1785924431.481:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.102" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc639e0d9 code=0x7ffc0000 [ 116.598625][ T31] audit: type=1326 audit(1785924431.481:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.102" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc639e0d9 code=0x7ffc0000 [ 116.730851][ T31] audit: type=1326 audit(1785924431.541:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.102" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fddc639e0d9 code=0x7ffc0000 [ 116.863533][ T31] audit: type=1326 audit(1785924431.541:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.102" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc639e0d9 code=0x7ffc0000 [ 116.963130][ T31] audit: type=1326 audit(1785924431.561:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.0.102" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc639e0d9 code=0x7ffc0000 [ 116.999156][ T6232] netlink: 'syz.4.110': attribute type 2 has an invalid length. [ 117.038876][ T6232] netlink: 'syz.4.110': attribute type 2 has an invalid length. [ 117.173322][ T6238] kAFS: unable to lookup cell 'џ' [ 117.427799][ T6244] netlink: 112 bytes leftover after parsing attributes in process `syz.4.114'. [ 117.641555][ T5763] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.836575][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 117.860786][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.885798][ T6226] loop3: detected capacity change from 0 to 32768 [ 117.898924][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.925547][ T6226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.107 (6226) [ 117.941866][ T5763] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.978441][ T5763] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.995320][ T6225] loop2: detected capacity change from 0 to 32768 [ 118.002913][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.034851][ T6226] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.070157][ T5763] usb 6-1: config 0 descriptor?? [ 118.109616][ T6225] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.123892][ T6226] BTRFS info (device loop3): using crc32c checksum algorithm [ 118.309276][ T6225] XFS (loop2): Ending clean mount [ 118.573199][ T6226] BTRFS info (device loop3): enabling ssd optimizations [ 118.713687][ T6226] BTRFS info (device loop3): turning on flush-on-commit [ 119.068682][ T6226] BTRFS info (device loop3): enabling free space tree [ 119.270246][ T6226] BTRFS info (device loop3): enabling auto defrag [ 119.316027][ T5619] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.362233][ T5763] usbhid 6-1:0.0: can't add hid device: -71 [ 119.368580][ T6226] BTRFS info (device loop3): use lzo compression, level 1 [ 119.381576][ T5763] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 119.444055][ T5763] usb 6-1: USB disconnect, device number 2 [ 119.459684][ T6226] BTRFS info (device loop3): max_inline set to 4096 [ 119.724882][ T5621] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.922888][ T6300] netlink: 112 bytes leftover after parsing attributes in process `syz.0.129'. [ 121.716758][ T6338] loop3: detected capacity change from 0 to 64 [ 122.727706][ T6342] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 122.779429][ T6342] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 122.920111][ T6323] loop5: detected capacity change from 0 to 32768 [ 122.940062][ T6348] netlink: 112 bytes leftover after parsing attributes in process `syz.1.145'. [ 123.031072][ T6323] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.156133][ T6323] XFS (loop5): Ending clean mount [ 123.199598][ T6337] loop4: detected capacity change from 0 to 32768 [ 123.210367][ T6337] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.140 (6337) [ 123.267703][ T6337] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.292158][ T6337] BTRFS info (device loop4): using crc32c checksum algorithm [ 123.449977][ T6337] BTRFS info (device loop4): enabling ssd optimizations [ 123.472056][ T6337] BTRFS info (device loop4): turning on flush-on-commit [ 123.479238][ T6337] BTRFS info (device loop4): enabling free space tree [ 123.488387][ T6337] BTRFS info (device loop4): enabling auto defrag [ 123.495240][ T6337] BTRFS info (device loop4): use lzo compression, level 1 [ 123.497048][ T5625] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.502874][ T6337] BTRFS info (device loop4): max_inline set to 4096 [ 123.657026][ T5622] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.868417][ T6406] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 124.926287][ T6409] netlink: 112 bytes leftover after parsing attributes in process `syz.0.160'. [ 124.939540][ T6406] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 125.432173][ T6419] kAFS: unable to lookup cell 'џ' [ 126.090231][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 126.655299][ T6433] syzkaller0: entered promiscuous mode [ 126.671539][ T6433] syzkaller0: entered allmulticast mode [ 127.805833][ T6420] loop5: detected capacity change from 0 to 32768 [ 127.867158][ T6420] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.960114][ T6420] XFS (loop5): Ending clean mount [ 128.187052][ T5625] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.209974][ T6475] netlink: 112 bytes leftover after parsing attributes in process `syz.2.177'. [ 128.453584][ T6479] netlink: 'syz.5.178': attribute type 2 has an invalid length. [ 128.476252][ T6479] netlink: 'syz.5.178': attribute type 2 has an invalid length. [ 130.037759][ T6484] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 130.065318][ T6484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 130.077021][ T6484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 130.744547][ T6519] netlink: 'syz.1.196': attribute type 2 has an invalid length. [ 130.769245][ T6522] netlink: 112 bytes leftover after parsing attributes in process `syz.5.197'. [ 130.786838][ T6519] netlink: 'syz.1.196': attribute type 2 has an invalid length. [ 130.832471][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.848468][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.834114][ T6526] syzkaller0: entered promiscuous mode [ 131.868490][ T6526] syzkaller0: entered allmulticast mode [ 132.209296][ T6535] syzkaller0: entered promiscuous mode [ 132.235810][ T6535] syzkaller0: entered allmulticast mode [ 