last executing test programs: 4m48.793301376s ago: executing program 3 (id=16): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='i2c_reply\x00', 0xffffffffffffffff, 0x0, 0x6}, 0xa) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xfce1) 4m42.256720793s ago: executing program 3 (id=30): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m38.799530309s ago: executing program 3 (id=38): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x4f73, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000a00)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) inotify_init1(0x80800) 4m35.693988931s ago: executing program 3 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m25.189100659s ago: executing program 3 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c800800000080090000", @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 4m24.564461354s ago: executing program 3 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 4m23.859394237s ago: executing program 32 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 3m59.94685059s ago: executing program 4 (id=125): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$FUSE(r3, &(0x7f0000002b40)={0x2020}, 0x2020) 3m57.524502838s ago: executing program 4 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 3m54.414353118s ago: executing program 4 (id=139): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000e80)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4012011, r0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) truncate(&(0x7f0000000180)='./file1\x00', 0x7) 3m53.068398995s ago: executing program 4 (id=142): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0c35d29c3ee5e5c3676345a41aa2ae2c084a0ea000000000000000000c900002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x800]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 3m47.503391156s ago: executing program 4 (id=151): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) 3m46.455292485s ago: executing program 4 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 3m40.745198196s ago: executing program 33 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 2m39.242032114s ago: executing program 5 (id=284): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x100, 0x0, 0x0}) 2m32.455922727s ago: executing program 5 (id=297): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18418, &(0x7f0000000180)=ANY=[], 0x2, 0x4b1, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r0 = socket(0x2d, 0x1, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, 0x0, 0x138) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001"], 0x1e8}}, 0x48040) syz_clone(0x640c7000, 0x0, 0x61, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m29.313894432s ago: executing program 5 (id=305): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x5fed0) fallocate(r1, 0x20, 0x0, 0x8000) 2m26.226346123s ago: executing program 5 (id=315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmdt(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000000c0)=@keyring) socket(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x110) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000100)=""/109, 0x6d) 2m23.593067371s ago: executing program 5 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2c}, 0x94) socket(0x11, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3ae1, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x52869000) 2m20.83960828s ago: executing program 5 (id=320): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x389, @any, 0xe, 0x2}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x551083, 0x28) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x200) 2m5.420804364s ago: executing program 34 (id=320): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x389, @any, 0xe, 0x2}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x551083, 0x28) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x200) 1m15.621810796s ago: executing program 1 (id=436): syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d0000000000010902240001000000000904000001030002000921000000012205000905810300140000"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x28}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0004a7000000a722550d253630b14f76271e3d3e1a9c855f5bd89fc13e1a3698744965dac42b3798c85c73fa55201d02bb4cde073be99dd14617f93b834cd9cd3eb055ce018033ad97dcf222dcc1e52fde859b66613418a853764ff9c0a337b3e357b5e8791d082dbf31cf0668b796202d3a2cbae5a7c0ed3fdce4f72ddb83cfe6e3848ada3bcaa42a18b8ea35c6fd88908437c8f126d722c5878ae2f9eefea8a07547c4fcf70900000055cd74"], 0x0}, &(0x7f0000000680)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="40125b00000062fc1e535455f77e6be19e4ba8a628c7c6cfd5f506e4770f04d2c156f800445b06d1a7a11c730e59e054c78f34b4d73d0b19c6d2688ffe6e46a0231615350d204ee32e489fb2df623324d86f2d61492121af08f253386c"], &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000600)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200) 1m12.468692679s ago: executing program 1 (id=448): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x202, 0x85) syz_mount_image$erofs(&(0x7f0000000580), &(0x7f0000000540)='./file1\x00', 0x3102040, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x1, 0x210, &(0x7f0000000a00)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r2 = fanotify_init(0x0, 0x80000) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x87) fchdir(r4) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r5, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, 0x0, 0x0) 1m11.608796202s ago: executing program 1 (id=452): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x1) io_setup(0x4, &(0x7f00000003c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0xb) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1m6.36553244s ago: executing program 1 (id=463): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m1.900059544s ago: executing program 1 (id=475): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) close_range(r0, r3, 0x0) 58.171422087s ago: executing program 1 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x10c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 57.130437489s ago: executing program 35 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x10c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 21.843866823s ago: executing program 6 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x40000) 19.684043244s ago: executing program 0 (id=551): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18418, &(0x7f0000000180)=ANY=[], 0x2, 0x4b1, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r0 = socket(0x2d, 0x1, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, 0x0, 0x138) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001"], 0x1e8}}, 0x48040) syz_clone(0x640c7000, 0x0, 0x61, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 17.156155695s ago: executing program 6 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 16.579838276s ago: executing program 6 (id=559): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r1, 0xdabd4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 16.060163481s ago: executing program 6 (id=561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmdt(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000000c0)=@keyring) socket(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', &(0x7f0000000100)=""/109, 0x6d) 14.793088731s ago: executing program 6 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000200)='./file1\x00', 0x12e) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffd, 0xffffffffffffffff, 0x0}]) pipe2(&(0x7f0000000040), 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 13.756049947s ago: executing program 0 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 13.438716596s ago: executing program 0 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2c}, 0x94) socket(0x11, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x3ae1, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x52869000) 11.745491726s ago: executing program 0 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x40000) 9.464098821s ago: executing program 2 (id=571): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x389, @any, 0xe, 0x2}, 0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 8.956358115s ago: executing program 2 (id=572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000002380)='./file1\x00', 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0x0, 0x0) 6.662517366s ago: executing program 6 (id=573): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 6.379084134s ago: executing program 7 (id=574): write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x100) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 6.147882464s ago: executing program 2 (id=575): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/118, 0x76}], 0x3, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000280)={0x57, 0x40, 0x4f, {0x4, 0x3}, {0x30c, 0xbd}, @ramp={0x7, 0xc, {0x4, 0x9, 0x9, 0x7}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a"], 0x24}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e22, 0x2, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0x84, 0x0, 0xee00}, {0x0, 0x13, 0x3, 0x7d, 0x9, 0x80, 0xb, 0xb}, {0x2, 0xf7, 0x9, 0x4}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d3, 0x32}, 0x2, @in=@private=0xa010100, 0x3507, 0x3, 0x2, 0x2, 0xfffffff8, 0x60a8, 0x5b}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) 6.028116808s ago: executing program 7 (id=576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000200000000000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 5.737470758s ago: executing program 7 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) timerfd_create(0x0, 0x800) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 5.719369701s ago: executing program 0 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2c}, 0x94) socket(0x11, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x3ae1, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x52869000) 3.848131841s ago: executing program 0 (id=579): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800c10, &(0x7f0000000000)=ANY=[], 0xff, 0x1d4, &(0x7f0000000280)="$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") readv(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x234031, 0xffffffffffffffff, 0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x2580, 0xb7) fstat(0xffffffffffffffff, &(0x7f0000000540)) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.500864302s ago: executing program 7 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 2.332109497s ago: executing program 2 (id=581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 1.716760114s ago: executing program 2 (id=582): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x389, @any, 0xe, 0x2}, 0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 1.308841049s ago: executing program 7 (id=583): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000040)='E\xe1\x85\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYBLOB=',group_id=']) read$FUSE(r3, &(0x7f00000083c0)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000300)={0x1, 0x7fff, 0x4, 0x10000000, 0x1}) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="08a2", 0x2}], 0x1) 474.472875ms ago: executing program 2 (id=584): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x489, &(0x7f0000000580)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(0x0, 0x145142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 0s ago: executing program 7 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x1008008, &(0x7f0000000140)={[{@longad}, {@uid}, {}, {@volume={'volume', 0x3d, 0x3}}, {@shortad}, {@lastblock={'lastblock', 0x3d, 0x1}}, {@session={'session', 0x3d, 0xffffffffffffff81}}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0xffffffffffffffff}}, {@partition={'partition', 0x3d, 0xfffffffffffffffc}}, {@rootdir={'rootdir', 0x3d, 0x81}}]}, 0x2, 0xc45, &(0x7f0000000f40)="$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") syz_clone(0xd2009d00, 0x0, 0x23, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) open$dir(&(0x7f0000000340)='./file0\x00', 0x8100, 0xc8) write$sndseq(r1, 0x0, 0x0) fsync(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000280)={0x5, 0xf, 0x3}) syz_open_dev$evdev(&(0x7f0000000000), 0xe5a, 0x400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r2, 0x58, &(0x7f00000008c0)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@journal_dev={'journal_dev', 0x3d, 0x1b2c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x465, &(0x7f0000000bc0)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) kernel console output (not intermixed with test programs): usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.908344][ T10] usb 2-1: Product: syz [ 123.919107][ T10] usb 2-1: Manufacturer: syz [ 123.938232][ T10] usb 2-1: SerialNumber: syz [ 123.963966][ T10] usb 2-1: config 0 descriptor?? [ 124.010580][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 124.276865][ T5990] usb 2-1: USB disconnect, device number 2 [ 124.316309][ T5990] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 124.562351][ T5945] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.732008][ T5945] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 124.761113][ T5945] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 125.751182][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.763169][ T5945] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.977810][ T5945] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 126.991743][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 127.012296][ T10] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 127.042589][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.065690][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.150656][ T5945] usb 6-1: Product: syz [ 127.155861][ T5945] usb 6-1: Manufacturer: syz [ 127.190987][ T5945] usb 6-1: SerialNumber: syz [ 127.206584][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.263258][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.285514][ T10] usbtmc 3-1:16.0: bulk endpoints not found [ 127.374122][ T5945] usb 6-1: can't set config #1, error -71 [ 127.452895][ T5945] usb 6-1: USB disconnect, device number 2 [ 127.527147][ T6060] loop1: detected capacity change from 0 to 512 [ 127.665783][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.821290][ T6060] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.977468][ T6068] loop3: detected capacity change from 0 to 256 [ 128.098906][ T6068] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 128.170872][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.632687][ T6079] loop3: detected capacity change from 0 to 128 [ 130.817275][ T6079] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.871198][ T6079] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.963722][ T5848] usb 3-1: USB disconnect, device number 3 [ 131.525241][ T6075] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 132.123652][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.381100][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.898258][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.117612][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 135.197800][ T5848] usb 2-1: unable to read config index 0 descriptor/all [ 135.257063][ T43] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 135.271929][ T5848] usb 2-1: can't read configurations, error -71 [ 135.291450][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.344224][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.389956][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.428685][ T43] usb 3-1: Product: syz [ 135.464564][ T43] usb 3-1: Manufacturer: syz [ 135.521047][ T43] usb 3-1: SerialNumber: syz [ 135.550478][ T43] usb 3-1: can't set config #1, error -71 [ 135.618448][ T43] usb 3-1: USB disconnect, device number 4 [ 135.738054][ T6112] loop2: detected capacity change from 0 to 256 [ 135.824827][ T6112] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 135.863639][ T6116] netlink: 108 bytes leftover after parsing attributes in process `syz.5.43'. [ 138.671914][ T6130] loop4: detected capacity change from 0 to 128 [ 138.731464][ T6130] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 139.200376][ T6136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.207810][ T6136] IPv6: NLM_F_CREATE should be set when creating new route [ 139.296804][ T6138] netlink: 148 bytes leftover after parsing attributes in process `syz.4.28'. [ 139.308718][ T6138] netlink: 116 bytes leftover after parsing attributes in process `syz.4.28'. [ 139.317948][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28'. [ 140.481253][ T5856] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 140.489948][ T5856] Bluetooth: hci5: Injecting HCI hardware error event [ 140.497981][ T5856] Bluetooth: hci5: hardware error 0x00 [ 140.622480][ T6150] fuse: Bad value for 'fd' [ 140.663962][ T6150] netlink: 76 bytes leftover after parsing attributes in process `syz.5.52'. [ 143.362754][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.777779][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.784956][ T5856] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 143.796786][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.501687][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 144.514175][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.537528][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.568094][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 144.666628][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 144.936366][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.011734][ T6170] loop4: detected capacity change from 0 to 256 [ 145.417632][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.459113][ T6170] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 145.521190][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.575021][ T10] usb 2-1: can't set config #16, error -71 [ 145.591298][ T10] usb 2-1: USB disconnect, device number 5 [ 146.222646][ T6184] loop2: detected capacity change from 0 to 128 [ 146.254838][ T6027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.272832][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.328194][ T6184] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.365477][ T6184] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.451089][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 146.451759][ T6027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.468855][ T5915] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 146.499662][ T5915] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.544498][ T5915] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.571100][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.621071][ T5915] usbtmc 5-1:16.0: bulk endpoints not found [ 146.637369][ T5842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.695853][ T6027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.167612][ T6027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.267304][ T5945] usb 5-1: USB disconnect, device number 2 [ 149.322151][ T6207] lo: entered promiscuous mode [ 149.431484][ T6207] tunl0: entered promiscuous mode [ 149.478680][ T6207] gre0: entered promiscuous mode [ 149.631696][ T6207] gretap0: entered promiscuous mode [ 149.688877][ T6207] erspan0: entered promiscuous mode [ 149.781573][ T6207] ip_vti0: entered promiscuous mode [ 149.817405][ T6207] ip6_vti0: entered promiscuous mode [ 149.865047][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.384615][ T6207] sit0: entered promiscuous mode [ 150.423511][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 150.455527][ T6207] ip6tnl0: entered promiscuous mode [ 150.481227][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 150.531348][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.571810][ T5915] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.611233][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 150.621792][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.629774][ T9] usb 5-1: Product: syz [ 150.653723][ T6207] ip6gre0: entered promiscuous mode [ 150.660440][ T9] usb 5-1: Manufacturer: syz [ 150.681604][ T9] usb 5-1: SerialNumber: syz [ 150.696675][ T6207] syz_tun: entered promiscuous mode [ 150.720396][ T6209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.765354][ T6207] ip6gretap0: entered promiscuous mode [ 150.796800][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.805338][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.841333][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 150.853028][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 150.869908][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 150.896162][ T6207] bridge0: entered promiscuous mode [ 150.946683][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 150.970036][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 151.020393][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.040300][ T6207] vcan0: entered promiscuous mode [ 151.054803][ T6207] bond0: entered promiscuous mode [ 151.060035][ T6207] bond_slave_0: entered promiscuous mode [ 151.066165][ T6207] bond_slave_1: entered promiscuous mode [ 151.071371][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.079556][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.087890][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.101162][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.111666][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 151.127264][ T9] usb 5-1: USB disconnect, device number 3 [ 151.139807][ T9] usblp0: removed [ 151.183298][ T6207] team0: entered promiscuous mode [ 151.188478][ T6207] team_slave_0: entered promiscuous mode [ 151.193769][ T5915] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.211539][ T6207] team_slave_1: entered promiscuous mode [ 151.251915][ T6207] dummy0: entered promiscuous mode [ 151.277360][ T6207] nlmon0: entered promiscuous mode [ 151.323685][ T5915] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.355828][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.363697][ T6207] caif0: entered promiscuous mode [ 151.389931][ T6207] batadv0: entered promiscuous mode [ 151.441874][ T5915] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 151.491954][ T6207] vxcan0: entered promiscuous mode [ 151.502332][ T6207] vxcan1: entered promiscuous mode [ 151.551269][ T6207] veth0: entered promiscuous mode [ 151.762728][ T6207] veth1: entered promiscuous mode [ 152.037804][ T6207] wg0: entered promiscuous mode [ 152.106010][ T6207] wg1: entered promiscuous mode [ 152.152082][ T6207] wg2: entered promiscuous mode [ 152.188783][ T6207] veth0_to_bridge: entered promiscuous mode [ 152.244891][ T6207] veth1_to_bridge: entered promiscuous mode [ 152.276060][ T6207] veth0_to_bond: entered promiscuous mode [ 152.298713][ T6207] veth1_to_bond: entered promiscuous mode [ 152.314442][ T6234] loop2: detected capacity change from 0 to 512 [ 152.330096][ T6207] veth0_to_team: entered promiscuous mode [ 152.368116][ T6207] veth1_to_team: entered promiscuous mode [ 152.373974][ T6234] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.81: casefold flag without casefold feature [ 152.413442][ T6234] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.81: couldn't read orphan inode 15 (err -117) [ 152.437087][ T6207] veth0_to_batadv: entered promiscuous mode [ 152.466941][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.483749][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.520600][ T6207] batadv_slave_0: entered promiscuous mode [ 152.769500][ T6207] veth1_to_batadv: entered promiscuous mode [ 152.786476][ T6207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.795327][ T6207] batadv_slave_1: entered promiscuous mode [ 152.807278][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.810137][ T6207] xfrm0: entered promiscuous mode [ 152.836383][ T6207] veth0_to_hsr: entered promiscuous mode [ 152.872024][ T6207] veth1_to_hsr: entered promiscuous mode [ 152.935517][ T6207] hsr0: entered promiscuous mode [ 152.987004][ T6207] veth1_virt_wifi: entered promiscuous mode [ 153.020718][ T6207] veth0_virt_wifi: entered promiscuous mode [ 153.042298][ T6207] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 153.104531][ T6207] vlan0: entered promiscuous mode [ 153.118341][ T6207] vlan1: entered promiscuous mode [ 153.184374][ T5840] Bluetooth: hci0: command tx timeout [ 153.694029][ T6207] macvlan0: entered promiscuous mode [ 153.705305][ T5915] usb 2-1: USB disconnect, device number 6 [ 153.776744][ T6207] macvlan1: entered promiscuous mode [ 154.032738][ T6207] ipvlan0: entered promiscuous mode [ 154.038070][ T6207] ipvlan1: entered promiscuous mode [ 154.967196][ T6207] macvtap0: entered promiscuous mode [ 154.993623][ T6207] macsec0: entered promiscuous mode [ 155.105423][ T6255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.187455][ T6207] geneve0: entered promiscuous mode [ 155.256977][ T6207] geneve1: entered promiscuous mode [ 155.284500][ T6207] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 155.303112][ T6207] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 155.320963][ T6207] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 155.321196][ T5840] Bluetooth: hci0: command tx timeout [ 155.362136][ T6207] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 155.406697][ T6207] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 155.457929][ T6207] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 155.886473][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.906160][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.931759][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.964394][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.092412][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 156.260365][ T6027] bridge_slave_1: left allmulticast mode [ 156.283980][ T6027] bridge_slave_1: left promiscuous mode [ 156.291115][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.297385][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 156.332899][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 156.396210][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.418265][ T6027] bridge_slave_0: left allmulticast mode [ 156.432300][ T6027] bridge_slave_0: left promiscuous mode [ 156.438069][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.698058][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 156.721153][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.729199][ T9] usb 1-1: Product: syz [ 156.734334][ T9] usb 1-1: Manufacturer: syz [ 156.743946][ T9] usb 1-1: SerialNumber: syz [ 156.760705][ T6264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.002387][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 157.111586][ T5945] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.201511][ T5840] Bluetooth: hci0: command tx timeout [ 158.229721][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 159.449731][ T5915] usb 1-1: USB disconnect, device number 2 [ 159.467613][ T5945] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.781790][ T5915] usblp0: removed [ 159.791082][ T5945] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.815426][ T5945] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 159.844809][ T5945] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 159.861225][ T5945] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.930038][ T5945] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.973111][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.323726][ T5840] Bluetooth: hci0: command tx timeout [ 160.638146][ T5945] usb 5-1: can't set config #16, error -71 [ 160.703164][ T5945] usb 5-1: USB disconnect, device number 4 [ 161.629569][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.667634][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.697660][ T6027] bond0 (unregistering): Released all slaves [ 162.130856][ T6307] loop0: detected capacity change from 0 to 1024 [ 162.144914][ T6307] EXT4-fs: Ignoring removed orlov option [ 162.219871][ T6307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.553667][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.622234][ T6027] hsr_slave_0: left promiscuous mode [ 167.664579][ T6027] hsr_slave_1: left promiscuous mode [ 167.685633][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.720848][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.782779][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.817965][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.903432][ T6027] veth1_macvtap: left promiscuous mode [ 167.926895][ T6027] veth0_macvtap: left promiscuous mode [ 167.997652][ T6027] veth1_vlan: left promiscuous mode [ 168.010948][ T6027] veth0_vlan: left promiscuous mode [ 168.989780][ T6362] loop2: detected capacity change from 0 to 256 [ 169.051211][ T6362] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 169.361389][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.390028][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 169.471115][ T5856] Bluetooth: hci6: command 0x1003 tx timeout [ 169.477290][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 169.535530][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 169.547583][ T43] usb 5-1: config index 0 descriptor too short (expected 6171, got 27) [ 169.582378][ T43] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 169.610073][ T43] usb 5-1: config 0 has no interface number 0 [ 169.636083][ T43] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.667416][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 169.691197][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.702826][ T43] usb 5-1: Product: syz [ 169.715236][ T43] usb 5-1: Manufacturer: syz [ 169.723702][ T43] usb 5-1: SerialNumber: syz [ 169.748175][ T43] usb 5-1: config 0 descriptor?? [ 169.782325][ T43] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 170.035464][ T43] usb 5-1: USB disconnect, device number 5 [ 170.064190][ T43] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 170.436718][ T6216] chnl_net:caif_netlink_parms(): no params data found [ 170.842575][ T6379] loop1: detected capacity change from 0 to 512 [ 173.188128][ T6387] loop2: detected capacity change from 0 to 256 [ 173.202020][ T6379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.271751][ T6387] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 173.311299][ T6379] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.365436][ T6387] exFAT-fs (loop2): error, data size is invalid(10) [ 173.372801][ T6387] exFAT-fs (loop2): Filesystem has been set read-only [ 173.380785][ T6387] exFAT-fs (loop2): error, data size is invalid(10) [ 173.679977][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.697102][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.724839][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.756387][ T6216] bridge_slave_0: entered allmulticast mode [ 173.781611][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.790748][ T6216] bridge_slave_0: entered promiscuous mode [ 173.827555][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.871286][ T5915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.884428][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.926240][ T6216] bridge_slave_1: entered allmulticast mode [ 173.944311][ T6216] bridge_slave_1: entered promiscuous mode [ 173.984188][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 174.012093][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.036825][ T43] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 174.060493][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 174.093562][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.108045][ T5915] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 174.133782][ T43] usb 1-1: config 0 descriptor?? [ 174.167738][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.178655][ T5915] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.228375][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.247315][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.256740][ T5915] usb 3-1: Product: syz [ 174.279642][ T5915] usb 3-1: Manufacturer: syz [ 174.283514][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.295554][ T5915] usb 3-1: SerialNumber: syz [ 174.318539][ T6399] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.379238][ T6407] loop1: detected capacity change from 0 to 2048 [ 174.486760][ T6407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.555340][ T6216] team0: Port device team_slave_0 added [ 174.601694][ T5915] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 174.614348][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.626353][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.657826][ T6216] team0: Port device team_slave_1 added [ 174.699897][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.713526][ T6415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 174.761570][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.822700][ T43] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 174.830230][ T6415] EXT4-fs (loop1): Remounting filesystem read-only [ 174.843246][ T5915] usb 3-1: USB disconnect, device number 5 [ 174.851281][ T43] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 174.858421][ T43] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 174.886458][ T5915] usblp0: removed [ 174.920540][ T6415] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.1.132: cleanup dec ref error -28 [ 174.934090][ T43] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 174.964287][ T43] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 175.031983][ T43] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 175.087732][ T43] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device [ 175.107147][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.128546][ T43] koneplus 0003:1E7D:2D51.0001: couldn't install mouse [ 175.138610][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.180808][ T43] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -71 [ 175.204665][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.223564][ T43] usb 1-1: USB disconnect, device number 3 [ 175.246124][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.255234][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.255257][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.255304][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.492304][ T6423] fido_id[6423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 175.587354][ T6216] hsr_slave_0: entered promiscuous mode [ 175.623137][ T6216] hsr_slave_1: entered promiscuous mode [ 175.644745][ T6216] debugfs: 'hsr0' already exists in 'hsr' [ 175.674113][ T6216] Cannot create hsr debugfs directory [ 176.161270][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.333411][ T10] usb 2-1: config index 0 descriptor too short (expected 6171, got 27) [ 176.362125][ T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 176.389623][ T10] usb 2-1: config 0 has no interface number 0 [ 176.416246][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.466285][ T6447] loop4: detected capacity change from 0 to 1024 [ 176.481176][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 176.503498][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.528840][ T10] usb 2-1: Product: syz [ 176.544206][ T10] usb 2-1: Manufacturer: syz [ 176.554309][ T10] usb 2-1: SerialNumber: syz [ 176.556302][ T6447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.591418][ T10] usb 2-1: config 0 descriptor?? [ 176.614473][ T6447] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.646841][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 176.667424][ T6216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.692401][ T6216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.758851][ T6216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.767484][ T6447] EXT4-fs error (device loop4): ext4_free_blocks:6695: comm syz.4.139: Freeing blocks not in datazone - block = 0, count = 16 [ 176.837348][ T6216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.312573][ T6447] EXT4-fs (loop4): Remounting filesystem read-only [ 177.323088][ T5928] usb 2-1: USB disconnect, device number 7 [ 177.364080][ T5928] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 177.582478][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.598577][ T6466] loop0: detected capacity change from 0 to 512 [ 177.630931][ T6466] EXT4-fs: Ignoring removed nobh option [ 177.672483][ T6466] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.729095][ T6466] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.857245][ T6466] EXT4-fs (loop0): 1 truncate cleaned up [ 177.865128][ T6466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.950952][ T6466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.980110][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.024625][ T6474] loop4: detected capacity change from 0 to 128 [ 178.127325][ T6474] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.265740][ T6474] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.323464][ T6216] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.346334][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.353497][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.132834][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.139990][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.822208][ T6474] loop4: detected capacity change from 128 to 0 [ 179.884535][ C1] I/O error, dev loop4, sector 48 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.894546][ T6482] FAT-fs (loop4): Directory bread(block 48) failed [ 180.056932][ T6482] FAT-fs (loop4): Directory bread(block 49) failed [ 181.451938][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 183.152052][ T5835] FAT-fs (loop4): Directory bread(block 48) failed [ 183.158789][ T5835] FAT-fs (loop4): Directory bread(block 49) failed [ 183.274690][ T5835] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 183.331037][ T5835] FAT-fs (loop4): Filesystem has been set read-only [ 183.339920][ T5835] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 183.464569][ T43] usb 3-1: device descriptor read/all, error -71 [ 185.833548][ T5856] Bluetooth: hci6: command 0x1003 tx timeout [ 185.841375][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 189.516883][ T187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.803208][ T187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.862085][ T6216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.072907][ T187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.405360][ T187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.471277][ T6553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.363192][ T187] bridge_slave_1: left allmulticast mode [ 193.368873][ T187] bridge_slave_1: left promiscuous mode [ 193.403575][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.412310][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.416592][ T187] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.428556][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.446183][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.455257][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.519214][ T187] bridge_slave_0: left allmulticast mode [ 193.551219][ T187] bridge_slave_0: left promiscuous mode [ 193.557031][ T187] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.471627][ T5840] Bluetooth: hci1: command tx timeout [ 195.920049][ T187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.949379][ T187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.980390][ T187] bond0 (unregistering): Released all slaves [ 196.164129][ T6216] veth0_vlan: entered promiscuous mode [ 196.395512][ T6216] veth1_vlan: entered promiscuous mode [ 196.728240][ T187] hsr_slave_0: left promiscuous mode [ 196.742054][ T187] hsr_slave_1: left promiscuous mode [ 196.758696][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.777791][ T187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.781845][ T6589] loop2: detected capacity change from 0 to 512 [ 196.797064][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.810831][ T187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.815741][ T6589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.853501][ T6589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.866370][ T6589] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.905494][ T187] veth1_macvtap: left promiscuous mode [ 196.941372][ T187] veth0_macvtap: left promiscuous mode [ 196.947171][ T187] veth1_vlan: left promiscuous mode [ 196.976974][ T187] veth0_vlan: left promiscuous mode [ 197.621075][ T5856] Bluetooth: hci1: command tx timeout [ 197.631242][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 197.787477][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.053005][ T6616] loop1: detected capacity change from 0 to 256 [ 199.529212][ T6616] syz.1.177: attempt to access beyond end of device [ 199.529212][ T6616] loop1: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 199.550403][ T6616] syz.1.177: attempt to access beyond end of device [ 199.550403][ T6616] loop1: rw=2049, sector=608, nr_sectors = 416 limit=256 [ 199.575892][ T6616] syz.1.177: attempt to access beyond end of device [ 199.575892][ T6616] loop1: rw=2049, sector=1056, nr_sectors = 1472 limit=256 [ 199.631127][ T5840] Bluetooth: hci1: command tx timeout [ 201.781096][ T5840] Bluetooth: hci1: command tx timeout [ 202.812567][ T187] team0 (unregistering): Port device team_slave_1 removed [ 202.890151][ T187] team0 (unregistering): Port device team_slave_0 removed [ 203.337736][ T30] audit: type=1326 audit(1759337709.646:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.376503][ T30] audit: type=1326 audit(1759337709.646:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.398925][ T30] audit: type=1326 audit(1759337709.646:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.426771][ T30] audit: type=1326 audit(1759337709.646:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.449343][ T30] audit: type=1326 audit(1759337709.646:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.473870][ T30] audit: type=1326 audit(1759337709.676:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95a1bc1785 code=0x7ffc0000 [ 203.497623][ T30] audit: type=1326 audit(1759337709.676:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.520327][ T30] audit: type=1326 audit(1759337709.676:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.542852][ T30] audit: type=1326 audit(1759337709.686:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.598010][ T30] audit: type=1326 audit(1759337709.686:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 203.769927][ T6216] veth0_macvtap: entered promiscuous mode [ 204.756058][ T6216] veth1_macvtap: entered promiscuous mode [ 204.792150][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.838698][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 205.141699][ T6684] loop1: detected capacity change from 0 to 128 [ 205.156749][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.165651][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.268670][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.411293][ T6027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.421478][ T5961] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.436482][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.551282][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.967444][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 208.619565][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 208.619589][ T30] audit: type=1326 audit(1759337714.926:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ec58eec9 code=0x7ffc0000 [ 208.657718][ T30] audit: type=1326 audit(1759337714.966:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29ec5c1785 code=0x7ffc0000 [ 208.716560][ T30] audit: type=1326 audit(1759337714.966:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ec58eec9 code=0x7ffc0000 [ 208.777874][ T30] audit: type=1326 audit(1759337714.966:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f29ec58eec9 code=0x7ffc0000 [ 210.505451][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.530375][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.537714][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.551526][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.571280][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.578983][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.591485][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.598731][ T6563] bridge_slave_0: entered allmulticast mode [ 210.711687][ T6563] bridge_slave_0: entered promiscuous mode [ 211.948601][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.999056][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.049743][ T6563] bridge_slave_1: entered allmulticast mode [ 212.088965][ T6563] bridge_slave_1: entered promiscuous mode [ 213.131193][ T5840] Bluetooth: hci6: command