last executing test programs: 16.669260729s ago: executing program 2 (id=3): remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000003, 0xfffffffffffffffc, 0x100) 16.001848309s ago: executing program 2 (id=6): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, @sadb_sa={0x2, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xd, 0xc0000001}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @broadcast}}]}, 0x70}, 0x1, 0x7}, 0x0) 13.671967831s ago: executing program 2 (id=8): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000280)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) getsockname(r2, 0x0, &(0x7f0000000140)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r1, 0x20, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/167, 0xa7}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10820, 0x400}}, 0x20}}, 0x4084) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r6, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000002800)=""/4110, 0x100e}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580), &(0x7f00000005c0)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x500, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfc, 0xfe, 0x0, 0xfe, 0x1}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x810000, &(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES8=r6, @ANYRES32=r7], 0x1, 0x1505, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x11842, 0x0, 0x86, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 13.277084406s ago: executing program 0 (id=9): unshare(0x8040600) r0 = getgid() r1 = fanotify_init(0x2, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000002c0)={'aio_aio12_8\x00', [0x100, 0x8, 0x4, 0x2, 0x4, 0x100, 0xffff, 0x6, 0x8, 0x9, 0x0, 0x7, 0x1, 0x2000405, 0x10001, 0x1, 0xfffffffe, 0x8, 0xfe6, 0x401, 0x5, 0x4, 0x7, 0x5, 0x48, 0x9, 0x1233, 0x6a77, 0x2, 0x4, 0x8]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, r5, 0x0) lchown(&(0x7f0000000000)='./file0\x00', r5, r0) fanotify_mark(r1, 0x1, 0x48000022, r2, 0x0) fanotify_mark(r1, 0x52, 0x40001008, r2, 0x0) 13.081292372s ago: executing program 0 (id=10): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvfrom$inet(r0, &(0x7f0000000180)=""/234, 0xea, 0x40002140, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x1b4, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10001}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x108, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x832}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x546}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x200, 0xc, 0x200, "ff39fe4a0b0d054b5fc9dcb458c0d11ec5206fa83f2c65d002c07232fddabd15", 0x7f76fb38201905bb}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x18, 0x78, 0x0}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000480)={0x100, 0x0, 0x0, 0xfffff5d4, 0x1, "ae68a7eb75bf36de0665af0c0476dc7e9cc77c"}) 12.76802864s ago: executing program 0 (id=11): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004005) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x6}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000d00)={[{@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@data_writeback}, {@errors_remount}, {@abort, 0x0}, {@nomblk_io_submit}, {@nobh}, {@oldalloc}, {@mblk_io_submit}, {@lazytime}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x27d}}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@norecovery}, {@jqfmt_vfsold}, {@sysvgroups}, {@init_itable}], [], 0x2c}, 0x2, 0x4fc, &(0x7f0000000700)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0) 12.609316422s ago: executing program 2 (id=12): r0 = socket$kcm(0xa, 0x5, 0x0) syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f00000001c0)='./file1\x00', 0x18802, &(0x7f0000000040)=ANY=[], 0x1, 0x18a, &(0x7f0000000800)="$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") quotactl$Q_GETQUOTA(0x0, &(0x7f00000010c0)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 11.859879687s ago: executing program 3 (id=4): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r1, &(0x7f0000001c80)=[{&(0x7f0000000040)="ebfa0e81ceb3dc4c430515dc4dade38ff8c84ace9d15af003afa41b75fbebe5b76443645c1dc73113beef85ec94ed0415b042c498c3bb8f9e0c37b9b373b6d", 0x3f}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r2, 0x221d, 0xcf75, 0x37, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x4008661e, &(0x7f0000000000)) 10.994553691s ago: executing program 0 (id=13): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x80000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904"], 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = dup3(r2, r3, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB='quiet,dir_umask=00000000000000000000007,iocharset=koi8-ru,codepage=maciceland,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6669020000006d61736b3d303030300d4a2b0b8b067f86a09d30303030303030303030303030303031b0812c66696c655f756d61736b3d303030303030303030303030303030322c0000000000f5f60f306436c835dfcf396a916761b471fdb0c3058fcaa37f423400d4dafbe7cfe2638e3d69a845df9207f497d2cca3ed67ebf015782da656a2cc85d6b55b315e0ec9524ebd14d7c35c873447a331a289612ef0b6af9691c3faa9ac830c0d041b8d4d"], 0x2, 0x36d, &(0x7f0000000500)="$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") mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000004fc0), 0x4481, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',mpol=default']) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 10.669259461s ago: executing program 2 (id=15): openat$dsp(0xffffffffffffff9c, 0x0, 0x268001, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x9) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x6}, {0x2, 0x1, 0x4000f, 0x6}], 0x10, 0x4000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000015a80), &(0x7f0000015ac0)='./file0\x00', 0x0, &(0x7f0000015b00), 0x1, 0x15a5b, &(0x7f0000015b40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x1) 10.555361108s ago: executing program 3 (id=16): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x7, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='ceph\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f00000003c0), 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200280) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000400)={{0xfffffffffffffffe, 0x3, 0xffffff38, 0x1, 0x63e}, 0x7fffffffffffffff, 0x4}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0xc9100120, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[], 0x0, 0x56, 0x0, 0x0, 0x2000}, 0x28) 10.540983426s ago: executing program 1 (id=2): r0 = socket(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x81, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0x2000000}, @local, {[@hopopts={0xff}]}}}}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff9, 0x6, 0x7, 0xc55, 0x101, 0x0}) prlimit64(r1, 0xa, &(0x7f0000000140)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x5, 0x2003) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.862034768s ago: executing program 4 (id=17): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xc, 0x8000, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r2, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16, 0xfffffff0}}], 0x1, 0x40000100, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 9.351075147s ago: executing program 3 (id=18): syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121000007fd0709"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000300)="240000001a005f0400f9f407000904018000200000000000000000000400010000000000", 0x24) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70, @ANYBLOB="14c6c781dcb879623815ea762b25f8a6ea2fdc01978d1f848547463451ff1eca3f7dfa249f41f45e06229771cf821a722728e3f99648648c02370a68596fa44b6dd5c10001faf7ebec378a5a61d3e8fdee523ce5bf50850613ff7d6e817b84ce33847ef8539f230d9b2d12a8bd2245eb1de857bc24e1fb3983665450b9322c5299ba0eb3c7281388eb8f65"], 0x1, 0x1e9, &(0x7f00000002c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.817793782s ago: executing program 4 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) (fail_nth: 1) 7.63511532s ago: executing program 2 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010010000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100080008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 7.172132723s ago: executing program 4 (id=21): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{0x0, 0xe0}, {&(0x7f0000000840)="c632", 0x2}], 0x2, &(0x7f0000000640)=ANY=[], 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x30, 0x4, 0x0, {0x1, 0x6, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044810}, 0x10000091) 6.430927954s ago: executing program 0 (id=22): name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) timerfd_create(0x0, 0x80800) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fstat(r0, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, 0x1}, 0xc) sync() ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) 6.295407601s ago: executing program 4 (id=23): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 3.923231407s ago: executing program 4 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010400400000fbdbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800900000008800280040003801400f37a6ff50300766c61ee0ab6000000000000"], 0x4c}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') setns(r1, 0x58000000) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@gid}, {@nodecompose}, {@part={'part', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'macromanian'}}]}, 0x1, 0x5e4, &(0x7f0000001f80)="$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") 1.961542478s ago: executing program 3 (id=25): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e25, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x90, 0x1, 0x5}, 0x9c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001740)={&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/165, 0xa5, 0x0, &(0x7f0000000740)=""/4096, 0x1000}, &(0x7f0000001780)=0x40) 1.364860416s ago: executing program 1 (id=26): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) listen(r0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000200)={0xa, 0x4e60, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) shutdown(r6, 0x1) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0x8, 0xc, 0x0, 0x81}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x400, 0x70b525, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40001, 0x2021}}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) 787.601184ms ago: executing program 3 (id=27): ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000000)=0x227) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000080)={0x1, 0x3, 0x9}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000100)="7214323b29d6c28feba9c58a5e41883ba42f580b263545b38b80ddc3819ca52d040d0889d157d313dc34dd995e0b7c6446290a83f28813d25c778be6e6a30f") ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000140)) r4 = fsopen(&(0x7f0000000180)='vxfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000001c0)='dirsync\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xd) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, 0x1c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x5c1000, 0x0) read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000004440)={0x20, 0x0, r8, {0x0, 0x7}}, 0x20) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000004480)={0x0, 0x0, 0x3}) syz_io_uring_setup(0x3b6a, &(0x7f00000044c0)={0x0, 0x3a2, 0x4, 0x2, 0x333, 0x0, r0}, &(0x7f0000004540), &(0x7f0000004580), &(0x7f00000045c0)) syz_usb_connect(0x5, 0x887, &(0x7f0000004600)={{0x12, 0x1, 0x150, 0xa5, 0x7d, 0x38, 0x10, 0x499, 0x104f, 0x4c75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x875, 0x4, 0x7, 0x7, 0xf0, 0x0, "", [{{0x9, 0x4, 0xc9, 0x5, 0x4, 0xa8, 0xa9, 0xb4, 0xf, [], [{{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0xe0, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x7}, @generic={0x1c, 0xa, "79817091eaae05dff64ac811ef42fb60ea7fb5f137f7a44002d2"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x0, 0x8, 0xff}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0xe, 