132.502393][ T6569] netlink: 'syz.0.215': attribute type 2 has an invalid length. [ 132.510373][ T6569] netlink: 'syz.0.215': attribute type 2 has an invalid length. [ 132.628239][ T6576] netlink: 'syz.5.216': attribute type 1 has an invalid length. [ 132.684618][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.216'. [ 132.706041][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.216'. [ 134.515010][ T30] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 134.698881][ T30] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 134.710137][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.722633][ T30] usb 2-1: Product: syz [ 134.726995][ T30] usb 2-1: Manufacturer: syz [ 134.732140][ T30] usb 2-1: SerialNumber: syz [ 135.200068][ T30] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 136.001139][ T6630] loop5: detected capacity change from 0 to 32768 [ 136.058181][ T6630] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.373433][ T6630] XFS (loop5): Ending clean mount [ 136.723805][ T5625] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.670328][ T5763] usb 2-1: USB disconnect, device number 2 [ 137.779045][ T5763] usblp0: removed [ 137.833596][ T51] Bluetooth: hci0: command 0x2016 tx timeout [ 138.048367][ T6688] syzkaller0: entered promiscuous mode [ 138.091652][ T6688] syzkaller0: entered allmulticast mode [ 139.917786][ T51] Bluetooth: hci0: command 0x2016 tx timeout [ 141.434804][ T6768] overlayfs: missing 'workdir' [ 141.552025][ T6773] io-wq is not configured for unbound workers [ 141.704086][ T6778] loop4: detected capacity change from 0 to 512 [ 141.742460][ T6737] loop3: detected capacity change from 0 to 40427 [ 141.778805][ T6737] F2FS-fs (loop3): build fault injection rate: 19 [ 141.791557][ T6778] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.293: Unrecognised inode hash code 255 [ 141.803825][ T6737] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 141.813566][ T6778] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.293: Corrupt directory, running e2fsck is recommended [ 141.831638][ T6737] F2FS-fs (loop3): invalid crc value [ 141.904245][ T6737] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 142.026463][ T6778] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 142.073567][ T6778] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.293: corrupted in-inode xattr: invalid ea_ino [ 142.119839][ T6778] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.121592][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 142.137983][ C1] EXT4-fs (loop4): initial error at time 1785924457: ext4_iget_extra_inode:5180: inode 15 [ 142.147939][ C1] EXT4-fs (loop4): last error at time 1785924457: ext4_iget_extra_inode:5180: inode 15 [ 142.161208][ T6778] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.293: couldn't read orphan inode 15 (err -117) [ 142.173298][ T6778] loop4: lost filesystem error report for type 5 error -117 [ 142.180111][ T6778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.231373][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 142.235712][ T6737] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 142.269940][ T6778] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.293: Unrecognised inode hash code 255 [ 142.312416][ T6778] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.293: Corrupt directory, running e2fsck is recommended [ 142.349388][ T6737] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 142.385801][ T6737] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.462833][ T6737] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 142.556698][ T6806] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 142.622685][ T6778] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.293: Unrecognised inode hash code 255 [ 142.686859][ T6737] syz.3.277: attempt to access beyond end of device [ 142.686859][ T6737] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 142.715022][ T6778] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.293: Corrupt directory, running e2fsck is recommended [ 142.739754][ T6778] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 4: comm syz.4.293: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 142.881319][ T6737] syz.3.277: attempt to access beyond end of device [ 142.881319][ T6737] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 143.429760][ T6802] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 4: comm syz.4.293: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 143.460840][ T5621] F2FS-fs (loop3): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0 [ 143.540068][ T5621] F2FS-fs (loop3): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 143.560489][ T6821] loop6: detected capacity change from 0 to 1 [ 143.579758][ T6821] Dev loop6: unable to read RDB block 1 [ 143.589041][ T6821] loop6: unable to read partition table [ 143.627205][ T6821] loop6: partition table beyond EOD, truncated [ 143.627595][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 143.636825][ T5621] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x11f/0x3e0 [ 143.651739][ T6778] EXT4-fs (loop4): shut down requested (2) [ 143.658944][ T6821] loop_reread_partitions: partition scan of loop6 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 143.852387][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.981553][ T30] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 144.049256][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'. [ 144.164556][ T30] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 144.202048][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.243625][ T30] usb 3-1: Product: syz [ 144.261544][ T30] usb 3-1: Manufacturer: syz [ 144.294163][ T30] usb 3-1: SerialNumber: syz [ 145.307416][ T30] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 145.720026][ T6867] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.801119][ T30] usb 3-1: USB disconnect, device number 3 [ 146.895228][ T30] usblp0: removed [ 147.153203][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 147.162665][ T6915] netlink: 43 bytes leftover after parsing attributes in process `syz.4.340'. [ 147.210228][ T6916] mmap: syz.4.340 (6916) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.589812][ T31] audit: type=1800 audit(1785924463.621:9): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="ipv4_address" dev="configfs" ino=11859 res=0 errno=0 [ 148.694378][ T31] audit: type=1800 audit(1785924463.661:10): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="ipv4_port" dev="configfs" ino=11860 res=0 errno=0 [ 148.866785][ T31] audit: type=1800 audit(1785924463.661:11): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="num" dev="configfs" ino=11861 res=0 errno=0 [ 148.969992][ T31] audit: type=1800 audit(1785924463.661:12): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="local" dev="configfs" ino=11862 res=0 errno=0 [ 149.064083][ T31] audit: type=1800 audit(1785924463.691:13): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="block_bytes" dev="configfs" ino=11870 res=0 errno=0 [ 149.119630][ T6919] loop5: detected capacity change from 0 to 32768 [ 149.149782][ T6919] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.342 (6919) [ 149.173643][ T31] audit: type=1800 audit(1785924463.701:14): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="blocks" dev="configfs" ino=11871 res=0 errno=0 [ 149.247058][ T6919] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 149.268362][ T31] audit: type=1800 audit(1785924463.711:15): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="start_block" dev="configfs" ino=11876 res=0 errno=0 [ 149.308588][ T6919] BTRFS info (device loop5): using crc32c checksum algorithm [ 149.359171][ T31] audit: type=1800 audit(1785924463.841:16): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="dev" dev="configfs" ino=11879 res=0 errno=0 [ 149.421059][ T6961] loop2: detected capacity change from 0 to 512 [ 149.468400][ T6961] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.357: Unrecognised inode hash code 255 [ 149.498469][ T6961] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.357: Corrupt directory, running e2fsck is recommended [ 149.528536][ T6919] BTRFS info (device loop5): enabling ssd optimizations [ 149.552492][ T6961] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 149.572434][ T6961] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.357: corrupted in-inode xattr: invalid ea_ino [ 149.585811][ T6961] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.586960][ T6919] BTRFS info (device loop5): turning on async discard [ 149.596201][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 149.596237][ C0] EXT4-fs (loop2): initial error at time 1785924464: ext4_iget_extra_inode:5180: inode 15 [ 149.596276][ C0] EXT4-fs (loop2): last error at time 1785924464: ext4_iget_extra_inode:5180: inode 15 [ 149.629605][ T6961] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.357: couldn't read orphan inode 15 (err -117) [ 149.645336][ T6961] loop2: lost filesystem error report for type 5 error -117 [ 149.646421][ T6919] BTRFS info (device loop5): enabling free space tree [ 149.676258][ T6961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.719225][ T6961] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.357: Unrecognised inode hash code 255 [ 149.733740][ T6961] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.357: Corrupt directory, running e2fsck is recommended [ 149.970839][ T6961] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.357: Unrecognised inode hash code 255 [ 150.006982][ T31] audit: type=1800 audit(1785924465.031:17): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.342" name="file1" dev="loop5" ino=270 res=0 errno=0 [ 150.027470][ T6961] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.357: Corrupt directory, running e2fsck is recommended [ 150.027565][ T6961] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 4: comm syz.2.357: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 150.373126][ T6986] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 4: comm syz.2.357: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 150.453086][ T5625] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 150.456215][ T6961] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.357: path /54/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 150.712091][ T7002] 9p: Bad value for 'rfdno' [ 150.765627][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.809899][ T7003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.988594][ T6989] loop4: detected capacity change from 0 to 32768 [ 151.069686][ T6989] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.361 (6989) [ 151.084629][ T7007] loop2: detected capacity change from 0 to 64 [ 151.183820][ T6989] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.221562][ T6989] BTRFS info (device loop4): using crc32c checksum algorithm [ 151.311293][ T13] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 151.372324][ T6989] BTRFS warning (device loop4): couldn't read tree root [ 151.424639][ T6989] BTRFS warning (device loop4): try to load backup roots slot 1 [ 151.660452][ T13] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 151.926606][ T6989] BTRFS warning (device loop4): couldn't read tree root [ 152.013976][ T6989] BTRFS warning (device loop4): try to load backup roots slot 2 [ 152.052758][ T399] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 152.124620][ T6989] BTRFS warning (device loop4): couldn't read tree root [ 152.153800][ T6989] BTRFS warning (device loop4): try to load backup roots slot 3 [ 152.265790][ T6989] BTRFS info (device loop4): checking UUID tree [ 152.309526][ T6989] BTRFS info (device loop4): setting nodatasum [ 152.341919][ T6989] BTRFS info (device loop4): enabling ssd optimizations [ 152.386590][ T6989] BTRFS info (device loop4): turning on flush-on-commit [ 152.438576][ T6989] BTRFS info (device loop4): turning on async discard [ 152.480453][ T6989] BTRFS info (device loop4): enabling free space tree [ 152.527061][ T6989] BTRFS info (device loop4): trying to use backup root at mount time [ 152.574114][ T6989] BTRFS info (device loop4): max_inline set to 0 [ 153.116820][ T5622] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.207711][ T7069] netlink: 'syz.1.385': attribute type 2 has an invalid length. [ 153.229199][ T7068] loop3: detected capacity change from 0 to 64 [ 153.246212][ T7069] netlink: 'syz.1.385': attribute type 2 has an invalid length. [ 153.328881][ T7072] netlink: 72 bytes leftover after parsing attributes in process `syz.2.387'. [ 154.562040][ T7103] netlink: 80 bytes leftover after parsing attributes in process `syz.1.396'. [ 154.630068][ T7103] syz.1.396 uses obsolete (PF_INET,SOCK_PACKET) [ 155.140891][ T7127] netlink: 'syz.0.402': attribute