last executing test programs: 49.04315349s ago: executing program 0 (id=55): syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000000540)="7cd75378bd24be180019580ec857a8498d519fbb9e7b", 0x16) 47.022283989s ago: executing program 0 (id=62): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000640)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x8, 0x6, 0x3, 0x79e2, 0x6, {0x0, @in={{0x2, 0x4e24, @local}}, 0x8, 0x100, 0x2, 0x10, 0xa}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380)={r1}, &(0x7f00000003c0)=0x8) 46.665883473s ago: executing program 0 (id=63): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap$snddsp_control(&(0x7f0000003000/0x2000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x83000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 46.183720436s ago: executing program 0 (id=66): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x48, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x48}}, 0x20000000) 44.018818225s ago: executing program 0 (id=70): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) open_tree(r2, &(0x7f0000000640)='\x00', 0x9901) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xeeee0000, 0x1000, 0x9, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0x2f, 0x7}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x41000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) 43.460706183s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 27.830221833s ago: executing program 32 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 9.204713339s ago: executing program 3 (id=169): syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000000540)="7cd75378bd24be180019580ec857a8498d519fbb9e7b", 0x16) 8.221801686s ago: executing program 1 (id=172): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap$snddsp_control(&(0x7f0000003000/0x2000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x83000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8.004282041s ago: executing program 1 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100) fsync(r0) 7.860903321s ago: executing program 1 (id=174): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.590117318s ago: executing program 3 (id=178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) open_tree(r3, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xeeee0000, 0x1000, 0x9, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0x2f, 0x7}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x41000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) 5.575559898s ago: executing program 4 (id=180): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) close_range(r4, r5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)={0xf4, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000800}, 0x10000001) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 4.942896741s ago: executing program 4 (id=182): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) 4.81081566s ago: executing program 4 (id=183): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @random="794f26efb4a6", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf001, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e7842237e6fff89cecf1a50f3d2ee3d"}]}}}}}}}}, 0x0) 4.637868151s ago: executing program 1 (id=184): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000001980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x8000, 0x1ff) 4.624517753s ago: executing program 4 (id=185): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000001200)={0x2020}, 0x2020) write$sndseq(r1, &(0x7f0000000e00)=[{0x2, 0x0, 0xdf, 0x3, @time={0x8, 0xf6}, {0x40, 0x31}, {0x0, 0x8}, @addr={0x27, 0x5}}, {0x7, 0xfd, 0x8, 0x20, @time={0x0, 0x1}, {0x39, 0x40}, {0x1, 0x4}, @result={0x800}}], 0x38) 4.600627074s ago: executing program 2 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x3, 0x8}, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03000a", 0x0, 0x0, 0x0, @private0, @local}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6003, 0x135) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r0) openat$kvm(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@mblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") 3.653009399s ago: executing program 2 (id=187): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file7\x00', 0x200008, &(0x7f0000000340)=ANY=[], 0x1, 0x1d3, &(0x7f0000000100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file7/file0\x00', 0x800020, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4247c, &(0x7f0000008180)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYBLOB="b13754b80dea7719ef0dc3f550fbdc73cba49d4e7c82016d5769fcbd99ef37581e8a1a59015dac55d80767f6ebd134de7aeb32fb8672e2854f2b1f232b59d913c818bafee229130f2f139c9abd8d6278fd2347233a650ab304a1d02efb4c9c6f4d32e45cad4ade56d6f2966fc3f418c537da6c8a2c1fcf66667f65c4f6794746c9da9c7778c19647890cd400af2cc623f50c755118d05171a980c539cac0576e4b616d0c4027", @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYBLOB="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"/394, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x5, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3.601853243s ago: executing program 1 (id=188): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) close_range(r4, r5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)={0x6c, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000800}, 0x10000001) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.601443673s ago: executing program 4 (id=189): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) close_range(r4, r5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)={0xc4, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000800}, 0x10000001) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 2.897444671s ago: executing program 1 (id=190): syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000000), 0x1, 0x1141, &(0x7f0000002380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x02\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x0) 2.848549795s ago: executing program 2 (id=191): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) close_range(r4, r5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)={0xf4, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000800}, 0x10000001) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 2.781950719s ago: executing program 3 (id=192): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x4}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x62da8b53, @loopback, 0x101}]}, &(0x7f0000000200)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) 2.114800425s ago: executing program 2 (id=193): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x100, 0x5, 0x2, 0x1}, 'syz1\x00', 0x25}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000200)={{}, 0x11, 0xae, 0x80000001}, 0x18) 2.061871828s ago: executing program 3 (id=194): r0 = socket$inet6(0xa, 0x803, 0x6) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x2b}, 0x8) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) 1.870955871s ago: executing program 3 (id=195): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(0x0, 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap$snddsp_control(&(0x7f0000003000/0x2000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x83000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.617240899s ago: executing program 2 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x3, 0x8}, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03000a", 0x0, 0x0, 0x0, @private0, @local}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6003, 0x135) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r0) openat$kvm(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@mblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") 1.185224219s ago: executing program 4 (id=197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x72bb, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 45.905157ms ago: executing program 3 (id=198): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan}, {@noblock_validity}]}, 0x1, 0x7b4, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x184) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 0s ago: executing program 2 (id=199): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) close_range(r4, r5, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000b08000700e80700000800070001000000080009007f00000008000700090000000800080008000000080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)={0x6c, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000800}, 0x10000001) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 74.412846][ T5751] cgroup: Unknown subsys name 'net' [ 74.543054][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.910010][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.318541][ T5767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.328416][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.335748][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.343951][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.357307][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.365285][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.377210][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.388792][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.397309][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.402892][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.404771][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.412828][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.420035][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.427780][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.440278][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.448740][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.448925][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.456012][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.462786][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.470467][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.486290][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.486886][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.503893][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.504230][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.928399][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 77.964258][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 78.091698][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 78.107950][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 78.118287][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.125903][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.133350][ T5765] bridge_slave_0: entered allmulticast mode [ 78.140331][ T5765] bridge_slave_0: entered promiscuous mode [ 78.184070][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.191446][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.200911][ T5765] bridge_slave_1: entered allmulticast mode [ 78.207784][ T5765] bridge_slave_1: entered promiscuous mode [ 78.268084][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.275213][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.282556][ T5766] bridge_slave_0: entered allmulticast mode [ 78.289948][ T5766] bridge_slave_0: entered promiscuous mode [ 