0x8, 0x10, [@generic={0xa6, 0x4, "083488a0b318eb97cacbe544b83e590a19f74183e87f6bdf1db69477b5daf3306a725840ee666e924cbf3e141201e82cb733de600ea9d916139726e9c2f41cde7b7a15efff643f0a7ed7dce7b3eaa4c705cc18103ffcfbf9bdf1104f1392d58336f7692f756be7de24fd1f185e6c0f453fb0fe9a118aeccaadd64fa6d32b84699ef59cd9d29e8062f7e4005eb87c6004c5af87397a57312b8a33b55dcc1413e33ce115b1"}]}}]}}, {{0x9, 0x4, 0xd2, 0xfa, 0xf, 0xd, 0x18, 0x85, 0xc, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x6}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xf5f0, 0x400, 0x2, "692ebf3c"}, @as_header={0x7, 0x24, 0x1, 0xe0, 0x9, 0x4}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x2}]}], [{{0x9, 0x5, 0xd, 0xc, 0x8, 0x6, 0x0, 0x2}}, {{0x9, 0x5, 0x9, 0xb, 0x20, 0x6, 0x7f, 0xc, [@generic={0x3c, 0x30, "d6618c50a17375a667ff7330cd360361990bdf0ac5d615c4c2762ef23eaa7786df7ce9be593ddfbb72b5fdf855f3141eb324409fd1f04a853b2f"}, @generic={0x97, 0x6, "b8e19a203f28a90938f781b5f10aa772bfbd0a3999c1753a90578514a5146f2a0a8e4c9df3a981a9066a47dcac16aaf4a11d79b7c0bddeddc693e5c8afddb70abe6e1d18dc7862146749579cc784faa59c6d4912c3ec5db75c4c4b67ec4e45a95577158a4b0a872e4de96ac9464416ddd32b556a070496791fc03c266135132f39ed40400bbb4a2e8e20c0e95c0d54f3ba564c6674"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x0, 0x9, 0x10, [@generic={0xfc, 0x6, "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"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x7, 0x8, 0xe6, [@generic={0xa3, 0x8, "d0d1d8ce5f6e746c812f8c3cd335dfac78ab48f7b1f502dc61a8300c13ce862f3a6ba18985f2ba1a05808e94e7da823ef8da6781aefc0f9474bfd8179455bc6314709f20a7bf0ca524f86f51c73a97d394600b32628fbf356f8c3cfd717bd7469d38ee24528f0d73c4f76ba221349345acd0cf0c63fcdbb2648705d8c58ebe74b3c8061f0eaaf59c6a8e357f3c3de2852050f0bf104e579aebb71cbc34511fd192"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xb7, 0x8, 0x20, [@generic={0x21, 0xc8cd10c419aa4654, "f746668f0809c25de741544495f87d57f442aee7fae99571f2b8c7602b5410"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x5a}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x40, 0x6, 0xff}}, {{0x9, 0x5, 0xf, 0x14, 0x10, 0x22, 0x5, 0x4, [@generic={0xea, 0xb, "1f01aeb73af7181fea771459cfc67f65bf416ed5883a90364a5464620f57c299da4de9872c0510987551b730c53fc576f0f667945dc22a0f7e43f437a9fd2965eb87d846f69b96672577b59d0c3c16847899649f632e7a9615ee70a3df040b8cf11874a03cf80dc12566226588b0ad482ff4e05fc1e2888226521c23b871cdc8a8b4297746e4dfb2a1973eb2b35bb912c872f06aec15fbed9df9c4b19761f8e5f6bd202dd55ed5773d6dff8964a1dd1be064aeefbd04479805240ab542cbcb65bf8c880fe9816aa11dfaaa84887b843bcc7490a203ecec7344b12f801907ae8d07b806a2aa4bc5f0"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0xff, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x1}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x0, 0x1, 0x8, [@generic={0x12, 0xb, "66b9c8816486b6f4793018797c594e77"}, @generic={0xba, 0xd, "f604cc6d36d5568a10553f3c0b0a5a6f508624994024ab0853720566b6ab3bb3996c97237a035f71689afe23d79e3dce4ee63754466f6d34a780eec97350b6fe1e9e97b4172553f94866b8795dcd71270f8219e7819b60897f89221c3601941c8148d6b5ce6f84704a8c94f9a150a935335fe91d7027bdb344eb36939025a65085cfb79cbfd957e1d07781916c3193070075fff9a6d52ffb3253034cbbf2dd004803d19cb083f99e8e74d8c25e16f8bb2834a8306216abd3"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x7, 0x9, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x7, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0xf, 0x0, 0x4, [@generic={0x20, 0x24, "16057a2470cc6ea9fbcc5395dad0d9d510c8926fc85e3c3f9dc76ac8c502"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x10}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xb, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x3}, @generic={0x46, 0x3, "6792326ff2b75f2a01567e6354c97d320946366b3e53b6499773192d83e11306bd3694710ec0441f8d4d19c8e8f06393ea2be8cf4cc7fe5353d5e63fc1f2ca86e2cf16cb"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x8, 0x6, 0x5}}, {{0x9, 0x5, 0x664648e05262c88b, 0x10, 0x8, 0x6, 0x6, 0x7b}}]}}, {{0x9, 0x4, 0x8, 0x3, 0x0, 0xa3, 0x6a, 0x83, 0x6, [@hid_hid={0x9, 0x21, 0xa7, 0x3, 0x1, {0x22, 0x836}}]}}, {{0x9, 0x4, 0xa, 0x1, 0x5, 0xac, 0x6d, 0x7b, 0xf8, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x28}, [@selector_unit={0x7, 0x24, 0x5, 0x2, 0x5, "bce9"}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x2, "2adb"}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x4, 0x9, "a1b909c0"}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x5}]}, @generic={0x83, 0x30, "ccbdb4b7ee0e96923d6ad556ac4d59d1f7fdf8a0f53cf781591010adb74136ddb8aa384f5c76cf6cbd5e38cd1aac2066a27b8d869dc9b2c648f968c59c07c58b398995d658d393ceb90d1ebbfaafca975be9aa9bcc11c042cd0bf340c3484cae6ad5639024006f2cb91490c3f440f91414c6c24282572586ad18e6e666339f3d8e"}], [{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x7, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x2, 0x5d, 0x8}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x2, 0x4, 0x6, [@generic={0x67, 0x12, "ac9614e5a96b40ec900f9822b58638b18c03cfe25d3b60476a6609ac77cbf70c147e67db5d561312efb5ac1d1d0a7a870a933f6730b8a73bd9b427d753095d43611be1c130ffaa9c42d6e2d541f640b6c17e4f809058ac756a6ea9aa0920e65f526cae7ed5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x80, 0xa1, [@generic={0x91, 0x30, "1a6a2edd0395ce761365425a7f237733c64f580c6923f0f88ad29b47714dd85c67c58d0f77bbefd53630db3694672e429a8f011f643174adf14bc44547526b3a71eb62f95cdba860703f5ade5a540017980e5a2e18b7c0a578892c0725c28fa239eb2ffed199d1ba577a87f8828248d43ecc1e51d2eea6b30de4775483b68dc65dcff435bf5183fd5cca5309750aba"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x6, 0xf9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1}]}}]}}]}}]}}, &(0x7f0000004fc0)={0xa, &(0x7f0000004f00)={0xa, 0x6, 0x201, 0x7, 0x5, 0x4, 0xff, 0x81}, 0x57, &(0x7f0000004f40)={0x5, 0xf, 0x57, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xb, 0xf, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0x100}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x6, 0xff0f, 0x5, [0xff0000, 0xff3fff, 0x3f00, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "b247d854a785e3a631cf288cd10a2b03"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a449595410d39c61b43a1c815207c9a6"}]}}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000005000)={{0x3, 0x3, 0xffffffff, 0x4, 0x400, 0x10}, 0x342, [0x400, 0x0, 0x6, 0xfffffffb, 0x0, 0x2, 0x1, 0xd, 0x6d5, 0x3, 0x1, 0xffff6d58, 0x7, 0x6, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x8, 0x3, 0x8, 0x100, 0x6, 0x7, 0x1, 0x7, 0x7, 0x0, 0x6, 0x29b, 0x6, 0x6, 0x8000, 0x9, 0xfd6, 0x4, 0x6, 0x6, 0xfffffffa, 0x4, 0x1000, 0x7ff, 0x10000, 0x1, 0x4, 0x2, 0x3ff, 0x0, 0x3, 0x8, 0x64, 0x8, 0xfffffe01, 0x501, 0xf, 0x1, 0x3, 0x3d, 0xe4, 0x7, 0xfff, 0x6da8, 0x10000, 0xfb51, 0x7fffffff, 0x5, 0xf, 0x6, 0x1000, 0x7a, 0x401, 0x6, 0xfffffc00, 0xfff, 0x6e6, 0xf, 0x0, 0x20ea, 0x4, 0x9, 0x80000000, 0x5, 0x2, 0x5, 0x8ee, 0x10001, 0xca, 0xd, 0xfffffffd, 0x7fff, 0xc, 0x0, 0x1, 0x8, 0x2, 0x36, 0x231e, 0x3dc3, 0x40, 0x12, 0x2, 0x0, 0x4, 0x0, 0x4, 0x7, 0x1, 0x5, 0x5, 0x2, 0xf, 0x100, 0x267, 0x5, 0x3, 0xfffffff8, 0x0, 0x0, 0x5, 0x0, 0x2, 0x9, 0x6, 0x80000001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x6128, 0x2ad75e47, 0x5, 0x7ff, 0x1, 0x2, 0x3, 0x7, 0x6, 0x4, 0x9, 0x7, 0x400, 0x8, 0x7edb, 0x9, 0x6, 0x3, 0x1, 0x3, 0x8, 0x77e, 0x9, 0x0, 0x10000, 0x3, 0x8001, 0x3, 0x8, 0x1, 0xb, 0x2, 0x8, 0x1, 0x2, 0x65a, 0xbef, 0x7fffffff, 0xee3a, 0x5, 0x79300000, 0x4, 0xd, 0x2, 0x7ff, 0x4, 0x7, 0x1127, 0x8, 0x0, 0x6, 0x6, 0x6, 0x9, 0x2, 0x3, 0x3, 0x7, 0x9, 0x6, 0xd, 0x816, 0x8, 0x7c2, 0x2, 0x4, 0x3, 0xc361, 0x6, 0x4, 0x4, 0x99b8, 0x10001, 0x1, 0xd8, 0x5, 0x3, 0x3ff, 0x401, 0x3, 0x0, 0x5, 0x7, 0x7, 0x8, 0x6, 0x5, 0x614d, 0x1000, 0xc, 0x5, 0x1bd, 0x86, 0xfffffff7, 0x9, 0x400, 0x3, 0x1, 0x7, 0x1, 0xfd, 0x6, 0xfffffffc, 0x10, 0x10000, 0x9, 0x68000000, 0xd516, 0x5, 0x7ff, 0xffff7fff, 0xfffffffe, 0x8, 0x6, 0xffff, 0x9, 0x0, 0x232, 0x5, 0x489, 0x0, 0x5, 0x80000000, 0x8, 0x5, 0x5, 0x4, 0x4, 0x8, 0x80000001, 0x400, 0x3, 0xe, 0x0, 0x1, 0x3, 0x8, 0x1, 0x6, 0xfc0, 0x10, 0x7f, 0xb0d, 0x7b38f966, 0x7, 0x7, 0x10, 0x5, 0x6, 0x80000001, 0xc42, 0x0, 0xf48c, 0xfffffff7, 0x7, 0x7, 0x40, 0x8, 0x9, 0x3, 0x0, 0x2, 0x8001, 0x7, 0x7, 0x101, 0xb, 0x3ff, 0x0, 0x8, 0x0, 0x8, 0x7, 0x1, 0x2, 0x9, 0x5, 0x0, 0x1, 0xef, 0x6, 0x7, 0x3, 0xab, 0x3ff, 0xc, 0x4, 0x5, 0x9, 0xf, 0x6, 0x9, 0x3, 0x9, 0x0, 0x0, 0x5, 0x0, 0x3, 0x24a4e189, 0x0, 0x1000, 0x101, 0x6, 0x0, 0xff, 0x6669, 0x401, 0x7, 0x400, 0x88, 0x7, 0x9, 0x7, 0x232b, 0x1, 0x8, 0xffffff01, 0xe, 0x6, 0x2, 0x4, 0x6, 0xffffffff, 0xfffffff7, 0xf, 0xffffffff, 0x4bac, 0x7fff, 0x6, 0x3, 0x3, 0x3, 0x2, 0xf6, 0x4, 0x6, 0x227, 0x7, 0x8, 0x7, 0x7d9, 0x1, 0x4, 0x2bcb, 0xeb6, 0x3, 0x3, 0xe, 0x7, 0x81, 0x2, 0x7ff, 0x4, 0x3276, 0xbc, 0x8000, 0x5, 0x0, 0x80000000, 0xf, 0xc6, 0x0, 0x5, 0x3, 0x9c8e, 0xfffffffa, 0x6, 0x5, 0x5, 0x5c4, 0x10, 0x1, 0x6, 0x94, 0x7ff, 0x7, 0x6f1, 0xc, 0x6, 0x10001, 0x101, 0x5, 0x1, 0x4, 0xff, 0x4, 0x0, 0x3, 0x57b, 0x80, 0x5, 0x7fff, 0x80000001, 0x5, 0x8, 0x2, 0xa4, 0x3, 0x8, 0x7f, 0x7, 0x903e, 0x7f570a50, 0x5, 0x30, 0xf, 0x7f, 0x1, 0xffffffff, 0x8, 0xbe, 0x8, 0x7, 0x3, 0x10000, 0x7, 0xd5, 0x5, 0x5, 0xa, 0x80000001, 0xe, 0x2f4d, 0x10000, 0x40, 0x8fa, 0x9, 0x3, 0x4, 0xeb800000, 0x1ff, 0x4, 0x5, 0x3ff, 0x7, 0x5, 0x7, 0x4, 0x5, 0x6, 0x8000, 0x8, 0x10001, 0xfa70, 0x7c, 0x991d, 0x5, 0x2, 0x1000, 0x1fb2, 0x9, 0x2, 0x24, 0xf, 0xc5, 0xcb6, 0x4, 0x1, 0xffffffff, 0xd, 0x9, 0x9596, 0x2, 0xff, 0x1, 0x8, 0x9, 0x9, 0x59a, 0x3, 0x69f08767, 0x109a, 0x2, 0x8, 0x2, 0x4, 0x5, 0x5f03, 0xafa0, 0xc, 0x4, 0x2, 0x6, 0x8, 0x6a46, 0x800, 0x3, 0x4, 0x2, 0x466, 0xb, 0x6, 0x200, 0x4, 0x0, 0x80, 0x357, 0x1ff, 0x3, 0xfffffff8, 0x3, 0xc6, 0x7, 0x9, 0x5, 0x5, 0x80, 0x0, 0x4, 0x3c5, 0x2, 0x79, 0x6, 0x81, 0x80000000, 0x2, 0xffff, 0x5, 0x62de1071, 0x3, 0x0, 0x81, 0x6, 0x6, 0xa, 0x5, 0x7, 0x800, 0xeb96, 0xac, 0x6, 0x3, 0x5, 0x7, 0x3, 0xff, 0xcf98, 0x8, 0xd5a, 0x0, 0x0, 0xa, 0x4, 0x40, 0x3, 0x3, 0x80, 0x1ff, 0xff, 0xfffffff7, 0x2, 0x7, 0x1, 0x7, 0x8001, 0x1, 0x900, 0x0, 0x200, 0x40000, 0x2977, 0x9c, 0x8, 0x9, 0x7, 0x9, 0x6, 0x2, 0x10, 0x4, 0x80000000, 0x3, 0x6, 0xfff, 0xf7, 0x2, 0x1, 0xfffffff2, 0x8, 0x2a, 0xfffffff8, 0x1ff, 0x1ff, 0xfffffffd, 0x8000, 0x94, 0x7, 0x4, 0x9, 0x0, 0x2, 0x7, 0x1, 0x200, 0x1, 0x8, 0xfffffff5, 0x7, 0xfc8a, 0x9, 0x6, 0x7f, 0x0, 0x5, 0xffffff80, 0x0, 0x1, 0x4, 0x3, 0x5, 0x100000, 0x6, 0x1, 0x8c14, 0xf41, 0x400, 0xe696, 0x8, 0x3, 0xbd, 0x1, 0xc, 0x387e, 0x2, 0x0, 0x1, 0x1ff, 0xb, 0x8, 0x4, 0x4, 0x7, 0xf, 0xe8d, 0x400, 0x9, 0x0, 0x1, 0x187e60, 0x10000, 0xc, 0x1, 0x2, 0x7ff, 0x10001, 0x8666, 0x5, 0x1f, 0x4, 0x6, 0x6, 0x7fff, 0x3, 0x0, 0x2, 0x2, 0x40, 0x8001, 0x33c, 0x7, 0x1, 0x7fff, 0x8295, 0x262, 0x6, 0x1, 0xdd7, 0x1, 0x1, 0x369, 0xd, 0x80, 0x10000, 0x7621887a, 0x6, 0x0, 0x47fe, 0x5, 0x9, 0x2, 0x0, 0x47, 0x5, 0x4, 0x7, 0x1, 0xf, 0x3, 0x6, 0x1, 0x5, 0xcf, 0x8001, 0x81, 0x6, 0x9, 0x4, 0x1b0, 0x800, 0xffffffff, 0x8, 0xfffffffb, 0x7, 0xc, 0x0, 0xff, 0x10001, 0x3, 0xc3df, 0x2, 0x9, 0x2, 0x2263, 0x2, 0x9, 0x200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x200, 0x101, 0x8, 0x3, 0x1ff, 0x1, 0x7, 0x6, 0x753, 0x1, 0x2867a8b, 0x3, 0xe9cc, 0x1, 0x3, 0x8, 0xa9, 0xa7, 0x2, 0x7fff, 0x2, 0x0, 0x3, 0x0, 0x4, 0x8, 0xdfde, 0x9a4, 0x4, 0x9, 0x0, 0xce35be0f, 0xb, 0x1, 0x1, 0x1, 0x7, 0x8, 0xac7, 0x0, 0x3818, 0x7, 0x7daa6773, 0xfffff602, 0x400, 0x81, 0xc, 0xa4, 0x4d0b, 0xc0000, 0x7, 0xfffffffb, 0x8, 0x3, 0xfffffff9, 0x8, 0x456f, 0x0, 0x9, 0xc62, 0xffffffff, 0xd, 0x10, 0x1000, 0xc8aa, 0x100, 0x1, 0x8000, 0x4, 0x5, 0xfffffbff, 0x8, 0x400, 0xfb, 0x401, 0x1, 0x0, 0xffff8001, 0x9, 0x9, 0x5, 0x33e, 0x5, 0x7, 0x1, 0x7fff, 0x2, 0x6, 0x7, 0x5, 0x0, 0x42d3, 0x3, 0x5, 0xdc8, 0x9, 0xffff, 0x80000000, 0x640, 0x6, 0x0, 0x9, 0x7f, 0x7ff, 0x8000, 0x1, 0xb7, 0xffff, 0x2, 0xffff, 0x6, 0x7, 0x64, 0x8, 0x5, 0x100, 0x5, 0x1, 0x7, 0x2, 0x9, 0x7, 0xffffffff, 0x7, 0x0, 0x3, 0x7952, 0x7, 0x5, 0x33be8f00, 0x2, 0x10, 0x6, 0xf, 0x6, 0x9, 0x8000, 0x7, 0xc, 0x8, 0x97, 0xf3, 0x6, 0x7, 0x6, 0xf3, 0x1000, 0x4, 0x6, 0x5, 0x4, 0x7, 0x0, 0x800, 0xfffffffa, 0x2, 0x4, 0x6, 0x6, 0xb5c, 0x4, 0x4f3, 0x5, 0x10000, 0x8, 0x8, 0x8, 0x7, 0x40, 0x81, 0x80000000, 0x0, 0xfffffffa, 0x7, 0xc, 0x88c, 0x9, 0x6, 