type 8 has an invalid length. [ 155.179549][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 155.241673][ T7127] bond0: entered promiscuous mode [ 155.264054][ T7127] bond_slave_0: entered promiscuous mode [ 155.275122][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 155.285341][ T7127] bond_slave_1: entered promiscuous mode [ 155.299771][ T5731] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.336988][ T7127] gretap0: entered promiscuous mode [ 155.351198][ T7127] team0: entered promiscuous mode [ 155.356896][ T7127] team_slave_0: entered promiscuous mode [ 155.363153][ T7127] team_slave_1: entered promiscuous mode [ 155.380284][ T7127] hsr1: entered promiscuous mode [ 155.403650][ T7137] netlink: 'syz.5.404': attribute type 10 has an invalid length. [ 155.455537][ T7131] team_slave_0 (unregistering): left promiscuous mode [ 155.471578][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 155.481389][ T7131] team0: Port device team_slave_0 removed [ 155.488864][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 155.508419][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 155.533956][ T5731] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.597830][ T5731] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 155.617650][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.624360][ T7137] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.645549][ T5731] usb 2-1: config 0 descriptor?? [ 155.709778][ T5731] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 155.877869][ T5731] usb 2-1: USB disconnect, device number 3 [ 155.877998][ C1] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 155.938637][ T4970] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 156.107201][ T7121] loop4: detected capacity change from 0 to 32768 [ 156.247562][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 156.259813][ T7121] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.462552][ T7121] XFS (loop4): Ending clean mount [ 156.929357][ T5622] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.177011][ T7213] netlink: 80 bytes leftover after parsing attributes in process `syz.5.426'. [ 158.323894][ T7218] loop2: detected capacity change from 0 to 64 [ 158.727003][ T7225] kAFS: unable to lookup cell 'џ' [ 158.938802][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.317087][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 159.510669][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 159.560541][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 159.604630][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.619019][ T30] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 159.628179][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.652720][ T30] usb 6-1: config 0 descriptor?? [ 159.706930][ T30] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 159.871670][ T30] usb 6-1: USB disconnect, device number 3 [ 160.100247][ T7211] loop4: detected capacity change from 0 to 32768 [ 160.124484][ T7211] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 160.167309][ T7211] JBD2: Ignoring recovery information on journal [ 160.268983][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 160.325210][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 160.339577][ T7211] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 160.770901][ T5622] ocfs2: Unmounting device (7,4) on (node local) [ 160.931661][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.985676][ T7269] kAFS: unable to lookup cell 'џ' [ 161.250161][ T7272] Zero length message leads to an empty skb [ 161.915963][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.927389][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.941017][ T30] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 161.961509][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.438350][ T30] gud 6-1:1.0: probe with driver gud failed with error -121 [ 163.514336][ T7300] netlink: 80 bytes leftover after parsing attributes in process `syz.1.454'. [ 164.517579][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.574992][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'. [ 164.602240][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 164.627730][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 164.704194][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 164.717802][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 164.782769][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 164.808802][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.841545][ T30] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 164.862837][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.884477][ T30] usb 2-1: config 0 descriptor?? [ 164.933662][ T30] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 165.057255][ T30] usb 6-1: USB disconnect, device number 4 [ 165.160656][ T29] usb 2-1: USB disconnect, device number 4 [ 165.187905][ T5741] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 165.321155][ T31] audit: type=1800 audit(1785924480.351:18): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.466" name="zoned" dev="configfs" ino=13364 res=0 errno=0 [ 165.387318][ T31] audit: type=1800 audit(1785924480.381:19): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.466" name="memory_backed" dev="configfs" ino=13365 res=0 errno=0 [ 165.565414][ T7317] loop4: detected capacity change from 0 to 32768 [ 165.625463][ T7317] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 165.665743][ T7317] JBD2: Ignoring recovery information on journal [ 165.746142][ T7317] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 165.992274][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'. [ 166.217013][ T7361] kAFS: unable to lookup cell 'џ' [ 168.133664][ T5622] ocfs2: Unmounting device (7,4) on (node local) [ 168.203058][ T31] audit: type=1800 audit(1785924483.241:20): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.480" name="zoned" dev="configfs" ino=13262 res=0 errno=0 [ 168.293592][ T31] audit: type=1800 audit(1785924483.261:21): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.480" name="memory_backed" dev="configfs" ino=13263 res=0 errno=0 [ 169.182136][ T7401] netlink: 80 bytes leftover after parsing attributes in process `syz.0.487'. [ 169.632673][ T7409] syzkaller0: entered promiscuous mode [ 169.648122][ T7409] syzkaller0: entered allmulticast mode [ 171.092853][ T7408] loop3: detected capacity change from 0 to 32768 [ 171.242994][ T7408] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 171.278593][ T7408] JBD2: Ignoring recovery information on journal [ 171.480700][ T7408] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 171.827764][ T5621] ocfs2: Unmounting device (7,3) on (node local) [ 173.684000][ T7461] netlink: 80 bytes leftover after parsing attributes in process `syz.0.506'. [ 174.919282][ T7472] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 175.263348][ T7474] loop2: detected capacity change from 0 to 32768 [ 175.301027][ T7474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.508 (7474) [ 175.335861][ T7474] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.349467][ T7474] BTRFS info (device loop2): using crc32c checksum algorithm [ 175.427593][ T38] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 175.467040][ T7474] BTRFS warning (device loop2): couldn't read tree root [ 175.485891][ T7474] BTRFS warning (device loop2): try to load backup roots slot 1 [ 175.502875][ T38] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 175.544588][ T7474] BTRFS warning (device loop2): couldn't read tree root [ 175.556726][ T7474] BTRFS warning (device loop2): try to load backup roots slot 2 [ 175.580750][ T38] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 175.619153][ T7474] BTRFS warning (device loop2): couldn't read tree root [ 175.628288][ T7474] BTRFS warning (device loop2): try to load backup roots slot 3 [ 175.703937][ T7474] BTRFS info (device loop2): checking UUID tree [ 175.725162][ T7474] BTRFS info (device loop2): setting nodatasum [ 175.732225][ T7474] BTRFS info (device loop2): enabling ssd optimizations [ 175.754279][ T7474] BTRFS info (device loop2): turning on flush-on-commit [ 175.787921][ T7474] BTRFS info (device loop2): turning on async discard [ 175.795178][ T7474] BTRFS info (device loop2): enabling free space tree [ 175.804285][ T7487] loop3: detected capacity change from 0 to 32768 [ 175.806276][ T7474] BTRFS info (device loop2): trying to use backup root at mount time [ 175.831824][ T7474] BTRFS info (device loop2): max_inline set to 0 [ 175.836126][ T7487] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 175.861867][ T7487] JBD2: Ignoring recovery information on journal [ 175.946371][ T7487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.204814][ T5619] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.240554][ T5621] ocfs2: Unmounting device (7,3) on (node local) [ 177.762714][ T7523] jffs2: notice: (7523) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.597650][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 178.636281][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 178.856415][ T31] audit: type=1800 audit(1785924493.891:22): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.531" name="nexus" dev="configfs" ino=14517 res=0 errno=0 [ 179.272441][ T7568] loop4: detected capacity change from 0 to 1024 [ 179.291567][ T7568] EXT4-fs: Ignoring removed orlov option [ 179.803456][ T7568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.574235][ T7576] loop1: detected capacity change from 0 to 128 [ 180.936956][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.344814][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.546'. [ 182.355248][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'. [ 182.365642][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'. [ 182.445862][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 183.828709][ T7608] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 183.909673][ T7608] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 184.001067][ T7608] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 184.047735][ T7631] fuse: Unknown parameter 'group_i00000000000000000000' [ 184.130764][ T7608] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.208840][ T7608] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.377118][ T7636] kAFS: unable to lookup cell 'џ' [ 185.666532][ T7638] loop4: detected capacity change from 0 to 512 [ 185.910820][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.254371][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.359331][ T7663] jffs2: notice: (7663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.013556][ T7678] fuse: Unknown parameter 'group_i00000000000000000000' [ 188.492740][ T7694] kAFS: unable to lookup cell 'џ' [ 188.882304][ T7692] netlink: 'syz.3.569': attribute type 2 has an invalid length. [ 189.003313][ T7692] netlink: 'syz.3.569': attribute type 2 has an invalid length. [ 189.124550][ T7697] dlm: no local IP address has been set [ 189.321266][ T7697] dlm: cannot start dlm midcomms -107 [ 189.964266][ T7683] loop2: detected capacity change from 0 to 32768 [ 189.996440][ T7683] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.567 (7683) [ 190.028686][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.442116][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 190.570957][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 190.744714][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 190.813294][ T7683] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 190.833402][ T7683] BTRFS info (device loop2): using crc32c checksum algorithm [ 190.843495][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.914761][ T29] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 190.946821][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.997049][ T29] usb 5-1: config 0 descriptor?? [ 191.100443][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 191.310043][ T29] usb 5-1: USB disconnect, device number 2 [ 191.315999][ C1] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 191.359573][ T4970] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 191.370627][ T7683] BTRFS error (device loop2): open_ctree failed: -4 [ 191.443352][ T7739] fuse: Unknown parameter 'group_id00000000000000000000' [ 191.740835][ T31] audit: type=1800 audit(1785924506.771:23): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="ipv4_address" dev="configfs" ino=13882 res=0 errno=0 [ 191.838972][ T31] audit: type=1800 audit(1785924506.771:24): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="ipv4_port" dev="configfs" ino=13883 res=0 errno=0 [ 191.951722][ T31] audit: type=1800 audit(1785924506.771:25): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="num" dev="configfs" ino=13884 