78.297499][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.304565][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.311999][ T5766] bridge_slave_1: entered allmulticast mode [ 78.318726][ T5766] bridge_slave_1: entered promiscuous mode [ 78.342633][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.375986][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.392287][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.399672][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.407006][ T5763] bridge_slave_0: entered allmulticast mode [ 78.413646][ T5763] bridge_slave_0: entered promiscuous mode [ 78.433743][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.445934][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.453500][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.460939][ T5763] bridge_slave_1: entered allmulticast mode [ 78.467786][ T5763] bridge_slave_1: entered promiscuous mode [ 78.504048][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.533086][ T5765] team0: Port device team_slave_0 added [ 78.542610][ T5765] team0: Port device team_slave_1 added [ 78.567816][ T5766] team0: Port device team_slave_0 added [ 78.575985][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.587038][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.594723][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.602344][ T5764] bridge_slave_0: entered allmulticast mode [ 78.609127][ T5764] bridge_slave_0: entered promiscuous mode [ 78.616441][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.623684][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.630945][ T5764] bridge_slave_1: entered allmulticast mode [ 78.638665][ T5764] bridge_slave_1: entered promiscuous mode [ 78.654409][ T5766] team0: Port device team_slave_1 added [ 78.672280][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.737653][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.751201][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.758523][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.787505][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.800004][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.807576][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.838206][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.853106][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.860387][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.887164][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.913523][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.926074][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.933165][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.959276][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.982910][ T5763] team0: Port device team_slave_0 added [ 79.020260][ T5763] team0: Port device team_slave_1 added [ 79.042387][ T5764] team0: Port device team_slave_0 added [ 79.053954][ T5766] hsr_slave_0: entered promiscuous mode [ 79.060493][ T5766] hsr_slave_1: entered promiscuous mode [ 79.079852][ T5764] team0: Port device team_slave_1 added [ 79.134681][ T5765] hsr_slave_0: entered promiscuous mode [ 79.140925][ T5765] hsr_slave_1: entered promiscuous mode [ 79.147578][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.155401][ T5765] Cannot create hsr debugfs directory [ 79.171761][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.178909][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.205054][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.218211][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.225166][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.251491][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.279520][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.286485][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.313135][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.332848][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.339845][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.366362][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.458531][ T5763] hsr_slave_0: entered promiscuous mode [ 79.465082][ T5763] hsr_slave_1: entered promiscuous mode [ 79.471808][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.480552][ T5763] Cannot create hsr debugfs directory [ 79.517483][ T5775] Bluetooth: hci0: command tx timeout [ 79.562514][ T5764] hsr_slave_0: entered promiscuous mode [ 79.568755][ T5764] hsr_slave_1: entered promiscuous mode [ 79.574760][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.582872][ T5764] Cannot create hsr debugfs directory [ 79.596953][ T5775] Bluetooth: hci2: command tx timeout [ 79.602391][ T5770] Bluetooth: hci3: command tx timeout [ 79.602637][ T5775] Bluetooth: hci1: command tx timeout [ 79.852039][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.865357][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.875298][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.908018][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.958286][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.970353][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.989594][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.000985][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.059959][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.091155][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.100535][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.110827][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.208348][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.221441][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.231696][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.252343][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.322220][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.348398][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.390704][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.412946][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.423891][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.453766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.461100][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.473286][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.480594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.490721][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.497847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.512351][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.542303][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.549829][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.560118][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.567541][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.578283][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.585385][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.656390][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.771517][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.840103][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.884301][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.891518][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.929956][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.937149][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.071234][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.175295][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.268866][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.284261][ T5766] veth0_vlan: entered promiscuous mode [ 81.328333][ T5765] veth0_vlan: entered promiscuous mode [ 81.353327][ T5766] veth1_vlan: entered promiscuous mode [ 81.363600][ T5765] veth1_vlan: entered promiscuous mode [ 81.393491][ T5764] veth0_vlan: entered promiscuous mode [ 81.413697][ T5764] veth1_vlan: entered promiscuous mode [ 81.450936][ T5766] veth0_macvtap: entered promiscuous mode [ 81.468451][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.481746][ T5766] veth1_macvtap: entered promiscuous mode [ 81.492280][ T5765] veth0_macvtap: entered promiscuous mode [ 81.511366][ T5765] veth1_macvtap: entered promiscuous mode [ 81.532760][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.550928][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.578715][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.587732][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.596508][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.606328][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.607107][ T5775] Bluetooth: hci0: command tx timeout [ 81.624458][ T5764] veth0_macvtap: entered promiscuous mode [ 81.635293][ T5764] veth1_macvtap: entered promiscuous mode [ 81.651879][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.664074][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.675714][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.678022][ T5770] Bluetooth: hci2: command tx timeout [ 81.691167][ T51] Bluetooth: hci1: command tx timeout [ 81.697890][ T5775] Bluetooth: hci3: command tx timeout [ 81.732463][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.743738][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.755237][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.776475][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.788331][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.798603][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.810172][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.821893][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.834598][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.847240][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.857328][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.867952][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.879368][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.892855][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.902756][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.912033][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.922373][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.934689][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.944458][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.953797][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.962881][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.981309][ T5763] veth0_vlan: entered promiscuous mode [ 82.070259][ T5763] veth1_vlan: entered promiscuous mode [ 82.210392][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.238002][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.258587][ T5763] veth0_macvtap: entered promiscuous mode [ 82.288548][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.296402][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.314569][ T5763] veth1_macvtap: entered promiscuous mode [ 