0x0, 0x7, 0xe63, 0x7, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0xa, 0x428d, 0x1, 0x7, 0xfffffffa, 0x9, 0x3, 0x9, 0x7, 0x15, 0x8, 0xffff, 0x5, 0x8000, 0x1000, 0x9, 0xec, 0xff, 0x4, 0x4, 0x101, 0x5, 0x3, 0x9, 0x3, 0xffff, 0x3, 0x9, 0x6, 0x9d, 0x3, 0x6, 0x9, 0x5979, 0x8, 0x7fffffff, 0x9, 0xbf8, 0x1, 0x7, 0x9, 0x7, 0x4, 0x40, 0x3ba, 0x4, 0xf5, 0xc0e2, 0x9, 0x2, 0x1, 0x7, 0x9, 0x7b, 0x9, 0x3d05, 0xf, 0x2, 0x0, 0x5, 0x6ac, 0x0, 0x8, 0x40, 0x3, 0x6, 0x7, 0x1ac, 0x4, 0x6, 0x0, 0x2, 0x1ff, 0xd4, 0x4, 0x2, 0x4, 0x41, 0x4, 0x3, 0x80, 0x80000001, 0x2, 0x3]}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f00000060c0)={{r7}, 0x3, &(0x7f0000006080)=[0xffffffffffffffff, 0xffffffffffffffff, 0x8], 0x7, 0xe}) 787.196508ms ago: executing program 4 (id=28): syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xf9, 0xc0041) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000ffff27bd8ba75c41df2500001000", @ANYRES32=0x0, @ANYBLOB="100a0500231a05004c0012800e00010069703665727370616e000000380002800400120005001600010000000800050000000000080015000e09000006000f004c08000008000d0004000000060011"], 0x6c}}, 0x20000850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ffff5c000d"], 0x9c}, 0x1, 0x0, 0x0, 0x400c444}, 0x40c0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x12, 0x87, &(0x7f0000000040)="ea37db86ff78f0516400ff48e06dd35069df5a1af2481c653a8ea8554de664c9f1e870b4085d98883c2d1f610c27a8e1228e93711f0374ced7de68da13aed8d4e7d2662e08136a3473afa0030cf16ea257ed832525391da686af2244b69ab72922603858894ed9be757b92310bb1ea8e0a5ec3a546c59574e350b477dc8c5845248b51f222dfb1"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 297.881655ms ago: executing program 0 (id=29): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) 206.533519ms ago: executing program 1 (id=30): socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x70040580) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x44) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) 0s ago: executing program 1 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_setup(0x81, &(0x7f0000001100)=0x0) r6 = syz_io_uring_setup(0x2afc, &(0x7f0000000900)={0x0, 0xe3f9, 0x11090, 0x3, 0x124}, &(0x7f00000003c0), &(0x7f0000000140), &(0x7f0000000580)) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) io_uring_enter(r6, 0x4da3, 0xd93, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r8 = syz_io_uring_setup(0x164d, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], 0x0, 0x1}, 0x20) madvise(&(0x7f00002f7000/0x4000)=nil, 0x4000, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 71.702296][ T5600] cgroup: Unknown subsys name 'net' [ 71.941065][ T5600] cgroup: Unknown subsys name 'cpuset' [ 71.997502][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.649144][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.179962][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.195764][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.215060][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.221262][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.236571][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.239689][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.240456][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.243045][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.262386][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.269005][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.270181][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.273193][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.275008][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.276652][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.283881][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.284307][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.291601][ T4930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.293512][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.295015][ T4930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.297908][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.301137][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.318320][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.319393][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.321644][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.382679][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.398380][ T5620] Bluetooth: hci2: command tx timeout [ 78.398556][ T5625] Bluetooth: hci1: command tx timeout [ 78.477091][ T5625] Bluetooth: hci0: command tx timeout [ 78.477212][ T5625] Bluetooth: hci4: command tx timeout [ 78.486970][ T5620] Bluetooth: hci3: command tx timeout [ 78.731638][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.731813][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.731963][ T5616] bridge_slave_0: entered allmulticast mode [ 78.735305][ T5616] bridge_slave_0: entered promiscuous mode [ 78.764536][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.764847][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.765391][ T5615] bridge_slave_0: entered allmulticast mode [ 78.772876][ T5615] bridge_slave_0: entered promiscuous mode [ 78.811577][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.811735][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.811873][ T5616] bridge_slave_1: entered allmulticast mode [ 78.818411][ T5616] bridge_slave_1: entered promiscuous mode [ 78.821654][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.821927][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.822513][ T5614] bridge_slave_0: entered allmulticast mode [ 78.825942][ T5614] bridge_slave_0: entered promiscuous mode [ 78.830487][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.830760][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.831405][ T5615] bridge_slave_1: entered allmulticast mode [ 78.834780][ T5615] bridge_slave_1: entered promiscuous mode [ 78.904958][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.905134][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.905307][ T5614] bridge_slave_1: entered allmulticast mode [ 78.908187][ T5614] bridge_slave_1: entered promiscuous mode [ 78.933871][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.934029][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.934163][ T5613] bridge_slave_0: entered allmulticast mode [ 78.936064][ T5613] bridge_slave_0: entered promiscuous mode [ 78.942794][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.943068][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.943287][ T5617] bridge_slave_0: entered allmulticast mode [ 78.946540][ T5617] bridge_slave_0: entered promiscuous mode [ 79.007769][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.008074][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.008311][ T5613] bridge_slave_1: entered allmulticast mode [ 79.010120][ T5613] bridge_slave_1: entered promiscuous mode [ 79.011768][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.011948][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.012260][ T5617] bridge_slave_1: entered allmulticast mode [ 79.013993][ T5617] bridge_slave_1: entered promiscuous mode [ 79.077294][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.099722][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.132860][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.146378][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.154309][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.315270][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.337429][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.342410][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.396586][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.407531][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.412205][ T5616] team0: Port device team_slave_0 added [ 79.433056][ T5615] team0: Port device team_slave_0 added [ 79.469885][ T5616] team0: Port device team_slave_1 added [ 79.472402][ T5614] team0: Port device team_slave_0 added [ 79.475146][ T5615] team0: Port device team_slave_1 added [ 79.528370][ T5614] team0: Port device team_slave_1 added [ 79.545126][ T5613] team0: Port device team_slave_0 added [ 79.553782][ T5617] team0: Port device team_slave_0 added [ 79.596492][ T5613] team0: Port device team_slave_1 added [ 79.600757][ T5617] team0: Port device team_slave_1 added [ 79.603215][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.603228][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.603251][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.632827][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.632843][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.632867][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.687286][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.687302][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.687325][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.689795][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.689806][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.689827][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.693250][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.693262][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.693285][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.763888][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.763902][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.763926][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.787653][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.787668][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.787690][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.791118][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.791131][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.791153][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.815466][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.815482][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.815505][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.819963][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.819977][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.820000][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.000977][ T5616] hsr_slave_0: entered promiscuous mode [ 80.003215][ T5616] hsr_slave_1: entered promiscuous mode [ 80.042343][ T5615] hsr_slave_0: entered promiscuous mode [ 80.044385][ T5615] hsr_slave_1: entered promiscuous mode [ 80.046288][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 80.046386][ T5615] Cannot create hsr debugfs directory [ 80.111909][ T5614] hsr_slave_0: entered promiscuous mode [ 80.113081][ T5614] hsr_slave_1: entered promiscuous mode [ 80.114043][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 80.114064][ T5614] Cannot create hsr debugfs directory [ 80.168544][ T5613] hsr_slave_0: entered promiscuous mode [ 80.169911][ T5613] hsr_slave_1: entered promiscuous mode [ 80.170881][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 80.170902][ T5613] Cannot create hsr debugfs directory [ 80.202675][ T5617] hsr_slave_0: entered promiscuous mode [ 80.203876][ T5617] hsr_slave_1: entered promiscuous mode [ 80.204867][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 80.204888][ T5617] Cannot create hsr debugfs directory [ 80.477216][ T5625] Bluetooth: hci2: command tx timeout [ 80.477297][ T5620] Bluetooth: hci1: command tx timeout [ 80.556983][ T5625] Bluetooth: hci0: command tx timeout [ 80.557070][ T5620] Bluetooth: hci4: command tx timeout [ 80.570958][ T5620] Bluetooth: hci3: command tx timeout [ 81.596095][ T32] cfg80211: failed to load regulatory.db [ 