res=0 errno=0 [ 192.036305][ T31] audit: type=1800 audit(1785924506.801:26): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="local" dev="configfs" ino=13885 res=0 errno=0 [ 192.090958][ T7750] netlink: 'syz.2.586': attribute type 2 has an invalid length. [ 192.102047][ T7750] netlink: 'syz.2.586': attribute type 2 has an invalid length. [ 192.108977][ T31] audit: type=1800 audit(1785924506.801:27): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="block_bytes" dev="configfs" ino=13886 res=0 errno=0 [ 192.157626][ T31] audit: type=1800 audit(1785924506.811:28): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="blocks" dev="configfs" ino=13887 res=0 errno=0 [ 192.232515][ T31] audit: type=1800 audit(1785924506.821:29): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="start_block" dev="configfs" ino=13888 res=0 errno=0 [ 192.309672][ T31] audit: type=1800 audit(1785924506.821:30): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.583" name="dev" dev="configfs" ino=13889 res=0 errno=0 [ 192.386350][ T7760] kAFS: unable to lookup cell 'џ' [ 192.800449][ T7772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.518131][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.524855][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.741204][ T7774] Process accounting resumed [ 193.866780][ T7778] fuse: Bad value for 'fd' [ 194.137550][ T31] audit: type=1800 audit(1785924509.161:31): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.598" name="ipv4_address" dev="configfs" ino=14825 res=0 errno=0 [ 194.825076][ T31] audit: type=1800 audit(1785924509.801:32): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.598" name="num" dev="configfs" ino=13957 res=0 errno=0 [ 194.999164][ T7764] loop3: detected capacity change from 0 to 32768 [ 195.036865][ T7764] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 195.096073][ T7764] JBD2: Ignoring recovery information on journal [ 195.201523][ T7764] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.518455][ T5621] ocfs2: Unmounting device (7,3) on (node local) [ 195.559539][ T7776] loop1: detected capacity change from 0 to 32768 [ 195.596657][ T7776] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.595 (7776) [ 195.680606][ T7810] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.703028][ T7776] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 195.744938][ T7776] BTRFS info (device loop1): using crc32c checksum algorithm [ 195.958961][ T7825] kAFS: unable to lookup cell 'џ' [ 196.985422][ T7776] BTRFS error (device loop1): open_ctree failed: -4 [ 197.038965][ T7836] fuse: Unknown parameter 'group_id00000000000000000000' [ 197.432039][ T7844] jffs2: notice: (7844) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.643647][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 197.643667][ T31] audit: type=1800 audit(1785924512.681:39): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="ipv4_address" dev="configfs" ino=14891 res=0 errno=0 [ 197.745436][ T31] audit: type=1800 audit(1785924512.721:40): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="ipv4_port" dev="configfs" ino=14892 res=0 errno=0 [ 197.861317][ T31] audit: type=1800 audit(1785924512.721:41): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="num" dev="configfs" ino=14893 res=0 errno=0 [ 197.956069][ T31] audit: type=1800 audit(1785924512.721:42): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="local" dev="configfs" ino=14894 res=0 errno=0 [ 198.051506][ T31] audit: type=1800 audit(1785924512.731:43): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="block_bytes" dev="configfs" ino=14897 res=0 errno=0 [ 198.127137][ T31] audit: type=1800 audit(1785924512.731:44): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="blocks" dev="configfs" ino=14898 res=0 errno=0 [ 198.191509][ T31] audit: type=1800 audit(1785924512.731:45): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="start_block" dev="configfs" ino=14899 res=0 errno=0 [ 198.259695][ T31] audit: type=1800 audit(1785924512.731:46): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.616" name="dev" dev="configfs" ino=14900 res=0 errno=0 [ 199.690968][ T7880] kAFS: unable to lookup cell 'џ' [ 200.670734][ T7882] loop2: detected capacity change from 0 to 256 [ 200.678162][ T7882] exfat: Deprecated parameter 'namecase' [ 200.684039][ T7882] exfat: Deprecated parameter 'namecase' [ 200.741735][ T7882] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 200.771962][ T7884] fuse: Bad value for 'user_id' [ 200.797165][ T7884] fuse: Bad value for 'user_id' [ 200.850871][ T31] audit: type=1800 audit(1785924515.851:47): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="file1" dev="loop2" ino=1048634 res=0 errno=0 [ 200.985873][ T7886] loop3: detected capacity change from 0 to 64 [ 201.260287][ T7894] tipc: Started in network mode [ 201.289450][ T7894] tipc: Node identity 26b72c7db81c, cluster identity 4711 [ 201.324980][ T7894] tipc: Enabled bearer , priority 0 [ 201.364759][ T7895] syzkaller0: entered promiscuous mode [ 201.387756][ T7895] syzkaller0: entered allmulticast mode [ 201.450095][ T7894] tipc: Resetting bearer [ 201.509301][ T7893] tipc: Resetting bearer [ 201.642267][ T7893] tipc: Disabling bearer [ 201.791881][ T7916] tipc: Started in network mode [ 201.861905][ T7916] tipc: Node identity aa5684d4620f, cluster identity 4711 [ 201.970632][ T7916] tipc: Enabled bearer , priority 0 [ 202.544639][ T7915] tipc: Disabling bearer [ 202.842620][ T7922] loop2: detected capacity change from 0 to 256 [ 202.866872][ T7922] exfat: Deprecated parameter 'namecase' [ 202.901509][ T7922] exfat: Deprecated parameter 'namecase' [ 202.902620][ T7924] fuse: Bad value for 'user_id' [ 202.912420][ T7924] fuse: Bad value for 'user_id' [ 203.040982][ T7922] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 203.717092][ T7943] jffs2: notice: (7943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 203.901521][ T5731] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 204.296365][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 205.057162][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 205.098519][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 205.130294][ T5731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.156517][ T7963] fuse: Bad value for 'user_id' [ 205.170808][ T7963] fuse: Bad value for 'user_id' [ 205.179065][ T7961] tipc: Enabled