82.335931][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.354414][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.452332][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.480635][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.485306][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.511221][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.521565][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.533565][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.547814][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.561382][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.575457][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.608635][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.630872][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.656651][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.680101][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.696075][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.707577][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.719115][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.731621][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.739626][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.758423][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.767856][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.776579][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.786310][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.804036][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.821214][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.964021][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.979422][ T5753] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.997920][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.073005][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.093159][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.216747][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 83.269252][ T5753] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 83.367215][ T5753] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 83.429068][ T5753] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 83.641562][ T5753] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 83.693426][ T5775] Bluetooth: hci0: command tx timeout [ 83.703169][ T5753] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.757917][ T5775] Bluetooth: hci1: command tx timeout [ 83.763991][ T5775] Bluetooth: hci3: command tx timeout [ 83.769597][ T5775] Bluetooth: hci2: command tx timeout [ 83.862084][ T5846] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 83.868721][ T5753] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 83.890721][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.995912][ T5753] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 84.050890][ T5753] usb 1-1: Product: syz [ 84.081175][ T5753] usb 1-1: Manufacturer: syz [ 84.089448][ T5753] usb 1-1: SerialNumber: syz [ 84.109852][ T5753] usb 1-1: config 0 descriptor?? [ 84.123054][ T5843] nbd0: detected capacity change from 0 to 63 [ 84.140034][ T5753] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.168976][ T5753] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.226184][ T5775] block nbd0: Receive control failed (result -104) [ 84.235361][ T5770] block nbd0: Receive control failed (result -32) [ 84.335381][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 84.342400][ T1198] usb 1-1: USB disconnect, device number 2 [ 84.352111][ T1198] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 84.546737][ T5753] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.765568][ T5857] syz.3.9[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.804613][ T5857] loop3: detected capacity change from 0 to 512 [ 84.818051][ T5857] ======================================================= [ 84.818051][ T5857] WARNING: The mand mount option has been deprecated and [ 84.818051][ T5857] and is ignored by this kernel. Remove the mand [ 84.818051][ T5857] option from the mount to silence this warning. [ 84.818051][ T5857] ======================================================= [ 84.853706][ T5857] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.920903][ T5857] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 84.984216][ T5857] block device autoloading is deprecated and will be removed. [ 84.993911][ T5857] EXT4-fs (loop3): external journal has bad superblock [ 85.504164][ T5753] usb 2-1: Using ep0 maxpacket: 32 [ 85.523648][ T5753] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 85.546746][ T5753] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 85.588490][ T5753] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 85.621755][ T5753] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 85.653984][ T5753] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.674937][ T5753] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 85.685776][ T5753] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 85.694463][ T5753] usb 2-1: Product: syz [ 85.700996][ T5753] usb 2-1: Manufacturer: syz [ 85.705723][ T5753] usb 2-1: SerialNumber: syz [ 85.761419][ T5770] Bluetooth: hci0: command tx timeout [ 85.848662][ T5770] Bluetooth: hci2: command tx timeout [ 85.856291][ T5770] Bluetooth: hci3: command tx timeout [ 85.866200][ T5775] Bluetooth: hci1: command tx timeout [ 85.916096][ T5753] usb 2-1: config 0 descriptor?? [ 86.087842][ T5753] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 86.256093][ T5753] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 86.304205][ T5753] usb 2-1: USB disconnect, device number 2 [ 86.334588][ T5753] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 86.609335][ T5860] loop2: detected capacity change from 0 to 32768 [ 86.635551][ T5860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (5860) [ 86.658194][ T5830] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.697433][ T5860] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.710221][ T5860] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 86.737266][ T5860] BTRFS info (device loop2): using free space tree [ 86.826524][ T5860] BTRFS info (device loop2): enabling ssd optimizations [ 86.844195][ T5860] BTRFS info (device loop2): auto enabling async discard [ 86.882490][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 86.905091][ T5830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.932499][ T5830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.962868][ T5830] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.002417][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.025932][ T5830] usb 1-1: Product: syz [ 87.042187][ T5830] usb 1-1: Manufacturer: syz [ 87.052073][ T5830] usb 1-1: SerialNumber: syz [ 87.053564][ T9] cfg80211: failed to load regulatory.db [ 87.584129][ T5830] usb 1-1: 0:2 : does not exist [ 87.589585][ T5830] usb 1-1: unit 12 not found! [ 87.620881][ T5830] usb 1-1: USB disconnect, device number 3 [ 87.794149][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.719749][ T5763] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.129179][ T5879] loop3: detected capacity change from 0 to 32768 [ 89.189343][ T5879] gfs2: fsid=Ô±rÐÛ»ð_î [ 89.189343][ T5879] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 89.189343][ T5879] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM" [ 89.211354][ T5879] gfs2: fsid=Ô±rÐÛ»ð_î [ 89.211354][ T5879] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Now mounting FS (format 1801)... [ 89.306795][ T1198] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.315309][ T5879] gfs2: fsid=Ô±rÐÛ»ð_î [ 89.315309][ T5879] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: journal 0 mapped with 5 extents in 0ms [ 89.551939][ T5879] gfs2: fsid=Ô±rÐÛ»ð_î [ 89.551939][ T5879] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: first mount done, others may mount [ 90.270726][ T5919] loop3: detected capacity change from 0 to 512 [ 90.279247][ T5919] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.159545][ T5916] sched: RT throttling activated [ 91.189684][ T5919] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 91.198884][ T5919] EXT4-fs (loop3): external journal has bad superblock [ 91.774071][ T5914] nbd1: detected capacity change from 0 to 63 [ 91.774469][ T51] block nbd1: Receive control failed (result -32) [ 91.787581][ T5775] block nbd1: Receive control failed (result -32) [ 91.854916][ T5925] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 92.061635][ T96] block nbd1: Dead connection, failed to find a fallback [ 92.070434][ T96] block nbd1: shutting down sockets [ 92.077153][ T10] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 92.077413][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.086548][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 92.096084][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 92.105838][ T10] Buffer I/O error on dev nbd1, logical block 2, async page read [ 92.119606][ T10] Buffer I/O error on dev nbd1, logical block 3, async page read [ 92.128650][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.138103][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 92.146219][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 92.159733][ T10] Buffer I/O error on dev nbd1, logical block 2, async page read [ 92.167952][ T10] Buffer I/O error on dev nbd1, logical block 3, async page read [ 92.176414][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.185732][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 92.195395][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 92.207947][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.217603][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.231478][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.242570][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.253829][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.265118][ T5754] ldm_validate_partition_table(): Disk read failed. [ 92.303353][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 92.317583][ T5754] Dev nbd1: unable to read RDB block 0 [ 92.361410][ T5754] nbd1: unable to read partition table [ 92.467405][ T5754] ldm_validate_partition_table(): Disk read failed. [ 92.499342][ T5754] Dev nbd1: unable to read RDB block 0 [ 92.529563][ T5754] nbd1: unable to read partition table [ 93.160554][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.440239][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 93.450662][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 93.469200][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 93.469915][ T5933] loop1: detected capacity change from 0 to 32768 [ 93.482559][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 93.501893][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 93.515385][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 93.545986][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.688763][ T5933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.23 (5933) [ 93.720421][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.889575][ T9] usb 4-1: Product: syz [ 93.940525][ T9] usb 4-1: Manufacturer: syz [ 93.990622][ T9] usb 4-1: SerialNumber: syz [ 94.068876][ T9] usb 4-1: config 0 descriptor?? [ 94.083886][ T5933] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.103339][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 94.115855][ T5933] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 94.123931][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.135596][ T5924] loop0: detected capacity change from 0 to 32768 [ 94.148670][ T5933] BTRFS info (device loop1): using free space tree [ 94.172961][ T5924] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.186756][ T5924] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.290705][ T5924] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 94.347012][ T5753] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 94.356741][ T5753] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.412443][ T5830] usb 4-1: USB disconnect, device number 2 [ 94.428057][ T5830] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 94.435659][ T5933] BTRFS info (device loop1): enabling ssd optimizations [ 94.456992][ T5933] BTRFS info (device loop1): auto enabling async discard [ 94.543446][ T5753] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 186ms [ 94.578440][ T5753] gfs2: fsid=syz:syz.0: jid=0: Done [ 94.584484][ T5924] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.766510][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.287167][ T5973] loop2: detected capacity change from 0 to 512 [ 95.307202][ T5973] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.013015][ T5973] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 96.027109][ T5973] EXT4-fs (loop2): external journal has bad superblock [ 96.836785][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.853389][ T5971] loop3: detected capacity change from 0 to 32768 [ 96.944933][ T5971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (5971) [ 97.067329][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 97.080780][ T5979] nbd2: detected capacity change from 0 to 63 [ 97.125472][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.134242][ T5971] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.137202][ T51] block nbd2: Receive control failed (result -104) [ 97.146948][ T5775] block nbd2: Receive control failed (result -32) [ 97.156238][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.176772][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.194009][ T9] usb 3-1: Product: syz [ 97.200896][ T9] usb 3-1: Manufacturer: syz [ 97.201941][ T5971] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 97.205646][ T9] usb 3-1: SerialNumber: syz [ 97.247350][ T5971] BTRFS info (device loop3): using free space tree [ 97.411459][ T9] usb 3-1: config 0 descriptor?? [ 97.446180][ T5976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.494089][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 97.508465][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 97.606308][ T5971] BTRFS info (device loop3): enabling ssd optimizations [ 97.613966][ T5971] BTRFS info (device loop3): auto enabling async discard [ 97.816992][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.836030][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.870984][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.953210][ T5765] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.044478][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 98.063265][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.113277][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.138689][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.148915][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.157732][ T27] usb 1-1: Product: syz [ 98.161976][ T27] usb 1-1: Manufacturer: syz [ 98.168065][ T27] usb 1-1: SerialNumber: syz [ 98.409311][ T27] usb 1-1: 0:2 : does not exist [ 98.433765][ T27] usb 1-1: unit 12 not found! [ 98.609238][ T27] usb 1-1: USB disconnect, device number 5 [ 98.668911][ T6009] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 98.867761][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.997384][ T9] usb 3-1: USB disconnect, device number 2 [ 100.137802][ T6029] loop3: detected capacity change from 0 to 512 [ 100.150130][ T6029] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.211507][ T6029] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 100.222066][ T6029] EXT4-fs (loop3): external journal has bad superblock [ 100.999904][ T5858] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.326989][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 101.477900][ T5858] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 101.486109][ T5858] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 101.534794][ T5858] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 101.588296][ T5858] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 101.606061][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.618229][ T5858] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 101.627453][ T5858] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 101.635896][ T5858] usb 1-1: Product: syz [ 101.641426][ T5858] usb 1-1: Manufacturer: syz [ 101.646140][ T5858] usb 1-1: SerialNumber: syz [ 101.653909][ T5858] usb 1-1: config 0 descriptor?? [ 101.666335][ T5858] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 101.680995][ T5858] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 101.753616][ T6037] nbd3: detected capacity change from 0 to 63 [ 101.782908][ T5775] block nbd3: Receive control failed (result -104) [ 101.782908][ T51] block nbd3: Receive control failed (result -32) [ 101.810246][ T6027] loop2: detected capacity change from 0 to 32768 [ 101.818955][ T6027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.39 (6027) [ 101.838970][ T6027] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.849516][ T6027] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 101.858391][ T6027] BTRFS info (device loop2): using free space tree [ 101.884274][ T6027] BTRFS info (device loop2): enabling ssd optimizations [ 101.892104][ T6027] BTRFS info (device loop2): auto enabling async discard [ 101.965088][ T5858] usb 1-1: USB disconnect, device number 6 [ 101.989105][ T5858] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 102.052890][ T5763] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.781683][ T6070] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 103.803043][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.116699][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 104.126365][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.138815][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.156540][ T5830] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.168391][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.176865][ T5830] usb 2-1: Product: syz [ 104.181397][ T5830] usb 2-1: Manufacturer: syz [ 104.186250][ T5830] usb 2-1: SerialNumber: syz [ 104.312175][ T6055] loop0: detected capacity change from 0 to 32768 [ 104.333850][ T6055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.44 (6055) [ 104.359919][ T6055] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.372146][ T6055] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 104.382242][ T6055] BTRFS info (device loop0): using free space tree [ 104.431478][ T5830] usb 2-1: 0:2 : does not exist [ 104.436399][ T5830] usb 2-1: unit 12 not found! [ 104.559627][ T6055] BTRFS info (device loop0): enabling ssd optimizations [ 104.566810][ T6055] BTRFS info (device loop0): auto enabling async discard [ 104.594492][ T5830] usb 2-1: USB disconnect, device number 3 [ 104.714702][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.803144][ T6092] loop3: detected capacity change from 0 to 2048 [ 104.891293][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.983839][ T6092] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.022381][ T5766] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.174683][ T28] audit: type=1804 audit(1775586469.369:2): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.49" name="/newroot/16/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 105.236414][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.833732][ T6109] loop2: detected capacity change from 0 to 256 [ 105.937823][ T6111] loop0: detected capacity change from 0 to 512 [ 105.949303][ T6111] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.247570][ T6111] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 106.258575][ T6111] EXT4-fs (loop0): external journal has bad superblock [ 106.289518][ T6109] exfat: Deprecated parameter 'utf8' [ 106.296011][ T6109] exfat: Deprecated parameter 'utf8' [ 106.351509][ T6109] exfat: Deprecated parameter 'utf8' [ 106.781170][ T6109] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 106.786719][ T6107] nbd4: detected capacity change from 0 to 63 [ 106.795177][ T5775] block nbd4: Receive control failed (result -32) [ 106.803372][ T51] block nbd4: Receive control failed (result -32) [ 106.850701][ T5928] block nbd4: Dead connection, failed to find a fallback [ 106.857972][ T5928] block nbd4: shutting down sockets [ 106.863317][ T5928] blk_print_req_error: 73 callbacks suppressed [ 106.863330][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 106.879682][ T5928] buffer_io_error: 138 callbacks suppressed [ 106.879695][ T5928] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.893704][ T5928] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.902772][ T5928] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.911550][ T5928] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.921914][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 106.931498][ T5928] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.952288][ T5928] Buffer I/O error on dev nbd4, logical block 1, async page read [ 106.960343][ T5928] Buffer I/O error on dev nbd4, logical block 2, async page read [ 106.968203][ T5928] Buffer I/O error on dev nbd4, logical block 3, async page read [ 106.976135][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 106.985268][ T5928] Buffer I/O error on dev nbd4, logical block 0, async page read [ 106.993157][ T5928] Buffer I/O error on dev nbd4, logical block 1, async page read [ 107.001699][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 107.010983][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 107.020225][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 107.029552][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 107.038835][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 107.048068][ T5757] ldm_validate_partition_table(): Disk read failed. [ 107.056872][ T5928] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.066165][ T5928] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.077408][ T5757] Dev nbd4: unable to read RDB block 0 [ 107.085467][ T5757] nbd4: unable to read partition table [ 107.097134][ T5830] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.097499][ T5757] ldm_validate_partition_table(): Disk read failed. [ 107.114194][ T5757] Dev nbd4: unable to read RDB block 0 [ 107.121681][ T5757] nbd4: unable to read partition table [ 107.336918][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 107.355471][ T5830] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 107.370700][ T5830] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 107.387133][ T5830] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 107.398424][ T5830] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 107.416848][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.438045][ T5830] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 107.453560][ T5830] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 107.462236][ T5830] usb 1-1: Product: syz [ 107.466528][ T5830] usb 1-1: Manufacturer: syz [ 107.471287][ T5830] usb 1-1: SerialNumber: syz [ 107.527640][ T5830] usb 1-1: config 0 descriptor?? [ 107.550124][ T5830] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.576491][ T5830] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 108.027665][ T6124] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 108.126902][ T5830] usb 1-1: USB disconnect, device number 7 [ 108.157432][ T5830] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 109.274850][ T6130] loop3: detected capacity change from 0 to 32768 [ 109.348875][ T6130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.60 (6130) [ 109.393576][ T6130] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.404956][ T6130] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 109.430592][ T6130] BTRFS info (device loop3): using free space tree [ 110.086772][ T6130] BTRFS info (device loop3): enabling ssd optimizations [ 110.093815][ T6130] BTRFS info (device loop3): auto enabling async discard [ 110.359962][ T6170] loop2: detected capacity change from 0 to 512 [ 110.367294][ T6170] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.015894][ T6170] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 111.027369][ T6170] EXT4-fs (loop2): external journal has bad superblock [ 111.129172][ T5765] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.130912][ T51] block nbd5: Receive control failed (result -32) [ 111.157736][ T51] block nbd5: Receive control failed (result -32) [ 111.164305][ T6166] nbd5: detected capacity change from 0 to 63 [ 111.218219][ T5928] block nbd5: Dead connection, failed to find a fallback [ 111.225305][ T5928] block nbd5: shutting down sockets [ 111.290631][ T5779] ldm_validate_partition_table(): Disk read failed. [ 111.451932][ T5779] Dev nbd5: unable to read RDB block 0 [ 111.732669][ T5779] nbd5: unable to read partition table [ 111.805806][ T5779] ldm_validate_partition_table(): Disk read failed. [ 111.815714][ T6174] loop2: detected capacity change from 0 to 4096 [ 111.821575][ T5779] Dev nbd5: unable to read RDB block 0 [ 111.830168][ T5779] nbd5: unable to read partition table [ 111.964216][ T6183] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 112.226292][ T6189] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.391053][ T28] audit: type=1800 audit(1775586476.589:3): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.68" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 112.667935][ T28] audit: type=1800 audit(1775586476.869:4): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.68" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 112.833317][ T1198] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.179829][ T1198] usb 2-1: Using ep0 maxpacket: 32 [ 113.204272][ T1198] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 113.218773][ T1198] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 113.230286][ T1198] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 113.242396][ T1198] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 113.259585][ T1198] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.305898][ T1198] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.320321][ T1198] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 113.340451][ T1198] usb 2-1: Product: syz [ 113.344806][ T1198] usb 2-1: Manufacturer: syz [ 113.351570][ T1198] usb 2-1: SerialNumber: syz [ 113.362081][ T1198] usb 2-1: config 0 descriptor?? [ 113.390883][ T1198] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.411613][ T1198] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 113.566686][ T5830] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.680316][ T1198] usb 2-1: USB disconnect, device number 4 [ 113.690973][ T1198] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 113.756697][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 113.767446][ T5830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.777909][ T5830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.794711][ T5830] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.804624][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.814581][ T5830] usb 4-1: Product: syz [ 113.819858][ T5830] usb 4-1: Manufacturer: syz [ 113.825640][ T5830] usb 4-1: SerialNumber: syz [ 114.456145][ T6209] loop2: detected capacity change from 0 to 512 [ 114.463765][ T6209] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.627937][ T5928] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.636310][ T5928] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.644566][ T10] block nbd0: Dead connection, failed to find a fallback [ 115.652550][ T10] block nbd0: shutting down sockets [ 115.658746][ T10] blk_print_req_error: 214 callbacks suppressed [ 115.658755][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.675980][ T5928] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.683512][ T5928] block nbd0: Connection timed out, retrying (0/2 alive) [ 115.690766][ T10] buffer_io_error: 286 callbacks suppressed [ 115.690777][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.705745][ T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.715494][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.723353][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.732665][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.740576][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.750239][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.759320][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 115.768506][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.776300][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.826851][ T96] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.835035][ T96] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.844430][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 115.853811][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.862474][ T96] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.871774][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 115.881071][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 115.890332][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 115.899638][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 115.909162][ T5756] ldm_validate_partition_table(): Disk read failed. [ 115.917622][ T5756] Dev nbd0: unable to read RDB block 0 [ 115.925669][ T5756] nbd0: unable to read partition table [ 115.940409][ T5756] ldm_validate_partition_table(): Disk read failed. [ 115.953022][ T5756] Dev nbd0: unable to read RDB block 0 [ 115.954635][ T6209] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 115.961282][ T5756] nbd0: unable to read partition table [ 115.967679][ T6209] EXT4-fs (loop2): external journal has bad superblock [ 116.068855][ T5830] usb 4-1: 0:2 : does not exist [ 116.073759][ T5830] usb 4-1: unit 12 not found! [ 116.106898][ T5830] usb 4-1: USB disconnect, device number 3 [ 116.216009][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.606912][ T5830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.740946][ T6211] loop1: detected capacity change from 0 to 32768 [ 116.754476][ T6211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.77 (6211) [ 116.797255][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 116.813211][ T6211] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.814348][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 116.833751][ T6211] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 116.858629][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58409, setting to 1024 [ 116.877057][ T6211] BTRFS info (device loop1): using free space tree [ 116.887173][ T5830] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.905877][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.926201][ T5830] usb 4-1: config 0 descriptor?? [ 116.937835][ T6217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.017936][ T5830] hub 4-1:0.0: USB hub found [ 117.180092][ T6211] BTRFS info (device loop1): enabling ssd optimizations [ 117.210042][ T6211] BTRFS info (device loop1): auto enabling async discard [ 117.403440][ T5830] hub 4-1:0.0: 1 port detected [ 117.588234][ T5764] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.938852][ T6241] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 118.302285][ T5771] usb 4-1: USB disconnect, device number 4 [ 118.309971][ T5830] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 118.878012][ T5771] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.076980][ T5771] usb 2-1: Using ep0 maxpacket: 32 [ 119.096865][ T5771] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 119.105258][ T5771] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 119.127935][ T6259] loop3: detected capacity change from 0 to 512 [ 119.135204][ T6259] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.147245][ T6259] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 119.156195][ T6259] EXT4-fs (loop3): external journal has bad superblock [ 119.179390][ T5771] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 119.226376][ T5771] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 119.260106][ T5771] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.282634][ T5771] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.310378][ T5771] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.327974][ T5771] usb 2-1: Product: syz [ 119.332351][ T5771] usb 2-1: Manufacturer: syz [ 119.341870][ T5771] usb 2-1: SerialNumber: syz [ 119.358546][ T5771] usb 2-1: config 0 descriptor?? [ 119.376326][ T5771] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.389252][ T5771] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.604894][ T5771] usb 2-1: USB disconnect, device number 5 [ 119.624971][ T5771] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 120.984722][ T6267] Bluetooth: MGMT ver 1.22 [ 121.076323][ T6270] loop2: detected capacity change from 0 to 1024 [ 121.164946][ T6270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.273450][ T6274] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 121.856252][ T6294] loop3: detected capacity change from 0 to 512 [ 121.867543][ T6294] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.527144][ T6294] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 122.536139][ T6294] EXT4-fs (loop3): external journal has bad superblock [ 122.595347][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.846885][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 123.147067][ T5811] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 123.155404][ T5811] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 123.175289][ T5811] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 123.199384][ T5811] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 123.219588][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.252787][ T5811] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 123.264538][ T5811] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 123.273693][ T5811] usb 2-1: Product: syz [ 123.278466][ T5811] usb 2-1: Manufacturer: syz [ 123.283595][ T5811] usb 2-1: SerialNumber: syz [ 123.324135][ T5811] usb 2-1: config 0 descriptor?? [ 123.333576][ T5811] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 123.360993][ T5811] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 124.018396][ T5830] usb 2-1: USB disconnect, device number 6 [ 124.040631][ T5830] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 124.155755][ T6306] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 