tx timeout [ 213.829189][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.915142][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.954667][ T6758] loop2: detected capacity change from 0 to 1024 [ 213.992254][ T6758] EXT4-fs: Ignoring removed bh option [ 214.134540][ T6758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.279246][ T6563] team0: Port device team_slave_0 added [ 214.322508][ T6758] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4182: comm syz.2.216: Allocating blocks 481-513 which overlap fs metadata [ 214.363713][ T6563] team0: Port device team_slave_1 added [ 215.490446][ T5856] Bluetooth: hci6: command tx timeout [ 216.256972][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.420349][ T187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.479986][ T6776] loop1: detected capacity change from 0 to 1024 [ 216.548501][ T6776] EXT4-fs: Ignoring removed bh option [ 216.596540][ T6776] EXT4-fs: Ignoring removed bh option [ 216.700954][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.541938][ T187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.556687][ T5856] Bluetooth: hci6: command tx timeout [ 218.403857][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.420188][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.432550][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.458684][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.490779][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.509688][ T30] audit: type=1326 audit(1759337724.816:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 218.531838][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.531887][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.713274][ T187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.743349][ T30] audit: type=1326 audit(1759337724.816:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 218.828726][ T30] audit: type=1326 audit(1759337724.816:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 218.864990][ T30] audit: type=1326 audit(1759337724.816:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 218.888170][ T30] audit: type=1326 audit(1759337724.816:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 218.910767][ T30] audit: type=1326 audit(1759337724.966:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 218.936943][ T30] audit: type=1326 audit(1759337724.966:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 218.959223][ T5915] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 218.968021][ T30] audit: type=1326 audit(1759337724.966:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95a1bc1785 code=0x7ffc0000 [ 218.969708][ T187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.001128][ T30] audit: type=1326 audit(1759337725.006:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 219.026704][ T30] audit: type=1326 audit(1759337725.006:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a1b8eec9 code=0x7ffc0000 [ 219.198635][ T6563] hsr_slave_0: entered promiscuous mode [ 219.213309][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 219.213855][ T6563] hsr_slave_1: entered promiscuous mode [ 219.225658][ T5915] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 219.225704][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.236090][ T6563] debugfs: 'hsr0' already exists in 'hsr' [ 219.260120][ T6563] Cannot create hsr debugfs directory [ 219.306377][ T5915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 219.320804][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.398608][ T5915] usb 2-1: Product: syz [ 219.404324][ T5915] usb 2-1: Manufacturer: syz [ 219.408929][ T5915] usb 2-1: SerialNumber: syz [ 219.462108][ T6796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.631352][ T5856] Bluetooth: hci6: command tx timeout [ 219.700322][ T5915] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 219.905538][ T5915] usb 2-1: USB disconnect, device number 8 [ 219.951819][ T5915] usblp0: removed [ 220.117691][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 221.332875][ T187] bridge_slave_1: left allmulticast mode [ 221.338568][ T187] bridge_slave_1: left promiscuous mode [ 221.361232][ T187] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.399689][ T187] bridge_slave_0: left allmulticast mode [ 222.465621][ T187] bridge_slave_0: left promiscuous mode [ 222.501795][ T187] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.192831][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 228.193139][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 228.199047][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 228.405990][ T6856] loop2: detected capacity change from 0 to 512 [ 228.430713][ T6856] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.857554][ T187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.870335][ T187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.888624][ T187] bond0 (unregistering): Released all slaves [ 229.021501][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 229.039310][ T6853] bridge1: entered promiscuous mode [ 230.151350][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 231.125618][ T5945] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 231.141436][ T5945] usb 3-1: config 0 has no interface number 0 [ 231.147599][ T5945] usb 3-1: config 0 interface 12 has no altsetting 0 [ 231.239735][ T5945] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 231.269540][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.285321][ T5945] usb 3-1: Product: syz [ 231.289569][ T5945] usb 3-1: Manufacturer: syz [ 231.295762][ T5945] usb 3-1: SerialNumber: syz [ 231.316965][ T5945] usb 3-1: config 0 descriptor?? [ 231.334020][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.354209][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.366433][ T6735] bridge_slave_0: entered allmulticast mode [ 231.375657][ T6735] bridge_slave_0: entered promiscuous mode [ 231.421881][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.429075][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.440168][ T6735] bridge_slave_1: entered allmulticast mode [ 231.448985][ T6735] bridge_slave_1: entered promiscuous mode [ 231.500423][ T187] hsr_slave_0: left promiscuous mode [ 231.510813][ T187] hsr_slave_1: left promiscuous mode [ 231.522910][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.530322][ T187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.544946][ T187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.559440][ T187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.605109][ T187] veth1_macvtap: left promiscuous mode [ 231.621475][ T187] veth0_macvtap: left promiscuous mode [ 231.637556][ T187] veth1_vlan: left promiscuous mode [ 231.647565][ T187] veth0_vlan: left promiscuous mode [ 232.596481][ T187] team0 (unregistering): Port device team_slave_1 removed [ 232.650772][ T187] team0 (unregistering): Port device team_slave_0 removed [ 234.926662][ T5945] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 234.934327][ T5945] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 234.941668][ T5945] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 234.949301][ T5945] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 235.224601][ T5945] usb 3-1: USB disconnect, device number 8 [ 235.394064][ T6888] loop2: detected capacity change from 0 to 2048 [ 235.424626][ T6888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.900513][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 236.243494][ T6563] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 236.629223][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.742763][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.794597][ T6563] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 236.888678][ T6563] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.985391][ T6910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.989783][ T6563] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.992669][ T6910] IPv6: NLM_F_CREATE should be set when creating new route [ 237.031735][ T6010] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 237.100390][ T6916] bridge1: entered promiscuous mode [ 237.158580][ T6735] team0: Port device team_slave_0 added [ 237.176457][ T6735] team0: Port device team_slave_1 added [ 237.228495][ T6010] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 33024, setting to 1024 [ 237.276342][ T6010] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 237.311032][ T6010] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.354208][ T6010] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.384032][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.424476][ T6010] usb 2-1: Product: syz [ 237.428655][ T6010] usb 2-1: Manufacturer: syz [ 237.461129][ T5915] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 237.481256][ T6010] usb 2-1: SerialNumber: syz [ 237.506838][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.530882][ T6903] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.537530][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.576306][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.600624][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.610584][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.651114][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 237.668119][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.696456][ T5915] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 237.708390][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.730301][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.758387][ T5915] usb 3-1: config 0 descriptor?? [ 237.780181][ T6010] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.984228][ T9] usb 2-1: USB disconnect, device number 9 [ 237.994690][ T6932] netlink: 3 bytes leftover after parsing attributes in process `syz.5.258'. [ 238.011278][ T9] usblp0: removed [ 238.048139][ T6735] hsr_slave_0: entered promiscuous mode [ 238.072669][ T6735] hsr_slave_1: entered promiscuous mode [ 238.102081][ T6735] debugfs: 'hsr0' already exists in 'hsr' [ 238.107870][ T6735] Cannot create hsr debugfs directory [ 238.185365][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.203484][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.235805][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.273521][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.321921][ T5915] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 238.329063][ T5915] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 238.348538][ T5915] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 238.375752][ T5915] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 238.397141][ T5915] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 238.429943][ T5915] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 238.550337][ T5915] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device [ 238.564870][ T5915] koneplus 0003:1E7D:2D51.0002: couldn't install mouse [ 238.597070][ T5915] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -71 [ 238.683648][ T5915] usb 3-1: USB disconnect, device number 9 [ 