81.721373][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.778696][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.800763][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.833518][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.845201][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.881748][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.904294][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.928130][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.030449][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.072782][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.089577][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.132664][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.142325][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.177007][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.207188][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.250306][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.386037][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.410180][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.424333][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.461672][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.474424][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.512341][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.536258][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.557845][ T5625] Bluetooth: hci2: command tx timeout [ 82.557863][ T5620] Bluetooth: hci1: command tx timeout [ 82.579064][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.647928][ T5620] Bluetooth: hci3: command tx timeout [ 82.647955][ T5620] Bluetooth: hci4: command tx timeout [ 82.647971][ T5620] Bluetooth: hci0: command tx timeout [ 82.718433][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.751697][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.767992][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.811893][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.818933][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.852498][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.881981][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.919998][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.039550][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.100616][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.141526][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.150574][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.182287][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.186305][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.222775][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.240337][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.283230][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.331612][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.358595][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.400201][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.401051][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.482145][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.482258][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.563759][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.606299][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.620436][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.620612][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.682991][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.683100][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.775025][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.826469][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.826616][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.835364][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.924563][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.924793][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.068680][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.132124][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.132355][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.164687][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.214291][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.214397][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.341969][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.443530][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.443685][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.613173][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.618884][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.636981][ T5625] Bluetooth: hci2: command tx timeout [ 84.637009][ T5625] Bluetooth: hci1: command tx timeout [ 84.717967][ T5625] Bluetooth: hci0: command tx timeout [ 84.717996][ T5625] Bluetooth: hci4: command tx timeout [ 84.718016][ T5625] Bluetooth: hci3: command tx timeout [ 85.065567][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.512635][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.679319][ T5616] veth0_vlan: entered promiscuous mode [ 85.715256][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.785796][ T5616] veth1_vlan: entered promiscuous mode [ 86.064528][ T5614] veth0_vlan: entered promiscuous mode [ 86.116609][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.176763][ T5614] veth1_vlan: entered promiscuous mode [ 86.247833][ T5616] veth0_macvtap: entered promiscuous mode [ 86.284605][ T5616] veth1_macvtap: entered promiscuous mode [ 86.351087][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.399180][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.471598][ T5614] veth0_macvtap: entered promiscuous mode [ 86.484226][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.510405][ T5615] veth0_vlan: entered promiscuous mode [ 86.521400][ T5614] veth1_macvtap: entered promiscuous mode [ 86.552424][ T1120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.556212][ T5613] veth0_vlan: entered promiscuous mode [ 86.580861][ T1120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.599511][ T1120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.615755][ T1120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627012][ T5615] veth1_vlan: entered promiscuous mode [ 86.715958][ T5613] veth1_vlan: entered promiscuous mode [ 86.736567][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.872911][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.913081][ T5617] veth0_vlan: entered promiscuous mode [ 87.065983][ T1120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.071857][ T1120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.089801][ T1120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.096270][ T1120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.098921][ T5617] veth1_vlan: entered promiscuous mode [ 87.244902][ T5615] veth0_macvtap: entered promiscuous mode [ 87.303238][ T5613] veth0_macvtap: entered promiscuous mode [ 87.333489][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.333515][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.362515][ T5615] veth1_macvtap: entered promiscuous mode [ 87.425354][ T5613] veth1_macvtap: entered promiscuous mode [ 87.629405][ T3318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.629424][ T3318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.663162][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.703401][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.775715][ T5617] veth0_macvtap: entered promiscuous mode [ 87.806171][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.809702][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.809718][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.848901][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.850727][ T5617] veth1_macvtap: entered promiscuous mode [ 87.929849][ T2267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.963297][ T1480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.992608][ T1480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.038927][ T1480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.056614][ T1480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.072368][ T1480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.072737][ T2267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.072752][ T2267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.140499][ T1480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.218409][ T1480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.223950][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.427767][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.692888][ T5811] mmap: syz.2.3 (5811) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.863056][ T178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.885123][ T178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.890553][ T178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.890856][ T178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.186855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.206848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.216848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.226840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.236849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.246843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.256841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.266843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.276838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.286837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.069180][ T5815] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5815] [ 91.255864][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.255883][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.323258][ T5822] loop2: detected capacity change from 0 to 64 [ 91.372637][ T99] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.426469][ T99] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.436321][ T99] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.453187][ T99] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.500856][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.501932][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.502553][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.503854][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.711617][ T1480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.711635][ T1480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.843175][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.920794][ T99] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 91.944945][ T5828] syz.2.8: attempt to access beyond end of device [ 91.944945][ T5828] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 91.945042][ T5828] Buffer I/O error on dev loop2, logical block 512, async page read [ 91.945783][ T5828] syz.2.8: attempt to access beyond end of device [ 91.945783][ T5828] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 91.945807][ T5828] Buffer I/O error on dev loop2, logical block 56576, async page read [ 92.002437][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.026672][ T5828] syz.2.8: attempt to access beyond end of device [ 92.026672][ T5828] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 92.026703][ T5828] Buffer I/O error on dev loop2, logical block 512, async page read [ 92.028880][ T5828] syz.2.8: attempt to access beyond end of device [ 92.028880][ T5828] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 92.028909][ T5828] Buffer I/O error on dev loop2, logical block 56576, async page read [ 92.042152][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 92.043548][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 92.043916][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 92.044206][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 92.046103][ T5828] overlay: ./file0 is not a directory [ 92.282284][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.282302][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.455021][ T5836] loop0: detected capacity change from 0 to 512 [ 92.474841][ T5836] ======================================================= [ 92.474841][ T5836] WARNING: The mand mount option has been deprecated and [ 92.474841][ T5836] and is ignored by this kernel. Remove the mand [ 92.474841][ T5836] option from the mount to silence this warning. [ 92.474841][ T5836] ======================================================= [ 92.560534][ T68] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 92.629714][ T1120] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 92.644516][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 92.663960][ T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.677067][ T1120] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.677137][ T1120] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.677159][ T1120] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.680399][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.692488][ T5836] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 92.716619][ T1120] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.717808][ T1120] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.719671][ T5836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102] [ 92.719817][ T5836] System zones: 1-12 [ 92.749028][ T57] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.779780][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.779798][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.795846][ T1480] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.803434][ T5836] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.811734][ T1480] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.813560][ T1480] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.816597][ T1480] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.854109][ T1480] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.861170][ T1480] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 92.910633][ T5839] loop2: detected capacity change from 0 to 8 [ 92.935795][ T1480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.935813][ T1480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.940224][ T5836] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.11: invalid indirect mapped block 2 (level 2) [ 92.940428][ T5836] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.947047][ C0] EXT4-fs (loop0): initial error at time 1779036950: ext4_free_branches:1023: inode 11 [ 92.947081][ C0] EXT4-fs (loop0): last error at time 1779036950: ext4_free_branches:1023: inode 11 [ 92.980653][ T2267] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1 [ 93.010889][ T5836] EXT4-fs (loop0): Remounting filesystem read-only [ 93.042475][ T5836] EXT4-fs (loop0): 1 truncate cleaned up [ 93.160912][ T5836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 93.179469][ T2267] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 93.183968][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 93.341876][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 93.425050][ T1480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.425069][ T1480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.484889][ T5836] loop0: Can't mount, would change RO state [ 94.102291][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 94.234978][ T5847] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.14'. [ 94.235103][ T5847] openvswitch: netlink: Message has 512 unknown bytes. [ 94.362333][ T5614] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 94.715224][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 95.238206][ T5602] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.110130][ T5861] loop2: detected capacity change from 0 to 131072 [ 96.182820][ T99] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.188389][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.192201][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.192969][ T5861] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 96.236523][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.238179][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.241403][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.242986][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.243729][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.244970][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.247555][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.250074][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.251404][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.252725][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.252806][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.253572][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.254002][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.254411][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.256297][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.256857][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.257064][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.257523][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.258074][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.258438][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.258621][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.258794][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.259021][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.259200][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.259376][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.259553][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.259735][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.259909][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.260089][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.260354][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.260487][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.260701][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.260870][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.261040][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.261203][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.261363][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.261523][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.261695][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.261855][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.262020][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.262179][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.262363][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.262522][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.262684][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.262854][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.263040][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.263207][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.263366][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.263525][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.263692][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.263869][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.264042][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.264200][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.264374][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.264553][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.264720][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.264880][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.265060][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.265302][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.265481][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.265641][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.265813][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.265991][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.266175][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.266386][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.266567][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.266741][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.268783][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.269006][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.269205][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.269339][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.269508][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.269685][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.269858][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.269994][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.270163][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.270432][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.270659][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.270838][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.271020][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.271152][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.271319][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.271495][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.271701][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.271918][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.272047][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.272227][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.272355][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.272523][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.272694][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.272854][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.273037][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.273199][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.273358][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.273531][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.273692][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.273859][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274021][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274153][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274282][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274439][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274566][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274700][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274859][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.274989][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.275110][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.275231][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.275476][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.275608][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.275741][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.275865][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.276032][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.276193][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.276508][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.276682][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.276904][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.277095][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.277237][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.277415][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.277550][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.277676][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.277856][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.277995][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.278130][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.278259][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.278437][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.278577][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.278710][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.278844][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.279033][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.279213][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.279420][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.279608][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.279772][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.279933][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.280106][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.280266][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.280427][