bearer , priority 0 [ 205.185832][ T5731] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 205.205549][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.226404][ T5731] usb 4-1: config 0 descriptor?? [ 205.234799][ T7958] tipc: Disabling bearer [ 205.290321][ T5731] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 205.540628][ T7971] kAFS: unable to lookup cell 'џ' [ 205.834276][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 205.840381][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 205.847100][ T4935] Bluetooth: hci0: command 0x2016 tx timeout [ 205.852107][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 205.861551][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 206.425424][ T5731] usb 4-1: USB disconnect, device number 3 [ 206.672272][ T31] audit: type=1800 audit(1785924521.711:48): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="ipv4_address" dev="configfs" ino=15103 res=0 errno=0 [ 206.701701][ T31] audit: type=1800 audit(1785924521.731:49): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="ipv4_port" dev="configfs" ino=15104 res=0 errno=0 [ 206.745526][ T31] audit: type=1800 audit(1785924521.731:50): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="num" dev="configfs" ino=15105 res=0 errno=0 [ 206.811542][ T31] audit: type=1800 audit(1785924521.731:51): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="local" dev="configfs" ino=15106 res=0 errno=0 [ 206.869596][ T7949] loop4: detected capacity change from 0 to 32768 [ 206.896827][ T7949] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.654 (7949) [ 206.919379][ T31] audit: type=1800 audit(1785924521.731:52): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="block_bytes" dev="configfs" ino=15107 res=0 errno=0 [ 207.026411][ T31] audit: type=1800 audit(1785924521.741:53): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="blocks" dev="configfs" ino=14197 res=0 errno=0 [ 207.124643][ T31] audit: type=1800 audit(1785924521.741:54): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="start_block" dev="configfs" ino=14198 res=0 errno=0 [ 207.205485][ T31] audit: type=1800 audit(1785924521.761:55): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.663" name="dev" dev="configfs" ino=14202 res=0 errno=0 [ 207.399489][ T8002] fuse: Bad value for 'fd' [ 207.485839][ T8004] loop5: detected capacity change from 0 to 128 [ 207.876901][ T8012] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5625] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8012] [ 207.905530][ T8012] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 207.916586][ T8012] FAT-fs (loop5): Filesystem has been set read-only [ 207.928358][ T8012] netlink: 388 bytes leftover after parsing attributes in process `syz.5.674'. [ 208.823592][ T8013] kAFS: unable to lookup cell 'џ' [ 209.064587][ T8016] jffs2: notice: (8016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.061765][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 210.241589][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 210.281290][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 210.330392][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 210.377710][ T8048] fuse: Bad value for 'fd' [ 210.385600][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.429384][ T29] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 210.458673][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.491907][ T29] usb 3-1: config 0 descriptor?? [ 210.534431][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 210.766481][ T29] usb 3-1: USB disconnect, device number 4 [ 210.783009][ T4970] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 211.069584][ T8058] kAFS: unable to lookup cell 'џ' [ 212.127067][ T31] audit: type=1800 audit(1785924527.161:56): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.694" name="ipv4_port" dev="configfs" ino=15236 res=0 errno=0 [ 212.183742][ T31] audit: type=1800 audit(1785924527.191:57): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.694" name="num" dev="configfs" ino=15237 res=0 errno=0 [ 212.239558][ T31] audit: type=1800 audit(1785924527.191:58): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.694" name="local" dev="configfs" ino=15238 res=0 errno=0 [ 212.751735][ T8083] jffs2: notice: (8083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 212.790064][ T8085] fuse: Bad value for 'fd' [ 213.400806][ T31] audit: type=1800 audit(1785924528.431:59): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="zoned" dev="configfs" ino=15423 res=0 errno=0 [ 213.416072][ T8098] null_blk: nullb1: using native zone append [ 213.462057][ T31] audit: type=1800 audit(1785924528.431:60): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="zone_nr_conv" dev="configfs" ino=15424 res=0 errno=0 [ 213.489923][ T31] audit: type=1800 audit(1785924528.431:61): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="power" dev="configfs" ino=15425 res=0 errno=0 [ 213.577661][ T8098] null_blk: disk nullb1 created [ 213.924887][ T8107] NFSD: Failed to start, no listeners configured. [ 213.950767][ T8115] kAFS: unable to lookup cell 'џ' [ 214.470706][ T8126] fuse: Bad value for 'fd' [ 214.718333][ T8134] jffs2: notice: (8134) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.803742][ T8129] syzkaller0: entered promiscuous mode [ 214.834094][ T8129] syzkaller0: entered allmulticast mode [ 214.975515][ T31] audit: type=1800 audit(1785924530.011:62): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.722" name="ipv4_address" dev="configfs" ino=15319 res=0 errno=0 [ 215.074085][ T31] audit: type=1800 audit(1785924530.011:63): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.722" name="ipv4_port" dev="configfs" ino=15320 res=0 errno=0 [ 215.124609][ T31] audit: type=1800 audit(1785924530.021:64): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.722" name="num" dev="configfs" ino=15321 res=0 errno=0 [ 215.658329][ T8152] kAFS: unable to lookup cell 'џ' [ 216.346805][ T8158] netlink: 'syz.0.728': attribute type 2 has an invalid length. [ 216.379174][ T8163] fuse: Bad value for 'fd' [ 216.383025][ T8158] netlink: 'syz.0.728': attribute type 2 has an invalid length. [ 216.852495][ T5768] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 217.000489][ T8176] kAFS: unable to lookup cell 'џ' [ 217.137734][ T5768] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 217.163061][ T5768] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 217.196302][ T5768] usb 6-1: Product: syz [ 217.211504][ T5768] usb 6-1: SerialNumber: syz [ 217.230859][ T5768] usb 6-1: config 0 descriptor?? [ 217.852607][ T5768] hso 6-1:0.0: Failed to find BULK eps [ 217.919210][ T5768] usb 6-1: USB disconnect, device number 5 [ 218.009194][ T31] audit: type=1800 audit(1785924533.041:65): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.737" name="nexus" dev="configfs" ino=15639 res=0 errno=0 [ 218.251376][ T8185] kAFS: unable to lookup cell 'џ' [ 218.855459][ T8187] loop4: detected capacity change from 0 to 128 [ 219.442846][ T8193] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8193] [ 219.483586][ T8193] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 219.493715][ T8193] FAT-fs (loop4): Filesystem has been set read-only [ 219.507204][ T8193] netlink: 260 bytes leftover after parsing attributes in process `syz.4.738'. [ 219.516510][ T8193] netlink: 104 bytes leftover after parsing attributes in process `syz.4.738'. [ 219.525834][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 220.706274][ T8206] fuse: Bad value for 'fd' [ 220.850195][ T8208] kAFS: unable to lookup cell 'џ' [ 223.150404][ T31] audit: type=1800 audit(1785924538.171:66): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.747" name="attr_allow_any_host" dev="configfs" ino=15702 res=0 errno=0 [ 223.169111][ T8222] nvmet: adding nsid 1 to subsystem testnqn [ 223.274425][ T31] audit: type=1800 audit(1785924538.311:67): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.747" name="buffered_io" dev="configfs" ino=15709 res=0 errno=0 [ 223.277742][ T8222] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 223.301872][ T31] audit: type=1800 audit(1785924538.311:68): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.747" name="enable" dev="configfs" ino=15710 res=0 errno=0 [ 223.306916][ T8222] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 223.306939][ T8222] CPU: 1 UID: 0 PID: 8222 Comm: syz.0.747 Not tainted syzkaller #0 PREEMPT(full) [ 223.344416][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 223.354508][ T8222] RIP: 0010:strlen+0x29/0x70 [ 223.359113][ T8222] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 223.378712][ T8222] RSP: 0018:ffffc90004c0f978 EFLAGS: 00010256 [ 223.384802][ T8222] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 223.392758][ T8222] RDX: ffffc9000df3a000 RSI: 000000000000004e RDI: 0000000000000000 [ 223.400714][ T8222] RBP: ffffc90004c0fab8 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 223.408674][ T8222] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: 1ffff92000981f40 [ 223.416633][ T8222] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 223.424594][ T8222] FS: 00007fddc72656c0(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 223.433512][ T8222] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.440081][ T8222] CR2: 0000001b33f15ff8 CR3: 0000000051c7f000 CR4: 0000000000350ef0 [ 223.448048][ T8222] Call Trace: [ 223.451315][ T8222] [ 223.454233][ T8222] do_getname_kernel+0x1d/0x230 [ 223.459085][ T8222] ? getname_kernel+0xd/0x20 [ 223.463672][ T8222] filp_open+0x87/0x1d0 [ 223.467828][ T8222] ? __pfx_filp_open+0x10/0x10 [ 223.472590][ T8222] ? __pfx___mutex_lock+0x10/0x10 [ 223.477619][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.483250][ T8222] nvmet_file_ns_enable+0x74/0x350 [ 223.488374][ T8222] nvmet_ns_enable+0xaa/0x780 [ 223.493054][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.498684][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.504312][ T8222] nvmet_ns_enable_store+0xd7/0x170 [ 223.509505][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.515133][ T8222] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 223.520938][ T8222] ? down_read+0x2be/0x330 [ 223.525358][ T8222] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 223.531162][ T8222] configfs_write_iter+0x337/0x430 [ 223.536315][ T8222] vfs_write+0x612/0xba0 [ 223.540552][ T8222] ? __pfx_vfs_write+0x10/0x10 [ 223.545310][ T8222] ? __fget_files+0x2a/0x420 [ 223.549902][ T8222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.555572][ T8222] ksys_write+0x150/0x270 [ 223.559893][ T8222] ? __pfx_ksys_write+0x10/0x10 [ 223.564738][ T8222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.570801][ T8222] do_syscall_64+0x174/0x580 [ 223.575402][ T8222] ? trace_irq_disable+0x3b/0x140 [ 223.580434][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.586329][ T8222] RIP: 0033:0x7fddc639e0d9 [ 223.590740][ T8222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.610347][ T8222] RSP: 002b:00007fddc7265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.618765][ T8222] RAX: ffffffffffffffda RBX: 00007fddc6625fa0 RCX: 00007fddc639e0d9 [ 223.626744][ T8222] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000005 [ 223.634721][ T8222] RBP: 00007fddc6435024 R08: 0000000000000000 R09: 0000000000000000 [ 223.642694][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.650659][ T8222] R13: 00007fddc6626038 R14: 00007fddc6625fa0 R15: 00007fff55d756e8 [ 223.658637][ T8222] [ 223.661642][ T8222] Modules linked in: [ 223.665929][ T8222] ---[ end trace 0000000000000000 ]--- [ 223.730749][ T8222] RIP: 0010:strlen+0x29/0x70 [ 223.737883][ T8222] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 223.785147][ T8222] RSP: 0018:ffffc90004c0f978 EFLAGS: 00010256 [ 223.795378][ T31] audit: type=1800 audit(1785924538.821:69): pid=8225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.747" name="addr_trtype" dev="configfs" ino=16494 res=0 errno=0 [ 223.816205][ T8222] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 223.851491][ T8222] RDX: ffffc9000df3a000 RSI: 000000000000004e RDI: 0000000000000000 [ 223.859597][ T8222] RBP: ffffc90004c0fab8 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 223.868003][ T8222] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: 1ffff92000981f40 [ 223.876313][ T8222] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 223.885342][ T8222] FS: 00007fddc72656c0(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 223.895892][ T8222] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.902782][ T8222] CR2: 00007fdbb23d4ff8 CR3: 0000000051c7f000 CR4: 0000000000350ef0 [ 223.910856][ T8222] Kernel panic - not syncing: Fatal exception [ 223.918118][ T8222] Kernel Offset: disabled [ 223.922428][ T8222] Rebooting in 86400 seconds..