124.342351][ T5771] IPVS: starting estimator thread 0... [ 124.439949][ T6312] IPVS: using max 27 ests per chain, 64800 per kthread [ 124.615194][ T6321] loop3: detected capacity change from 0 to 512 [ 124.625942][ T6321] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.739682][ T6321] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 124.749312][ T6321] EXT4-fs (loop3): external journal has bad superblock [ 126.072467][ T6335] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 126.740429][ T6346] loop1: detected capacity change from 0 to 2048 [ 126.766039][ T6346] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.784609][ T6346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.881031][ T28] audit: type=1800 audit(1775586491.089:5): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.117" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 127.265902][ T6354] loop1: detected capacity change from 0 to 512 [ 127.274797][ T6354] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.964470][ T6354] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 127.973687][ T6354] EXT4-fs (loop1): external journal has bad superblock [ 128.065004][ T24] block nbd2: Connection timed out, retrying (0/2 alive) [ 128.072521][ T24] block nbd2: Connection timed out, retrying (0/2 alive) [ 128.080426][ T24] block nbd2: Connection timed out, retrying (0/2 alive) [ 128.087943][ T6213] block nbd2: Dead connection, failed to find a fallback [ 128.095392][ T6213] block nbd2: shutting down sockets [ 128.100772][ T24] block nbd2: Connection timed out, retrying (0/2 alive) [ 128.108179][ T6213] blk_print_req_error: 111 callbacks suppressed [ 128.108192][ T6213] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.126241][ T6213] buffer_io_error: 138 callbacks suppressed [ 128.126254][ T6213] Buffer I/O error on dev nbd2, logical block 1, async page read [ 128.141729][ T6213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.150986][ T6213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.158926][ T6213] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.168067][ T6213] Buffer I/O error on dev nbd2, logical block 3, async page read [ 128.175842][ T6213] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.185150][ T6213] Buffer I/O error on dev nbd2, logical block 2, async page read [ 128.194143][ T6213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 128.203722][ T6213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.211566][ T6213] Buffer I/O error on dev nbd2, logical block 1, async page read [ 128.219360][ T6213] Buffer I/O error on dev nbd2, logical block 2, async page read [ 128.227214][ T6213] Buffer I/O error on dev nbd2, logical block 3, async page read [ 128.235216][ T6213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 128.244331][ T6213] Buffer I/O error on dev nbd2, logical block 0, async page read [ 128.252148][ T6213] Buffer I/O error on dev nbd2, logical block 1, async page read [ 128.260209][ T6213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 128.269751][ T6213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 128.280808][ T6213] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.290874][ T6213] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.301423][ T5754] ldm_validate_partition_table(): Disk read failed. [ 128.418006][ T5754] Dev nbd2: unable to read RDB block 0 [ 128.468479][ T5754] nbd2: unable to read partition table [ 128.489122][ T5754] ldm_validate_partition_table(): Disk read failed. [ 128.505851][ T5754] Dev nbd2: unable to read RDB block 0 [ 128.520827][ T5754] nbd2: unable to read partition table [ 128.551775][ T6360] loop1: detected capacity change from 0 to 2048 [ 128.646416][ T6360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.750351][ T6360] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.781800][ T5766] syz-executor (5766) used greatest stack depth: 20648 bytes left [ 128.811648][ T6360] fs-verity: sha512 using implementation "sha512-avx2" [ 129.056209][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.646906][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.655564][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.684880][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.763066][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.772275][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.802395][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.047177][ T6381] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 130.597031][ T6388] loop3: detected capacity change from 0 to 8 [ 130.794193][ T6391] loop1: detected capacity change from 0 to 512 [ 130.804823][ T6391] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.876010][ T6391] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 130.885807][ T6391] EXT4-fs (loop1): external journal has bad superblock [ 131.622588][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 131.668344][ T6398] loop3: detected capacity change from 0 to 512 [ 131.725023][ T6398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.779893][ T28] audit: type=1804 audit(1775586495.969:6): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.131" name="/newroot/46/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 131.834464][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.847261][ T10] block nbd3: Connection timed out, retrying (0/2 alive) [ 131.854426][ T10] block nbd3: Connection timed out, retrying (0/2 alive) [ 131.861920][ T6212] block nbd3: Dead connection, failed to find a fallback [ 131.869090][ T6212] block nbd3: shutting down sockets [ 131.874790][ T10] block nbd3: Connection timed out, retrying (0/2 alive) [ 131.893446][ T5758] ldm_validate_partition_table(): Disk read failed. [ 131.901883][ T5758] Dev nbd3: unable to read RDB block 0 [ 131.909816][ T5758] nbd3: unable to read partition table [ 131.922967][ T5758] ldm_validate_partition_table(): Disk read failed. [ 131.923594][ T51] Bluetooth: hci1: command tx timeout [ 131.931197][ T5758] Dev nbd3: unable to read RDB block 0 [ 131.996819][ T5758] nbd3: unable to read partition table [ 132.099880][ T6410] loop1: detected capacity change from 0 to 4096 [ 132.112917][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.137415][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.161521][ T6369] bridge_slave_0: entered allmulticast mode [ 132.179697][ T6411] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.188381][ T6369] bridge_slave_0: entered promiscuous mode [ 132.241163][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.264465][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.288786][ T6369] bridge_slave_1: entered allmulticast mode [ 132.309686][ T6410] syz.1.134 (6410) used greatest stack depth: 19824 bytes left [ 132.327931][ T6369] bridge_slave_1: entered promiscuous mode [ 132.481926][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.564123][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.715065][ T6369] team0: Port device team_slave_0 added [ 132.724886][ T6369] team0: Port device team_slave_1 added [ 132.753531][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.760690][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.794165][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.415120][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.424574][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.740557][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.750230][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.866744][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.996688][ T51] Bluetooth: hci1: command tx timeout [ 134.006443][ T6369] hsr_slave_0: entered promiscuous mode [ 134.024452][ T6369] hsr_slave_1: entered promiscuous mode [ 134.033494][ T6369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.043621][ T6369] Cannot create hsr debugfs directory [ 134.134067][ T6427] loop2: detected capacity change from 0 to 512 [ 134.144712][ T6427] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.420183][ T6427] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 134.430051][ T6427] EXT4-fs (loop2): external journal has bad superblock [ 135.134508][ T6429] loop2: detected capacity change from 0 to 2048 [ 135.170272][ T6429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.241883][ T28] audit: type=1800 audit(1775586499.449:7): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.139" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 135.464469][ T6369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.514055][ T6369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.597939][ T6369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.623756][ T6369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.730553][ T6443] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 135.882497][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.930803][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.049042][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.056183][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.080625][ T51] Bluetooth: hci1: command tx timeout [ 136.147089][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.154334][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.710000][ T6437] loop1: detected capacity change from 0 to 32768 [ 136.808610][ T6437] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.106303][ T6437] XFS (loop1): Ending clean mount [ 137.231282][ T6437] XFS (loop1): Quotacheck needed: Please wait. [ 137.459958][ T6437] XFS (loop1): Quotacheck: Done. [ 137.518924][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.803028][ T6472] loop3: detected capacity change from 0 to 512 [ 137.813697][ T6472] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.855719][ T6472] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 137.865942][ T6472] EXT4-fs (loop3): external journal has bad superblock [ 138.167138][ T51] Bluetooth: hci1: command tx timeout [ 138.692167][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.935138][ T6369] veth0_vlan: entered promiscuous mode [ 138.976521][ T6369] veth1_vlan: entered promiscuous mode [ 139.080548][ T6369] veth0_macvtap: entered promiscuous mode [ 139.101806][ T6369] veth1_macvtap: entered promiscuous mode [ 139.175644][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.195816][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.213477][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.225286][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.240142][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.251409][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.278494][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.295775][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.344438][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.423685][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.447047][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.471901][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.485502][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.496223][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.507282][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.521036][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.546749][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.623137][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.669619][ T6369] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.693801][ T6369] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.704281][ T6369] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.713336][ T6369] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.878555][ T6489] loop1: detected capacity change from 0 to 128 [ 139.891634][ T6480] loop2: detected capacity change from 0 to 40427 [ 139.934719][ T6480] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 139.945827][ T6489] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 139.964681][ T6480] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 139.974609][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.994702][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.051110][ T6480] F2FS-fs (loop2): invalid crc value [ 140.092695][ T6489] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 140.114076][ T6489] FAT-fs (loop1): Filesystem has been set read-only [ 140.128453][ T6489] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 140.190311][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.208537][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.496033][ T6480] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 140.505696][ T6480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.600243][ T6480] syz.2.150: attempt to access beyond end of device [ 140.600243][ T6480] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 140.743789][ T5763] syz-executor: attempt to access beyond end of device [ 140.743789][ T5763] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 140.772933][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.803176][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.077313][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 141.125988][ T5858] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 141.138675][ T5858] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 141.370213][ T5858] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 141.425326][ T5858] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 141.517957][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 141.542853][ T5858] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.555790][ T5858] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.564764][ T5858] usb 5-1: Product: syz [ 141.570301][ T5858] usb 5-1: Manufacturer: syz [ 141.575042][ T5858] usb 5-1: SerialNumber: syz [ 141.588527][ T5858] usb 5-1: config 0 descriptor?? [ 141.600415][ T5858] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.617222][ T6494] loop1: detected capacity change from 0 to 40427 [ 141.634632][ T5858] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.645322][ T6494] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 141.660029][ T6494] F2FS-fs (loop1): heap/no_heap options were deprecated [ 141.789845][ T6505] loop3: detected capacity change from 0 to 512 [ 141.801010][ T6505] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.832244][ T6505] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 141.843009][ T6505] EXT4-fs (loop3): external journal has bad superblock [ 141.856512][ T6494] F2FS-fs (loop1): Image doesn't support compression [ 141.984173][ T6494] F2FS-fs (loop1): invalid crc value [ 142.208957][ T6494] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.548157][ T5810] usb 5-1: USB disconnect, device number 2 [ 142.587318][ T5810] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 143.021421][ T6494] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.208039][ T6494] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 143.329808][ T5764] syz-executor: attempt to access beyond end of device [ 143.329808][ T5764] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 143.348821][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 143.521948][ T5764] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 143.738417][ T6528] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 143.791549][ T6530] loop4: detected capacity change from 0 to 2048 [ 143.853901][ T6530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.199217][ T6538] loop1: detected capacity change from 0 to 512 [ 145.237547][ T6538] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 145.292279][ T6538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.416482][ T6542] loop4: detected capacity change from 0 to 512 [ 145.427199][ T6542] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.136296][ T6542] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 146.146295][ T6542] EXT4-fs (loop4): external journal has bad superblock [ 146.154217][ T6538] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.161: invalid indirect mapped block 9 (level 0) [ 146.252366][ T6538] EXT4-fs (loop1): 1 truncate cleaned up [ 146.274059][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.470064][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.606803][ T5811] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.797061][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 146.821827][ T5811] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.843845][ T5811] usb 5-1: config 0 has no interface number 0 [ 146.853792][ T5811] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.867729][ T5811] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.883197][ T5811] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 146.917668][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.917743][ T5753] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.951796][ T5811] usb 5-1: config 0 descriptor?? [ 147.281618][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 147.308164][ T5753] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 147.316402][ T5753] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 147.319166][ T6556] loop1: detected capacity change from 0 to 8 [ 147.328921][ T5753] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 147.388548][ T5753] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 147.435182][ T5753] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.449053][ T5753] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 147.458421][ T5753] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 147.467532][ T5753] usb 4-1: Product: syz [ 147.472012][ T5753] usb 4-1: Manufacturer: syz [ 147.479613][ T5753] usb 4-1: SerialNumber: syz [ 147.495237][ T5753] usb 4-1: config 0 descriptor?? [ 147.519919][ T5753] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 147.553836][ T5753] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 147.618508][ T5811] uclogic 0003:28BD:0071.0001: pen parameters not found [ 147.637884][ T5811] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 147.660985][ T5811] usb 5-1: USB disconnect, device number 3 [ 147.829363][ T5830] usb 4-1: USB disconnect, device number 5 [ 147.851287][ T5830] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 147.955506][ T6554] loop2: detected capacity change from 0 to 40427 [ 147.976570][ T6554] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 147.990692][ T6554] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 148.001034][ T6554] F2FS-fs (loop2): invalid crc value [ 148.006871][ T6554] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 148.027752][ T6554] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.087332][ T6554] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 148.094417][ T6554] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.149014][ T5763] syz-executor: attempt to access beyond end of device [ 148.149014][ T5763] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 148.164988][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 148.182162][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 148.189403][ T5763] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 148.276770][ T5753] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 148.420621][ T6571] loop4: detected capacity change from 0 to 512 [ 148.431204][ T6571] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.520332][ T6571] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 148.530290][ T6571] EXT4-fs (loop4): external journal has bad superblock [ 149.191133][ T5753] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 149.200627][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.208749][ T5753] usb 2-1: Product: syz [ 149.212931][ T5753] usb 2-1: Manufacturer: syz [ 149.233172][ T5753] usb 2-1: SerialNumber: syz [ 149.259471][ T5753] usb 2-1: config 0 descriptor?? [ 149.429981][ T5753] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 149.996034][ T6581] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 150.508644][ T5753] gspca_stk1135: reg_w 0x7 err -71 [ 150.576052][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 150.688958][ T5753] gspca_stk1135: Sensor write failed [ 150.736021][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 150.857195][ T5753] gspca_stk1135: Sensor write failed [ 150.862644][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 150.875470][ T5753] gspca_stk1135: Sensor read failed [ 150.881779][ T6591] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 150.895673][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 150.904460][ T5753] gspca_stk1135: Sensor read failed [ 150.921240][ T5753] gspca_stk1135: Detected sensor type unknown (0x0) [ 150.937287][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 150.943668][ T5753] gspca_stk1135: Sensor read failed [ 150.959216][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 150.965686][ T5753] gspca_stk1135: Sensor read failed [ 150.975400][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 150.999145][ T5753] gspca_stk1135: Sensor write failed [ 151.004577][ T5753] gspca_stk1135: serial bus timeout: status=0x00 [ 151.013543][ T5753] gspca_stk1135: Sensor write failed [ 151.028885][ T5753] stk1135: probe of 2-1:0.0 failed with error -71 [ 151.042085][ T5753] usb 2-1: USB disconnect, device number 7 [ 151.227320][ T6599] loop1: detected capacity change from 0 to 512 [ 151.412768][ T6606] loop2: detected capacity change from 0 to 512 [ 151.423496][ T6606] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.478908][ T6606] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 151.488712][ T6606] EXT4-fs (loop2): external journal has bad superblock [ 152.238635][ T6608] loop2: detected capacity change from 0 to 256 [ 153.661771][ T6616] loop1: detected capacity change from 0 to 8192 [ 153.731990][ T6616] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.746423][ T6616] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 153.758306][ T6616] REISERFS (device loop1): using ordered data mode [ 153.764975][ T6616] reiserfs: using flush barriers [ 153.802012][ T6616] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.898857][ T6616] REISERFS (device loop1): checking transaction log (loop1) [ 153.919711][ T6627] input: syz1 as /devices/virtual/input/input5 [ 153.926417][ T6627] input: failed to attach handler leds to device input5, error: -6 [ 153.961014][ T6616] REISERFS (device loop1): Using rupasov hash to sort names [ 154.001266][ T6616] REISERFS (device loop1): using 3.5.x disk format [ 154.042095][ T6616] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.093106][ T6616] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.130675][ T6616] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.150661][ T6616] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 154.167816][ T6616] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 154.309323][ T6616] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.358493][ T6616] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.401656][ T6616] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.428975][ T6634] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.443651][ T6634] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.472242][ T6634] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 154.643297][ T6640] loop2: detected capacity change from 0 to 512 [ 154.651504][ T6640] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.673402][ T6640] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 155.682315][ T6640] EXT4-fs (loop2): external journal has bad superblock [ 155.688006][ T6634] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 155.783236][ T6636] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 155.815721][ T6636] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 155.855893][ T6636] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 155.869375][ T6636] ================================================================== [ 155.877468][ T6636] BUG: KASAN: use-after-free in reiserfs_release_objectid+0x572/0x810 [ 155.885682][ T6636] Read of size 8188 at addr ffff888059506050 by task syz.1.190/6636 [ 155.893764][ T6636] [ 155.896116][ T6636] CPU: 0 PID: 6636 Comm: syz.1.190 Not tainted syzkaller #0 [ 155.902274][ T6645] loop3: detected capacity change from 0 to 2048 [ 155.903395][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.919835][ T6636] Call Trace: [ 155.923142][ T6636] [ 155.926088][ T6636] dump_stack_lvl+0x18c/0x250 [ 155.930797][ T6636] ? read_lock_is_recursive+0x20/0x20 [ 155.936191][ T6636] ? show_regs_print_info+0x20/0x20 [ 155.941404][ T6636] ? load_image+0x420/0x420 [ 155.945916][ T6636] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 155.951472][ T6636] ? __virt_addr_valid+0x18c/0x540 [ 155.956600][ T6636] ? __virt_addr_valid+0x469/0x540 [ 155.961724][ T6636] print_report+0xa8/0x210 [ 155.966161][ T6636] ? reiserfs_release_objectid+0x572/0x810 [ 155.971962][ T6636] kasan_report+0x117/0x150 [ 155.976460][ T6636] ? reiserfs_release_objectid+0x572/0x810 [ 155.982266][ T6636] kasan_check_range+0x241/0x290 [ 155.987197][ T6636] ? reiserfs_release_objectid+0x572/0x810 [ 155.993007][ T6636] __asan_memmove+0x29/0x70 [ 155.997551][ T6636] reiserfs_release_objectid+0x572/0x810 [ 156.003271][ T6636] remove_save_link+0x2b3/0x3e0 [ 156.008181][ T6636] ? reiserfs_write_lock_nested+0x60/0xd0 [ 156.013989][ T6636] ? dquot_free_inode+0x871/0xa00 [ 156.019016][ T6636] ? add_save_link+0x600/0x600 [ 156.023775][ T6636] ? __rwlock_init+0x150/0x150 [ 156.028970][ T6636] ? journal_end+0x1ff/0x2b0 [ 156.033648][ T6636] reiserfs_evict_inode+0x3b2/0x4c0 [ 156.038867][ T6636] ? entry_points_to_object+0x260/0x260 [ 156.044416][ T6636] ? do_raw_spin_lock+0x11f/0x2c0 [ 156.049532][ T6636] ? do_raw_spin_unlock+0x121/0x230 [ 156.054728][ T6636] ? entry_points_to_object+0x260/0x260 [ 156.060279][ T6636] evict+0x4ca/0x8d0 [ 156.064175][ T6636] ? proc_nr_inodes+0x230/0x230 [ 156.069019][ T6636] ? do_raw_spin_unlock+0x121/0x230 [ 156.074212][ T6636] ? _raw_spin_unlock+0x28/0x40 [ 156.079058][ T6636] ? iput+0x706/0x920 [ 156.083048][ T6636] __dentry_kill+0x431/0x650 [ 156.087646][ T6636] dentry_kill+0xb8/0x290 [ 156.091970][ T6636] ? dput+0x3b/0x1e0 [ 156.095860][ T6636] dput+0xfe/0x1e0 [ 156.099580][ T6636] do_renameat2+0x8f9/0xce0 [ 156.104075][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 156.109097][ T6636] ? fsnotify_move+0x4e0/0x4e0 [ 156.113854][ T6636] ? __check_object_size+0x506/0xa20 [ 156.119137][ T6636] ? getname_flags+0x20a/0x500 [ 156.123900][ T6636] __x64_sys_renameat2+0xd2/0xe0 [ 156.128831][ T6636] do_syscall_64+0x55/0xa0 [ 156.133353][ T6636] ? clear_bhb_loop+0x40/0x90 [ 156.138045][ T6636] ? clear_bhb_loop+0x40/0x90 [ 156.142933][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.148935][ T6636] RIP: 0033:0x7f329cf9c819 [ 156.153368][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.172975][ T6636] RSP: 002b:00007f329dee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 156.181395][ T6636] RAX: ffffffffffffffda RBX: 00007f329d216180 RCX: 00007f329cf9c819 [ 156.189365][ T6636] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 156.197329][ T6636] RBP: 00007f329d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 156.205290][ T6636] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 156.213257][ T6636] R13: 00007f329d216218 R14: 00007f329d216180 R15: 00007fff141144b8 [ 156.221228][ T6636] [ 156.224238][ T6636] [ 156.226549][ T6636] The buggy address belongs to the physical page: [ 156.232987][ T6636] page:ffffea0001654180 refcount:2 mapcount:0 mapping:ffff888148cfd8f8 index:0x10 pfn:0x59506 [ 156.243306][ T6636] memcg:ffff88807d8d6000 [ 156.247540][ T6636] aops:def_blk_aops ino:700001 [ 156.252317][ T6636] flags: 0xfff5800002822c(referenced|uptodate|lru|workingset|private|mappedtodisk|node=0|zone=1|lastcpupid=0x7ff) [ 156.264481][ T6636] page_type: 0xffffffff() [ 156.268820][ T6636] raw: 00fff5800002822c ffffea000162fc08 ffffea00016f5ac8 ffff888148cfd8f8 [ 156.277403][ T6636] raw: 0000000000000010 ffff888076f421d0 00000002ffffffff ffff88807d8d6000 [ 156.285985][ T6636] page dumped because: kasan: bad access detected [ 156.292390][ T6636] page_owner tracks the page as allocated [ 156.298093][ T6636] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 6616, tgid 6615 (syz.1.190), ts 153717609036, free_ts 153646480267 [ 156.318440][ T6636] post_alloc_hook+0x1c1/0x200 [ 156.323218][ T6636] get_page_from_freelist+0x1951/0x19e0 [ 156.328755][ T6636] __alloc_pages+0x1f0/0x460 [ 156.333435][ T6636] folio_alloc+0x1e/0x30 [ 156.337700][ T6636] filemap_alloc_folio+0xdf/0x490 [ 156.342807][ T6636] __filemap_get_folio+0x3ea/0xbb0 [ 156.347928][ T6636] __getblk_gfp+0x223/0x660 [ 156.352436][ T6636] __bread_gfp+0x2a/0x330 [ 156.356769][ T6636] read_super_block+0x91/0x7c0 [ 156.361978][ T6636] reiserfs_fill_super+0x7ad/0x23b0 [ 156.367169][ T6636] mount_bdev+0x221/0x2d0 [ 156.371514][ T6636] legacy_get_tree+0xea/0x180 [ 156.376443][ T6636] vfs_get_tree+0x8c/0x280 [ 156.380868][ T6636] do_new_mount+0x24b/0xa40 [ 156.385372][ T6636] __se_sys_mount+0x2e7/0x3d0 [ 156.390040][ T6636] do_syscall_64+0x55/0xa0 [ 156.394455][ T6636] page last free stack trace: [ 156.399116][ T6636] free_unref_page_prepare+0x7b2/0x8c0 [ 156.404639][ T6636] free_unref_page_list+0xbe/0x860 [ 156.409749][ T6636] release_pages+0x1f7a/0x2200 [ 156.414524][ T6636] tlb_flush_mmu+0x379/0x510 [ 156.419107][ T6636] tlb_finish_mmu+0xf9/0x220 [ 156.423690][ T6636] unmap_region+0x312/0x370 [ 156.428204][ T6636] do_vmi_align_munmap+0x10dc/0x16d0 [ 156.433507][ T6636] do_vmi_munmap+0x252/0x2d0 [ 156.438114][ T6636] __vm_munmap+0x1a2/0x3c0 [ 156.442530][ T6636] __x64_sys_munmap+0x60/0x70 [ 156.447205][ T6636] do_syscall_64+0x55/0xa0 [ 156.451618][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.457521][ T6636] [ 156.459835][ T6636] Memory state around the buggy address: [ 156.465467][ T6636] ffff888059506f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 156.473532][ T6636] ffff888059506f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 156.481593][ T6636] >ffff888059507000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.489640][ T6636] ^ [ 156.493695][ T6636] ffff888059507080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.501747][ T6636] ffff888059507100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.509798][ T6636] ================================================================== [ 156.551189][ T6636] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.558437][ T6636] CPU: 1 PID: 6636 Comm: syz.1.190 Not tainted syzkaller #0 [ 156.565748][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.575826][ T6636] Call Trace: [ 156.579094][ T6636] [ 156.582026][ T6636] dump_stack_lvl+0x18c/0x250 [ 156.586730][ T6636] ? show_regs_print_info+0x20/0x20 [ 156.591915][ T6636] ? load_image+0x420/0x420 [ 156.596399][ T6636] panic+0x2dc/0x730 [ 156.600277][ T6636] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.606413][ T6636] ? bpf_jit_dump+0xd0/0xd0 [ 156.610903][ T6636] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 156.616880][ T6636] ? _raw_spin_unlock+0x40/0x40 [ 156.621741][ T6636] ? reiserfs_release_objectid+0x572/0x810 [ 156.627554][ T6636] check_panic_on_warn+0x84/0xa0 [ 156.632490][ T6636] ? reiserfs_release_objectid+0x572/0x810 [ 156.638281][ T6636] end_report+0x6f/0x130 [ 156.642595][ T6636] kasan_report+0x128/0x150 [ 156.647080][ T6636] ? reiserfs_release_objectid+0x572/0x810 [ 156.652883][ T6636] kasan_check_range+0x241/0x290 [ 156.657890][ T6636] ? reiserfs_release_objectid+0x572/0x810 [ 156.663693][ T6636] __asan_memmove+0x29/0x70 [ 156.668195][ T6636] reiserfs_release_objectid+0x572/0x810 [ 156.673843][ T6636] remove_save_link+0x2b3/0x3e0 [ 156.678683][ T6636] ? reiserfs_write_lock_nested+0x60/0xd0 [ 156.684475][ T6636] ? dquot_free_inode+0x871/0xa00 [ 156.689488][ T6636] ? add_save_link+0x600/0x600 [ 156.694235][ T6636] ? __rwlock_init+0x150/0x150 [ 156.698983][ T6636] ? journal_end+0x1ff/0x2b0 [ 156.703553][ T6636] reiserfs_evict_inode+0x3b2/0x4c0 [ 156.708751][ T6636] ? entry_points_to_object+0x260/0x260 [ 156.714290][ T6636] ? do_raw_spin_lock+0x11f/0x2c0 [ 156.719314][ T6636] ? do_raw_spin_unlock+0x121/0x230 [ 156.724546][ T6636] ? entry_points_to_object+0x260/0x260 [ 156.730115][ T6636] evict+0x4ca/0x8d0 [ 156.734002][ T6636] ? proc_nr_inodes+0x230/0x230 [ 156.738839][ T6636] ? do_raw_spin_unlock+0x121/0x230 [ 156.744023][ T6636] ? _raw_spin_unlock+0x28/0x40 [ 156.748861][ T6636] ? iput+0x706/0x920 [ 156.752831][ T6636] __dentry_kill+0x431/0x650 [ 156.757468][ T6636] dentry_kill+0xb8/0x290 [ 156.761799][ T6636] ? dput+0x3b/0x1e0 [ 156.765683][ T6636] dput+0xfe/0x1e0 [ 156.769409][ T6636] do_renameat2+0x8f9/0xce0 [ 156.773933][ T6636] ? __lock_acquire+0x7d40/0x7d40 [ 156.778972][ T6636] ? fsnotify_move+0x4e0/0x4e0 [ 156.783749][ T6636] ? __check_object_size+0x506/0xa20 [ 156.789125][ T6636] ? getname_flags+0x20a/0x500 [ 156.793874][ T6636] __x64_sys_renameat2+0xd2/0xe0 [ 156.798808][ T6636] do_syscall_64+0x55/0xa0 [ 156.803223][ T6636] ? clear_bhb_loop+0x40/0x90 [ 156.807885][ T6636] ? clear_bhb_loop+0x40/0x90 [ 156.812548][ T6636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.818441][ T6636] RIP: 0033:0x7f329cf9c819 [ 156.822849][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.842564][ T6636] RSP: 002b:00007f329dee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 156.850964][ T6636] RAX: ffffffffffffffda RBX: 00007f329d216180 RCX: 00007f329cf9c819 [ 156.858931][ T6636] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 156.866893][ T6636] RBP: 00007f329d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 156.874873][ T6636] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 156.882826][ T6636] R13: 00007f329d216218 R14: 00007f329d216180 R15: 00007fff141144b8 [ 156.890818][ T6636] [ 156.894273][ T6636] Kernel Offset: disabled [ 156.899113][ T6636] Rebooting in 86400 seconds..