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.280676][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.280842][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.281017][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.281179][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.281339][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.281509][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.281679][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.281917][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.282063][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.282189][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.282359][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.282534][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.282695][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.282855][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.283021][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.283193][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.283358][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.283519][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.283677][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.283847][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.284024][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.284190][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.284384][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.284556][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.284694][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.284837][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.285027][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.285174][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.285327][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.285553][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.285694][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.285838][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.285998][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.286112][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.286264][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.286379][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.286521][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.286646][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.286821][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.286970][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.287100][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.287250][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.287362][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.287473][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.287616][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.287769][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.287956][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.288147][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.288326][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.288489][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.288660][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.288823][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.288955][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.289085][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.289242][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.289366][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.289502][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.289663][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.289791][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.289911][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.290075][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.290201][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.290321][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.290491][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.290616][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.290819][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.290947][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.291116][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.291244][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.291377][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.291535][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.291666][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.291827][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.292128][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.292387][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.292555][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.292773][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.292899][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.293171][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.293356][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.293547][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.293711][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.293912][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.294045][ T1184] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.295845][ T1480] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 96.306548][ T1480] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 96.311351][ T5861] XFS (loop2): Starting recovery (logdev: internal) [ 96.313065][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.313350][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.313541][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.317929][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.318192][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.318654][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.318893][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.319087][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323210][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323249][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323272][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323295][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323318][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323340][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323363][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323386][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.323407][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.349606][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.353482][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.353913][ T3318] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 96.353962][ T3318] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 96.354858][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.359741][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.362605][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.362651][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.365328][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.366137][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.366181][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.366748][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.367007][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.371127][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.371872][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.373125][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.373541][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.375363][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.376595][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.383240][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.386493][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.386977][ T5861] XFS (loop2): Ending recovery (logdev: internal) [ 96.388854][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.389555][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.389598][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.391020][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.391243][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.392776][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.394475][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.395485][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.396682][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.397661][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.406824][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.418794][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.419557][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.420194][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.420971][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.421732][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.431594][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.432542][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.438214][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.442853][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.466332][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.470583][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.491997][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.588015][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.590648][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.596272][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.599626][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.604245][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.605808][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.624583][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.624642][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.633148][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.637677][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.637723][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.637752][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.642322][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.651236][ T68] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.766925][ T5602] usb 1-1: Using ep0 maxpacket: 8 [ 96.846394][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.863798][ T1120] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.916142][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.916198][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.916222][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.916249][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.924761][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.924882][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.929220][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.933956][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.938432][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.938854][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.962438][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.966918][ T4943] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.970019][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.990064][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.990167][ T1480] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 96.999292][ T3318] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 97.028169][ T99] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 97.066768][ T99] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 97.159905][ T4943] usb 4-1: Using ep0 maxpacket: 16 [ 97.364831][ T4943] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.438219][ T5602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.451867][ T4943] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.451901][ T4943] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.451951][ T4943] usb 4-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0 [ 97.470582][ T4943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.470610][ T4943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.470629][ T4943] usb 4-1: Product: syz [ 97.470643][ T4943] usb 4-1: Manufacturer: syz [ 97.470657][ T4943] usb 4-1: SerialNumber: syz [ 97.489152][ T5878] FAULT_INJECTION: forcing a failure. [ 97.489152][ T5878] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.489196][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: syz.4.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.489221][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.489239][ T5878] Call Trace: [ 97.489247][ T5878] [ 97.489254][ T5878] dump_stack_lvl+0xe8/0x150 [ 97.489283][ T5878] should_fail_ex+0x46b/0x600 [ 97.489310][ T5878] _copy_from_user+0x2d/0xb0 [ 97.489336][ T5878] ___sys_sendmsg+0x1c6/0x360 [ 97.489357][ T5878] ? __lock_acquire+0x6b5/0x2d10 [ 97.489383][ T5878] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.489436][ T5878] ? __fget_files+0x2a/0x420 [ 97.489457][ T5878] ? __fget_files+0x3a6/0x420 [ 97.489489][ T5878] __x64_sys_sendmsg+0x1c3/0x2a0 [ 97.489513][ T5878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.489542][ T5878] ? __pfx_ksys_write+0x10/0x10 [ 97.489576][ T5878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.489597][ T5878] do_syscall_64+0x15f/0xf80 [ 97.489618][ T5878] ? trace_irq_disable+0x3b/0x140 [ 97.489645][ T5878] ? clear_bhb_loop+0x40/0x90 [ 97.489667][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.489685][ T5878] RIP: 0033:0x7f6d211bce59 [ 97.489706][ T5878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.489721][ T5878] RSP: 002b:00007f6d1f416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.489740][ T5878] RAX: ffffffffffffffda RBX: 00007f6d21435fa0 RCX: 00007f6d211bce59 [ 97.489753][ T5878] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 97.489764][ T5878] RBP: 00007f6d1f416090 R08: 0000000000000000 R09: 0000000000000000 [ 97.489776][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.489787][ T5878] R13: 00007f6d21436038 R14: 00007f6d21435fa0 R15: 00007fffb178e258 [ 97.489815][ T5878] [ 97.694084][ T68] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 97.838037][ T5616] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 98.017065][ T5602] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 98.017095][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.017115][ T5602] usb 1-1: Product: syz [ 98.017130][ T5602] usb 1-1: Manufacturer: syz [ 98.055097][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 98.067287][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 98.067363][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 98.067394][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 98.067454][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 98.699431][ T1184] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 98.753791][ T1389] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 98.990086][ T68] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 99.068444][ T1184] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 99.139425][ T1184] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 99.621559][ T5602] usb 1-1: config 0 descriptor?? [ 99.640762][ T5602] usb 1-1: can't set config #0, error -71 [ 99.695471][ T5602] usb 1-1: USB disconnect, device number 2 [ 101.617531][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 101.617565][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 102.115773][ T5893] loop4: detected capacity change from 0 to 1024 [ 102.718021][ T1389] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 102.870719][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 102.965303][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 102.976168][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 102.993024][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 102.998397][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.004554][ T1242] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.008145][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.074789][ T5616] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 103.092867][ T4943] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 103.092913][ T4943] cdc_ncm 4-1:1.0: bind() failure [ 103.134012][ T1389] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.139011][ T1389] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.150009][ T99] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.156054][ T99] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.163537][ T1242] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.304440][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.308271][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.350325][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.503428][ T4943] usb 4-1: USB disconnect, device number 2 [ 103.560428][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.560479][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.560503][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.560524][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.646635][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.646686][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.646711][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.646735][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.653899][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.655549][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.655666][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.655777][ T3318] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.692919][ T1242] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.692964][ T1242] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.692988][ T1242] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.693010][ T1242] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 103.704841][ T5893] hfsplus: failed to load root directory [ 103.777335][ T5893] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 104.767841][ T32] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.807627][ T5602] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.853883][ T5913] netlink: 9 bytes leftover after parsing attributes in process `syz.2.20'. [ 104.933288][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.933323][ T32] usb 5-1: config 0 has no interfaces? [ 104.939942][ T32] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 104.939969][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.939988][ T32] usb 5-1: Product: syz [ 104.940002][ T32] usb 5-1: Manufacturer: syz [ 104.940016][ T32] usb 5-1: SerialNumber: syz [ 104.999593][ T5913] netlink: 9 bytes leftover after parsing attributes in process `syz.2.20'. [ 105.006550][ T32] usb 5-1: config 0 descriptor?? [ 105.007293][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 105.029856][ T5602] usb 4-1: config 7 has an invalid interface number: 201 but max is 3 [ 105.029882][ T5602] usb 4-1: config 7 has an invalid interface number: 8 but max is 3 [ 105.029901][ T5602] usb 4-1: config 7 has an invalid interface number: 210 but max is 3 [ 105.029922][ T5602] usb 4-1: config 7 has an invalid interface number: 8 but max is 3 [ 105.029941][ T5602] usb 4-1: config 7 has an invalid interface number: 10 but max is 3 [ 105.029960][ T5602] usb 4-1: config 7 has no interface number 0 [ 105.029976][ T5602] usb 4-1: config 7 has no interface number 1 [ 105.029991][ T5602] usb 4-1: config 7 has no interface number 2 [ 105.030006][ T5602] usb 4-1: config 7 has no interface number 3 [ 105.030089][ T5602] usb 4-1: config 7 interface 201 altsetting 5 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 105.030115][ T5602] usb 4-1: config 7 interface 201 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 105.030148][ T5602] usb 4-1: too many endpoints for config 7 interface 8 altsetting 52: 136, using maximum allowed: 30 [ 105.030184][ T5602] usb 4-1: config 7 interface 8 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 136 [ 105.030226][ T5602] usb 4-1: config 7 interface 210 altsetting 250 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 105.030252][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0xB, skipping [ 105.030281][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0xB, skipping [ 105.030303][ T5602] usb 4-1: config 7 interface 210 altsetting 250 endpoint 0x2 has an invalid bInterval 64, changing to 7 [ 105.030336][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0x8, skipping [ 105.030358][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0x8, skipping [ 105.030379][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0xB, skipping [ 105.030434][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 105.030456][ T5602] usb 4-1: config 7 interface 210 altsetting 250 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 105.030482][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0xF, skipping [ 105.030503][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0xB, skipping [ 105.030524][ T5602] usb 4-1: config 7 interface 210 altsetting 250 has a duplicate endpoint with address 0x8B, skipping [ 105.030575][ T5602] usb 4-1: config 7 interface 10 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 105.030598][ T5602] usb 4-1: config 7 interface 10 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 105.030619][ T5602] usb 4-1: config 7 interface 10 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 105.030639][ T5602] usb 4-1: config 7 interface 10 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 105.030659][ T5602] usb 4-1: config 7 interface 10 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 105.030680][ T5602] usb 4-1: config 7 interface 201 has no altsetting 0 [ 105.030698][ T5602] usb 4-1: config 7 interface 8 has no altsetting 0 [ 105.030715][ T5602] usb 4-1: config 7 interface 8 has no altsetting 1 [ 105.030732][ T5602] usb 4-1: config 7 interface 210 has no altsetting 0 [ 105.030748][ T5602] usb 4-1: config 7 interface 10 has no altsetting 0 [ 105.043636][ T5602] usb 4-1: New USB device found, idVendor=0499, idProduct=104f, bcdDevice=4c.75 [ 105.043664][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.043682][ T5602] usb 4-1: Product: syz [ 105.043694][ T5602] usb 4-1: Manufacturer: syz [ 105.043707][ T5602] usb 4-1: SerialNumber: syz [ 105.599717][ T5620] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 105.599741][ T5620] CPU: 1 UI[ 105.599741][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.599765][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.599778][ T5620] Workqueue: hci3 hci_rx_work [ 105.599807][ T5620] Call Trace: [ 105.599814][ T5620] [ 105.599823][ T5620] dump_stack_lvl+0xe8/0x150 [ 105.599854][ T5620] sysfs_create_dir_ns+0x271/0x2a0 [ 105.599881][ T5620] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 105.599915][ T5620] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 105.599946][ T5620] ? rt_spin_unlock+0x160/0x200 [ 105.599985][ T5620] kobject_add_internal+0x631/0xd10 [ 105.600024][ T5620] kobject_add+0x163/0x240 [ 105.600059][ T5620] ? __pfx_kobject_add+0x10/0x10 [ 105.600103][ T5620] ? get_device_parent+0x370/0x3a0 [ 105.600135][ T5620] device_add+0x408/0xb90 [ 105.600166][ T5620] hci_conn_add_sysfs+0xd5/0x210 [ 105.600194][ T5620] le_conn_complete_evt+0x10e6/0x16b0 [ 105.600235][ T5620] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 105.600266][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.600291][ T5620] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.600319][ T5620] ? skb_pull_data+0xfb/0x200 [ 105.600351][ T5620] hci_le_conn_complete_evt+0x187/0x470 [ 105.600388][ T5620] hci_event_packet+0x659/0xef0 [ 105.600420][ T5620] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 105.600450][ T5620] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 105.600477][ T5620] ? __pfx_hci_event_packet+0x10/0x10 [ 105.600501][ T5620] ? rt_spin_unlock+0x14f/0x200 [ 105.600538][ T5620] ? hci_send_to_monitor+0xe2/0x590 [ 105.600571][ T5620] hci_rx_work+0x3ee/0x1040 [ 105.600606][ T5620] ? process_one_work+0x8be/0x1630 [ 105.600636][ T5620] process_one_work+0x98b/0x1630 [ 105.600687][ T5620] ? __pfx_process_one_work+0x10/0x10 [ 105.600714][ T5620] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.600762][ T5620] worker_thread+0xb49/0x1140 [ 105.600802][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.600841][ T5620] kthread+0x388/0x470 [ 105.600864][ T5620] ? __pfx_worker_thread+0x10/0x10 [ 105.600892][ T5620] ? __pfx_kthread+0x10/0x10 [ 105.600916][ T5620] ret_from_fork+0x514/0xb70 [ 105.600945][ T5620] ? __pfx_ret_from_fork+0x10/0x10 [ 105.600971][ T5620] ? __switch_to+0xc79/0x1410 [ 105.600995][ T5620] ? __pfx_kthread+0x10/0x10 [ 105.601018][ T5620] ret_from_fork_asm+0x1a/0x30 [ 105.601065][ T5620] [ 105.601179][ T5620] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.601218][ T5620] Bluetooth: hci3: failed to register connection device [ 105.645784][ T5620] ================================================================== [ 105.645800][ T5620] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 105.645842][ T5620] Read of size 8 at addr ffff88802d194500 by task kworker/u9:2/5620 [ 105.645864][ T5620] [ 105.645876][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.645899][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.645914][ T5620] Workqueue: hci3 hci_rx_work [ 105.645939][ T5620] Call Trace: [ 105.645947][ T5620] [ 105.645956][ T5620] dump_stack_lvl+0xe8/0x150 [ 105.645983][ T5620] print_address_description+0x55/0x1e0 [ 105.646008][ T5620] ? l2cap_connect_cfm+0x902/0x1560 [ 105.646034][ T5620] print_report+0x58/0x70 [ 105.646055][ T5620] kasan_report+0x117/0x150 [ 105.646086][ T5620] ? l2cap_connect_cfm+0x902/0x1560 [ 105.646117][ T5620] l2cap_connect_cfm+0x902/0x1560 [ 105.646149][ T5620] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 105.646177][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.646201][ T5620] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.646223][ T5620] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.646246][ T5620] ? mutex_lock_nested+0x152/0x1d0 [ 105.646271][ T5620] ? hci_connect_cfm+0x2c/0x140 [ 105.646295][ T5620] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 105.646321][ T5620] hci_connect_cfm+0x95/0x140 [ 105.646343][ T5620] le_conn_complete_evt+0x1134/0x16b0 [ 105.646375][ T5620] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 105.646406][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.646430][ T5620] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.646452][ T5620] ? skb_pull_data+0xfb/0x200 [ 105.646478][ T5620] hci_le_conn_complete_evt+0x187/0x470 [ 105.646509][ T5620] hci_event_packet+0x659/0xef0 [ 105.646534][ T5620] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 105.646571][ T5620] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 105.646597][ T5620] ? __pfx_hci_event_packet+0x10/0x10 [ 105.646619][ T5620] ? rt_spin_unlock+0x14f/0x200 [ 105.646652][ T5620] ? hci_send_to_monitor+0xe2/0x590 [ 105.646684][ T5620] hci_rx_work+0x3ee/0x1040 [ 105.646711][ T5620] ? process_one_work+0x8be/0x1630 [ 105.646738][ T5620] process_one_work+0x98b/0x1630 [ 105.646772][ T5620] ? __pfx_process_one_work+0x10/0x10 [ 105.646798][ T5620] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.646831][ T5620] worker_thread+0xb49/0x1140 [ 105.646862][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.646887][ T5620] kthread+0x388/0x470 [ 105.646906][ T5620] ? __pfx_worker_thread+0x10/0x10 [ 105.646932][ T5620] ? __pfx_kthread+0x10/0x10 [ 105.646952][ T5620] ret_from_fork+0x514/0xb70 [ 105.646977][ T5620] ? __pfx_ret_from_fork+0x10/0x10 [ 105.646999][ T5620] ? __switch_to+0xc79/0x1410 [ 105.647020][ T5620] ? __pfx_kthread+0x10/0x10 [ 105.647043][ T5620] ret_from_fork_asm+0x1a/0x30 [ 105.647078][ T5620] [ 105.647086][ T5620] [ 105.647091][ T5620] Allocated by task 5620: [ 105.647101][ T5620] kasan_save_track+0x3e/0x80 [ 105.647129][ T5620] __kasan_kmalloc+0x93/0xb0 [ 105.647155][ T5620] __kmalloc_cache_noprof+0x3a6/0x690 [ 105.647181][ T5620] l2cap_chan_create+0x51/0x7a0 [ 105.647196][ T5620] l2cap_sock_new_connection_cb+0x191/0x2f0 [ 105.647213][ T5620] l2cap_connect_cfm+0x368/0x1560 [ 105.647240][ T5620] hci_connect_cfm+0x95/0x140 [ 105.647260][ T5620] le_conn_complete_evt+0x1134/0x16b0 [ 105.647285][ T5620] hci_le_conn_complete_evt+0x187/0x470 [ 105.647310][ T5620] hci_event_packet+0x659/0xef0 [ 105.647329][ T5620] hci_rx_work+0x3ee/0x1040 [ 105.647349][ T5620] process_one_work+0x98b/0x1630 [ 105.647373][ T5620] worker_thread+0xb49/0x1140 [ 105.647399][ T5620] kthread+0x388/0x470 [ 105.647417][ T5620] ret_from_fork+0x514/0xb70 [ 105.647438][ T5620] ret_from_fork_asm+0x1a/0x30 [ 105.647463][ T5620] [ 105.647468][ T5620] Freed by task 5916: [ 105.647477][ T5620] kasan_save_track+0x3e/0x80 [ 105.647500][ T5620] kasan_save_free_info+0x46/0x50 [ 105.647519][ T5620] __kasan_slab_free+0x5c/0x80 [ 105.647544][ T5620] kfree+0x1c5/0x6c0 [ 105.647576][ T5620] l2cap_sock_cleanup_listen+0xf0/0x440 [ 105.647596][ T5620] l2cap_sock_release+0x6e/0x270 [ 105.647613][ T5620] __sock_release+0xb9/0x250 [ 105.647637][ T5620] sock_close+0x1c/0x30 [ 105.647660][ T5620] __fput+0x461/0xa70 [ 105.647681][ T5620] task_work_run+0x1d9/0x270 [ 105.647701][ T5620] exit_to_user_mode_loop+0xf3/0x4d0 [ 105.647719][ T5620] do_syscall_64+0x33e/0xf80 [ 105.647741][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.647759][ T5620] [ 105.647764][ T5620] The buggy address belongs to the object at ffff88802d194000 [ 105.647764][ T5620] which belongs to the cache kmalloc-2k of size 2048 [ 105.647780][ T5620] The buggy address is located 1280 bytes inside of [ 105.647780][ T5620] freed 2048-byte region [ffff88802d194000, ffff88802d194800) [ 105.647801][ T5620] [ 105.647806][ T5620] The buggy address belongs to the physical page: [ 105.647823][ T5620] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d190 [ 105.647845][ T5620] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.647860][ T5620] flags: 0x80000000000040(head|node=0|zone=1) [ 105.647881][ T5620] page_type: f5(slab) [ 105.647897][ T5620] raw: 0080000000000040 ffff88813fe17000 dead000000000100 dead000000000122 [ 105.647914][ T5620] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 105.647933][ T5620] head: 0080000000000040 ffff88813fe17000 dead000000000100 dead000000000122 [ 105.647951][ T5620] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 105.647969][ T5620] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 105.647986][ T5620] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 105.647997][ T5620] page dumped because: kasan: bad access detected [ 105.648010][ T5620] page_owner tracks the page as allocated [ 105.648017][ T5620] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 68, tgid 68 (kworker/u8:4), ts 84129129797, free_ts 51666311530 [ 105.648052][ T5620] post_alloc_hook+0x1f9/0x250 [ 105.648078][ T5620] get_page_from_freelist+0x27d6/0x2850 [ 105.648096][ T5620] __alloc_frozen_pages_noprof+0x18d/0x380 [ 105.648114][ T5620] allocate_slab+0x74/0x5e0 [ 105.648134][ T5620] refill_objects+0x33c/0x3d0 [ 105.648153][ T5620] __pcs_replace_empty_main+0x373/0x720 [ 105.648175][ T5620] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 105.648204][ T5620] __alloc_skb+0x2c1/0x7d0 [ 105.648219][ T5620] inet6_ifinfo_notify+0x70/0x120 [ 105.648241][ T5620] addrconf_notify+0xca0/0x1050 [ 105.648266][ T5620] notifier_call_chain+0x1ad/0x3d0 [ 105.648283][ T5620] netif_state_change+0x27d/0x3a0 [ 105.648306][ T5620] __linkwatch_run_queue+0x575/0x850 [ 105.648328][ T5620] linkwatch_event+0x4c/0x60 [ 105.648349][ T5620] process_one_work+0x98b/0x1630 [ 105.648372][ T5620] worker_thread+0xb49/0x1140 [ 105.648402][ T5620] page last free pid 5393 tgid 5393 stack trace: [ 105.648414][ T5620] __free_frozen_pages+0x1075/0x11b0 [ 105.648440][ T5620] __slab_free+0x252/0x2a0 [ 105.648466][ T5620] qlist_free_all+0x99/0x100 [ 105.648489][ T5620] kasan_quarantine_reduce+0x148/0x160 [ 105.648513][ T5620] __kasan_slab_alloc+0x22/0x80 [ 105.648536][ T5620] kmem_cache_alloc_noprof+0x33b/0x680 [ 105.648569][ T5620] vm_area_alloc+0x24/0x140 [ 105.648587][ T5620] mmap_region+0x1203/0x2280 [ 105.648608][ T5620] do_mmap+0xc2f/0x10c0 [ 105.648632][ T5620] vm_mmap_pgoff+0x2cc/0x4f0 [ 105.648656][ T5620] ksys_mmap_pgoff+0x4e8/0x720 [ 105.648681][ T5620] do_syscall_64+0x15f/0xf80 [ 105.648703][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.648722][ T5620] [ 105.648726][ T5620] Memory state around the buggy address: [ 105.648737][ T5620] ffff88802d194400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.648750][ T5620] ffff88802d194480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.648764][ T5620] >ffff88802d194500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.648774][ T5620] ^ [ 105.648784][ T5620] ffff88802d194580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.648797][ T5620] ffff88802d194600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.648807][ T5620] ================================================================== [ 105.650619][ T5620] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.650645][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.650669][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.650682][ T5620] Workqueue: hci3 hci_rx_work [ 105.650708][ T5620] Call Trace: [ 105.650715][ T5620] [ 105.650723][ T5620] vpanic+0x56c/0xa60 [ 105.650753][ T5620] ? __pfx_vpanic+0x10/0x10 [ 105.650783][ T5620] panic+0xc5/0xd0 [ 105.650809][ T5620] ? __pfx_panic+0x10/0x10 [ 105.650835][ T5620] ? preempt_schedule_thunk+0x16/0x40 [ 105.650857][ T5620] ? l2cap_connect_cfm+0x902/0x1560 [ 105.650886][ T5620] ? preempt_schedule_thunk+0x16/0x40 [ 105.650906][ T5620] ? l2cap_connect_cfm+0x902/0x1560 [ 105.650934][ T5620] check_panic_on_warn+0x89/0xb0 [ 105.650958][ T5620] ? l2cap_connect_cfm+0x902/0x1560 [ 105.650987][ T5620] end_report+0x73/0x170 [ 105.651016][ T5620] ? l2cap_connect_cfm+0x902/0x1560 [ 105.651044][ T5620] kasan_report+0x128/0x150 [ 105.651074][ T5620] ? l2cap_connect_cfm+0x902/0x1560 [ 105.651107][ T5620] l2cap_connect_cfm+0x902/0x1560 [ 105.651140][ T5620] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 105.651170][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.651193][ T5620] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.651216][ T5620] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 105.651238][ T5620] ? mutex_lock_nested+0x152/0x1d0 [ 105.651266][ T5620] ? hci_connect_cfm+0x2c/0x140 [ 105.651292][ T5620] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 105.651323][ T5620] hci_connect_cfm+0x95/0x140 [ 105.651350][ T5620] le_conn_complete_evt+0x1134/0x16b0 [ 105.651383][ T5620] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 105.651412][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.651434][ T5620] ? lockdep_hardirqs_on+0x7a/0x110 [ 105.651457][ T5620] ? skb_pull_data+0xfb/0x200 [ 105.651483][ T5620] hci_le_conn_complete_evt+0x187/0x470 [ 105.651513][ T5620] hci_event_packet+0x659/0xef0 [ 105.651537][ T5620] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 105.651574][ T5620] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 105.651599][ T5620] ? __pfx_hci_event_packet+0x10/0x10 [ 105.651622][ T5620] ? rt_spin_unlock+0x14f/0x200 [ 105.651655][ T5620] ? hci_send_to_monitor+0xe2/0x590 [ 105.651686][ T5620] hci_rx_work+0x3ee/0x1040 [ 105.651712][ T5620] ? process_one_work+0x8be/0x1630 [ 105.651738][ T5620] process_one_work+0x98b/0x1630 [ 105.651774][ T5620] ? __pfx_process_one_work+0x10/0x10 [ 105.651800][ T5620] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.651834][ T5620] worker_thread+0xb49/0x1140 [ 105.651866][ T5620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 105.651896][ T5620] kthread+0x388/0x470 [ 105.651916][ T5620] ? __pfx_worker_thread+0x10/0x10 [ 105.651942][ T5620] ? __pfx_kthread+0x10/0x10 [ 105.651964][ T5620] ret_from_fork+0x514/0xb70 [ 105.651989][ T5620] ? __pfx_ret_from_fork+0x10/0x10 [ 105.652012][ T5620] ? __switch_to+0xc79/0x1410 [ 105.652035][ T5620] ? __pfx_kthread+0x10/0x10 [ 105.652056][ T5620] ret_from_fork_asm+0x1a/0x30 [ 105.652107][ T5620] [ 105.652361][ T5620] Kernel Offset: disabled