239.680720][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.861274][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.962750][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.969920][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.043326][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.050502][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.449567][ T6965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.266'. [ 242.727805][ T6735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 242.776201][ T6735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 242.871652][ T6735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 242.934574][ T6735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.435673][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.382950][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.428239][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.524864][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.532076][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.634529][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.641719][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.122446][ T6563] veth0_vlan: entered promiscuous mode [ 245.164489][ T6563] veth1_vlan: entered promiscuous mode [ 245.344015][ T6563] veth0_macvtap: entered promiscuous mode [ 246.394100][ T6563] veth1_macvtap: entered promiscuous mode [ 246.803674][ T5945] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 246.830256][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.955257][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.031156][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 247.048286][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.105177][ T5945] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 247.157112][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.227498][ T5945] usb 3-1: config 0 descriptor?? [ 247.350400][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.396490][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.449160][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.491020][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.543109][ T7036] loop1: detected capacity change from 0 to 512 [ 247.672879][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.694316][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.745805][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.802915][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.815041][ T7036] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.275: bad orphan inode 11862016 [ 247.855237][ T5945] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 247.867551][ T5945] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 247.887716][ T7036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 247.907251][ T5945] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 247.921708][ T5945] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 247.934624][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.942091][ T5945] koneplus 0003:1E7D:2D51.0003: unknown main item tag 0x0 [ 247.949940][ T7036] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.001695][ T5945] koneplus 0003:1E7D:2D51.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 248.061342][ T5945] koneplus 0003:1E7D:2D51.0003: couldn't init struct koneplus_device [ 248.069478][ T5945] koneplus 0003:1E7D:2D51.0003: couldn't install mouse [ 248.091309][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.099888][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.145453][ T5945] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -71 [ 248.220557][ T6163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.235308][ T5945] usb 3-1: USB disconnect, device number 10 [ 248.266139][ T6163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.398323][ T7047] fido_id[7047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 248.461158][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 249.301347][ T5931] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 249.505926][ T5931] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 249.532742][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.586827][ T5931] usb 3-1: config 0 has no interface number 0 [ 249.649264][ T5931] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 249.701765][ T5931] usb 3-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.774289][ T5931] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 249.797024][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.846563][ T5931] usb 3-1: Product: syz [ 249.850743][ T5931] usb 3-1: Manufacturer: syz [ 249.892641][ T6735] veth0_vlan: entered promiscuous mode [ 249.931096][ T5931] usb 3-1: SerialNumber: syz [ 250.921777][ T5931] usb 3-1: config 0 descriptor?? [ 251.116053][ T6735] veth1_vlan: entered promiscuous mode [ 251.125367][ T5931] usb-storage 3-1:0.20: USB Mass Storage device detected [ 251.197022][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.226876][ T5931] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 251.463250][ T6735] veth0_macvtap: entered promiscuous mode [ 251.504934][ T6735] veth1_macvtap: entered promiscuous mode [ 251.537779][ T5931] usb 3-1: USB disconnect, device number 11 [ 251.844059][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.894016][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.936634][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.987382][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.047905][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.082508][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.447071][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.474062][ T7091] bridge1: entered promiscuous mode [ 252.555739][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.715815][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.741160][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.232588][ T5845] Bluetooth: hci0: command 0x1003 tx timeout [ 253.239308][ T5856] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.201759][ T5915] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 254.591117][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 254.961981][ T5915] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 255.357595][ T5915] usb 2-1: config 0 has no interface number 0 [ 255.392462][ T5915] usb 2-1: config 0 interface 12 has no altsetting 0 [ 255.623289][ T5915] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 255.691041][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.699089][ T5915] usb 2-1: Product: syz [ 255.771009][ T5915] usb 2-1: Manufacturer: syz [ 255.781292][ T5915] usb 2-1: SerialNumber: syz [ 256.063135][ T5915] usb 2-1: config 0 descriptor?? [ 256.549472][ T7126] tc_dump_action: action bad kind [ 257.102213][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.293'. [ 257.755227][ T7136] loop6: detected capacity change from 0 to 2048 [ 258.936697][ T7136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.011200][ T7136] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.387950][ T5915] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 259.494280][ T7150] netlink: 148 bytes leftover after parsing attributes in process `syz.5.297'. [ 259.503820][ T7150] netlink: 116 bytes leftover after parsing attributes in process `syz.5.297'. [ 259.512902][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.5.297'. [ 259.742575][ T5915] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 260.108540][ T5915] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 260.138555][ T5915] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 260.291852][ T5915] usb 2-1: USB disconnect, device number 10 [ 260.376455][ T6735] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.775532][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 262.114154][ T7181] netlink: 'syz.7.307': attribute type 3 has an invalid length. [ 262.170182][ T7181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.843708][ T5845] Bluetooth: hci0: command 0x1003 tx timeout [ 262.849923][ T5856] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.972454][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.978792][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.011047][ T5848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 268.193622][ T5928] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 269.787474][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 269.957787][ T5928] usb 3-1: device descriptor read/all, error -71 [ 270.201776][ T7229] mmap: syz.2.321 (7229) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 273.495317][ T5928] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 274.364792][ T5928] usb 8-1: Using ep0 maxpacket: 32 [ 274.427268][ T5928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.473338][ T5928] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 274.526922][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.564337][ T5928] usb 8-1: config 0 descriptor?? [ 277.449514][ T5928] usbhid 8-1:0.0: can't add hid device: -71 [ 277.473935][ T5928] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 277.551412][ T5928] usb 8-1: USB disconnect, device number 3 [ 277.612687][ T6010] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.785350][ T6010] usb 2-1: Using ep0 maxpacket: 32 [ 277.823321][ T6010] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 277.841008][ T6010] usb 2-1: config 0 has no interface number 0 [ 277.861267][ T6010] usb 2-1: config 0 interface 12 has no altsetting 0 [ 277.903064][ T6010] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 277.932621][ T6010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.940623][ T6010] usb 2-1: Product: syz [ 277.972994][ T6010] usb 2-1: Manufacturer: syz [ 277.977599][ T6010] usb 2-1: SerialNumber: syz [ 278.024683][ T6010] usb 2-1: config 0 descriptor?? [ 279.651861][ T7289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.659154][ T7289] IPv6: NLM_F_CREATE should be set when creating new route [ 280.451319][ T7296] netlink: 'syz.6.336': attribute type 7 has an invalid length. [ 280.513580][ T7296] netlink: 'syz.6.336': attribute type 7 has an invalid length. [ 280.912163][ T6010] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 280.994463][ T6010] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 281.013136][ T6010] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 281.020768][ T6010] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 281.126146][ T6010] usb 2-1: USB disconnect, device number 11 [ 288.551471][ T43] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 288.871447][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 288.983426][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.701182][ T43] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 289.724423][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.754134][ T43] usb 8-1: config 0 descriptor?? [ 291.103628][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.181861][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.285417][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.365743][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.389904][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.407847][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.417948][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.438149][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.453711][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.457412][ T7373] Illegal XDP return value 4294967274 on prog (id 30) dev syz_tun, expect packet loss! [ 291.484391][ T43] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 291.491696][ T43] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 291.498832][ T43] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 291.515315][ T43] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 291.541137][ T43] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 291.571764][ T43] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0 [ 291.651068][ T5915] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 293.381103][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 293.393342][ T5915] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 293.531287][ T5915] usb 7-1: config 0 has no interface number 0 [ 293.537463][ T5915] usb 7-1: config 0 interface 12 has no altsetting 0 [ 293.551121][ T5845] Bluetooth: hci0: command tx timeout [ 293.568541][ T5915] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 293.581043][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.631236][ T5915] usb 7-1: Product: syz [ 293.636903][ T5915] usb 7-1: Manufacturer: syz [ 293.663710][ T5915] usb 7-1: SerialNumber: syz [ 293.691986][ T5915] usb 7-1: config 0 descriptor?? [ 293.721225][ T43] koneplus 0003:1E7D:2D51.0004: couldn't init struct koneplus_device [ 293.755643][ T43] koneplus 0003:1E7D:2D51.0004: couldn't install mouse [ 293.868394][ T43] koneplus 0003:1E7D:2D51.0004: probe with driver koneplus failed with error -71 [ 293.960062][ T43] usb 8-1: USB disconnect, device number 4 [ 294.009877][ T7383] loop2: detected capacity change from 0 to 2048 [ 294.132534][ T7383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.631020][ T5845] Bluetooth: hci0: command tx timeout [ 295.731110][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.829137][ T7407] loop1: detected capacity change from 0 to 512 [ 295.862763][ T7407] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.869314][ T7407] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.911291][ T7399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.113622][ T7407] EXT4-fs: Mount option(s) incompatible with ext2 [ 297.276224][ T5915] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 297.301024][ T5915] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 297.308333][ T5915] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 297.331194][ T5915] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 297.368773][ T5915] usb 7-1: USB disconnect, device number 2 [ 297.434193][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.590325][ T7368] chnl_net:caif_netlink_parms(): no params data found [ 297.720139][ T5845] Bluetooth: hci0: command tx timeout [ 298.017264][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.147568][ T7426] bridge1: entered promiscuous mode [ 298.346530][ T7438] loop2: detected capacity change from 0 to 128 [ 298.465260][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.501525][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.519344][ T7438] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.539297][ T7368] bridge_slave_0: entered allmulticast mode [ 298.563600][ T7438] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.603229][ T7368] bridge_slave_0: entered promiscuous mode [ 300.620990][ T5845] Bluetooth: hci0: command tx timeout [ 300.890843][ T7438] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 300.933547][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.991367][ T7438] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 301.039942][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.058530][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.109319][ T7368] bridge_slave_1: entered allmulticast mode [ 301.152675][ T7368] bridge_slave_1: entered promiscuous mode [ 301.368449][ T5842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.505879][ T7368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.392223][ T7368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.903894][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.372'. [ 303.147340][ T7467] loop2: detected capacity change from 0 to 16 [ 303.157115][ T7467] erofs: Unknown parameter '/dev/rtc0' [ 303.732220][ T5856] Bluetooth: hci4: unexpected subevent 0x01 length: 37 > 18 [ 303.740237][ T5856] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 303.750013][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) [ 303.750082][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.750117][ T5856] Workqueue: hci4 hci_rx_work [ 303.750202][ T5856] Call Trace: [ 303.750216][ T5856] [ 303.750233][ T5856] dump_stack_lvl+0x16c/0x1f0 [ 303.750336][ T5856] sysfs_warn_dup+0x7f/0xa0 [ 303.750390][ T5856] sysfs_create_dir_ns+0x24b/0x2b0 [ 303.750441][ T5856] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 303.750489][ T5856] ? find_held_lock+0x2b/0x80 [ 303.750572][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.750651][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 303.750728][ T5856] kobject_add_internal+0x2c4/0x9b0 [ 303.750799][ T5856] kobject_add+0x16e/0x240 [ 303.750861][ T5856] ? __pfx_kobject_add+0x10/0x10 [ 303.750923][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.750981][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 303.751041][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.751084][ T5856] ? kobject_put+0xab/0x5a0 [ 303.751121][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.751185][ T5856] device_add+0x288/0x1aa0 [ 303.751225][ T5856] ? __pfx_dev_set_name+0x10/0x10 [ 303.751273][ T5856] ? __pfx_device_add+0x10/0x10 [ 303.751310][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.751351][ T5856] ? mgmt_send_event_skb+0x2fb/0x460 [ 303.751413][ T5856] hci_conn_add_sysfs+0x17e/0x230 [ 303.751471][ T5856] le_conn_complete_evt+0x1260/0x2150 [ 303.751530][ T5856] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 303.751576][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.751617][ T5856] ? bt_warn+0xe4/0x120 [ 303.751658][ T5856] ? __pfx_bt_warn+0x10/0x10 [ 303.751712][ T5856] hci_le_conn_complete_evt+0x23c/0x370 [ 303.751770][ T5856] hci_le_meta_evt+0x357/0x5e0 [ 303.751822][ T5856] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 303.751876][ T5856] hci_event_packet+0x685/0x11c0 [ 303.751924][ T5856] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 303.751978][ T5856] ? __pfx_hci_event_packet+0x10/0x10 [ 303.752026][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752071][ T5856] ? kcov_remote_start+0x3c9/0x6d0 [ 303.752119][ T5856] ? lockdep_hardirqs_on+0x7c/0x110 [ 303.752173][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752225][ T5856] hci_rx_work+0x2c5/0x16b0 [ 303.752285][ T5856] ? rcu_is_watching+0x12/0xc0 [ 303.752343][ T5856] process_one_work+0x9cf/0x1b70 [ 303.752404][ T5856] ? __pfx_process_one_work+0x10/0x10 [ 303.752446][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752498][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752539][ T5856] ? assign_work+0x1a0/0x250 [ 303.752582][ T5856] worker_thread+0x6c8/0xf10 [ 303.752632][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752676][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752717][ T5856] ? __kthread_parkme+0x19e/0x250 [ 303.752771][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752816][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 303.752858][ T5856] kthread+0x3c5/0x780 [ 303.752896][ T5856] ? __pfx_kthread+0x10/0x10 [ 303.752935][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.752976][ T5856] ? rcu_is_watching+0x12/0xc0 [ 303.753024][ T5856] ? __pfx_kthread+0x10/0x10 [ 303.753064][ T5856] ret_from_fork+0x56d/0x730 [ 303.753100][ T5856] ? __pfx_kthread+0x10/0x10 [ 303.753138][ T5856] ret_from_fork_asm+0x1a/0x30 [ 303.753208][ T5856] [ 305.099559][ T5856] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 305.659057][ T5856] Bluetooth: hci4: failed to register connection device [ 305.738965][ T7472] loop2: detected capacity change from 0 to 256 [ 305.758181][ T7368] team0: Port device team_slave_0 added [ 305.866159][ T7368] team0: Port device team_slave_1 added [ 305.891879][ T7472] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.932694][ T7472] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 306.001343][ T7472] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 306.177533][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.209804][ T7480] loop6: detected capacity change from 0 to 128 [ 306.455389][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.492888][ T7480] syz.6.375: attempt to access beyond end of device [ 306.492888][ T7480] loop6: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 306.505019][ T7368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.539993][ T7480] Buffer I/O error on dev loop6, logical block 129, lost async page write [ 307.376357][ T7472] warning: `syz.2.374' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 307.415372][ T7480] syz.6.375: attempt to access beyond end of device [ 307.415372][ T7480] loop6: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 307.479905][ T7480] Buffer I/O error on dev loop6, logical block 130, lost async page write [ 307.583183][ T7480] syz.6.375: attempt to access beyond end of device [ 307.583183][ T7480] loop6: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 307.589703][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.597151][ T7480] Buffer I/O error on dev loop6, logical block 131, lost async page write [ 307.597272][ T7480] syz.6.375: attempt to access beyond end of device [ 307.597272][ T7480] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 307.597313][ T7480] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 307.597424][ T7480] syz.6.375: attempt to access beyond end of device [ 307.597424][ T7480] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 307.597464][ T7480] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 307.836997][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.961006][ T7368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.136103][ T12] bridge_slave_1: left allmulticast mode [ 312.171059][ T12] bridge_slave_1: left promiscuous mode [ 312.191398][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.319042][ T12] bridge_slave_0: left allmulticast mode [ 312.325197][ T5845] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 312.338561][ T12] bridge_slave_0: left promiscuous mode [ 312.353514][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.607340][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 315.172688][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 317.353579][ T43] usb 7-1: device descriptor read/all, error -71 [ 318.954809][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.927241][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 319.980447][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.023699][ T12] bond0 (unregistering): Released all slaves [ 320.674833][ T7368] hsr_slave_0: entered promiscuous mode [ 320.707914][ T7368] hsr_slave_1: entered promiscuous mode [ 320.728231][ T7368] debugfs: 'hsr0' already exists in 'hsr' [ 320.744647][ T7368] Cannot create hsr debugfs directory [ 320.762003][ T7568] loop2: detected capacity change from 0 to 512 [ 320.843615][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.878818][ T7568] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.923012][ T7543] bridge2: entered promiscuous mode [ 321.187865][ T7576] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 321.215794][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.229165][ T7578] loop7: detected capacity change from 0 to 128 [ 321.905072][ T7587] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 321.938213][ T7578] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 324.588420][ T7602] loop6: detected capacity change from 0 to 512 [ 324.630499][ T7602] journal_path: Lookup failure for './file0' [ 324.646266][ T7602] EXT4-fs: error: could not find journal device path [ 326.203444][ T7619] bridge2: entered promiscuous mode [ 326.727836][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 327.383076][ T12] hsr_slave_0: left promiscuous mode [ 328.373713][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.380485][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.109409][ T12] hsr_slave_1: left promiscuous mode [ 329.694249][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.711067][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.763775][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.819276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.062159][ T12] veth1_macvtap: left promiscuous mode [ 330.127338][ T12] veth0_macvtap: left promiscuous mode [ 330.133658][ T12] veth1_vlan: left promiscuous mode [ 330.138968][ T12] veth0_vlan: left promiscuous mode [ 330.196161][ T7650] netlink: 148 bytes leftover after parsing attributes in process `syz.0.418'. [ 330.205251][ T7650] netlink: 116 bytes leftover after parsing attributes in process `syz.0.418'. [ 330.214247][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'. [ 330.371970][ T5856] Bluetooth: Wrong link type (-71) [ 330.605456][ T7660] binder: 7657:7660 ioctl c018620c 0 returned -14 [ 332.972659][ T12] team0 (unregistering): Port device team_slave_1 removed [ 333.112484][ T12] team0 (unregistering): Port device team_slave_0 removed [ 335.231160][ T5856] Bluetooth: hci6: command 0x0406 tx timeout [ 335.366585][ T7368] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 335.411873][ T5915] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 335.484549][ T7368] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 335.588450][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 335.606648][ T7368] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 335.622615][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.637514][ T5915] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 335.647022][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.815264][ T5915] usb 2-1: config 0 descriptor?? [ 335.845750][ T7368] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 336.332440][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.600739][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.908398][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.919803][ T7718] Bluetooth: MGMT ver 1.23 [ 336.926810][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.023417][ T5915] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 337.066854][ T5915] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 337.093294][ T5915] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 337.131049][ T5915] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 337.150826][ T7368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.161297][ T5915] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 337.205852][ T5990] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 337.211562][ T5915] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 337.279947][ T7368] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.292540][ T5915] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 337.337285][ T5915] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 337.360594][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.362374][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 337.362395][ T30] audit: type=1326 audit(1759338099.666:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b8eec9 code=0x7ffc0000 [ 337.367776][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.375125][ T5915] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71 [ 337.447139][ T30] audit: type=1326 audit(1759338099.726:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87c7b8eec9 code=0x7ffc0000 [ 337.480349][ T5990] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 337.509959][ T5990] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 337.561174][ T5990] usb 7-1: config 0 interface 0 has no altsetting 0 [ 337.584214][ T5990] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 337.600588][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.607766][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.615210][ T30] audit: type=1326 audit(1759338099.756:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b8eec9 code=0x7ffc0000 [ 337.640476][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 337.671036][ T5915] usb 2-1: USB disconnect, device number 12 [ 337.683840][ T5990] usb 7-1: Product: syz [ 337.719116][ T5990] usb 7-1: Manufacturer: syz [ 337.751075][ T5990] usb 7-1: SerialNumber: syz [ 337.761344][ T30] audit: type=1326 audit(1759338099.756:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b8eec9 code=0x7ffc0000 [ 337.803880][ T5990] usb 7-1: config 0 descriptor?? [ 337.854713][ T30] audit: type=1326 audit(1759338099.806:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f87c7b8eec9 code=0x7ffc0000 [ 337.887439][ T5990] hub 7-1:0.0: bad descriptor, ignoring hub [ 337.934666][ T5990] hub 7-1:0.0: probe with driver hub failed with error -5 [ 337.967086][ T30] audit: type=1326 audit(1759338099.806:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87c7b8eec9 code=0x7ffc0000 [ 338.028214][ T5990] usb 7-1: selecting invalid altsetting 0 [ 338.113729][ T30] audit: type=1326 audit(1759338099.806:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f87c7b8eec9 code=0x7ffc0000 [ 338.443767][ T30] audit: type=1326 audit(1759338099.806:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87c7b2af79 code=0x7ffc0000 [ 338.453374][ T5990] usb 7-1: USB disconnect, device number 5 [ 338.466733][ T30] audit: type=1326 audit(1759338099.806:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87c7b2af79 code=0x7ffc0000 [ 338.494447][ T30] audit: type=1326 audit(1759338099.806:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87c7b2af79 code=0x7ffc0000 [ 338.540166][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 338.633138][ T7748] loop1: detected capacity change from 0 to 16 [ 341.311277][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 341.538135][ T7767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.545439][ T7767] IPv6: NLM_F_CREATE should be set when creating new route [ 341.943604][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.008706][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.054093][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.148212][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.163836][ T7368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.210613][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.057555][ T9] usb 3-1: config 0 descriptor?? [ 343.101435][ T9] usb 3-1: can't set config #0, error -71 [ 343.141061][ T9] usb 3-1: USB disconnect, device number 14 [ 343.209240][ T7765] loop1: detected capacity change from 0 to 8192 [ 343.361669][ T7782] syz.0.456 uses obsolete (PF_INET,SOCK_PACKET) [ 344.225791][ T7796] loop2: detected capacity change from 0 to 8 [ 344.369258][ T7796] SQUASHFS error: zlib decompression failed, data probably corrupt [ 344.443024][ T7796] SQUASHFS error: Failed to read block 0x9b: -5 [ 344.491293][ T7796] SQUASHFS error: Unable to read metadata cache entry [99] [ 344.498504][ T7796] SQUASHFS error: Unable to read inode 0x127 [ 344.593160][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 344.650151][ T7804] loop1: detected capacity change from 0 to 512 [ 344.758591][ T7804] EXT4-fs: Ignoring removed oldalloc option [ 344.818979][ T7368] veth0_vlan: entered promiscuous mode [ 344.833693][ T7804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.867689][ T7368] veth1_vlan: entered promiscuous mode [ 344.981919][ T7804] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 345.001202][ T7806] loop7: detected capacity change from 0 to 736 [ 345.015520][ T7806] iso9660: Bad value for 'mode' [ 345.081097][ T7804] EXT4-fs (loop1): 1 truncate cleaned up [ 345.091903][ T7804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.131763][ T7806] loop7: detected capacity change from 0 to 512 [ 345.153939][ T7368] veth0_macvtap: entered promiscuous mode [ 345.458617][ T7368] veth1_macvtap: entered promiscuous mode [ 345.562592][ T7804] loop1: detected capacity change from 512 to 64 [ 345.674465][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.779486][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.895725][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.981109][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.139985][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.171916][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.661976][ T7853] loop6: detected capacity change from 0 to 2048 [ 350.851808][ T5837] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 350.975004][ T5837] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 351.167713][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.191190][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.206847][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.235426][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.250327][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.423582][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 351.423606][ T30] audit: type=1326 audit(1759338113.736:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 351.533298][ T30] audit: type=1326 audit(1759338113.736:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 351.768224][ T30] audit: type=1326 audit(1759338113.786:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 351.785765][ T6717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.790479][ T30] audit: type=1326 audit(1759338113.786:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 351.844437][ T30] audit: type=1326 audit(1759338113.786:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 351.870521][ T30] audit: type=1326 audit(1759338113.786:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 352.072116][ T30] audit: type=1326 audit(1759338113.786:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 352.111836][ T30] audit: type=1326 audit(1759338113.786:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 352.214833][ T30] audit: type=1326 audit(1759338113.786:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 352.371072][ T30] audit: type=1326 audit(1759338113.786:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.7.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf918eec9 code=0x7ffc0000 [ 352.694476][ T5856] Bluetooth: hci2: unexpected subevent 0x01 length: 37 > 18 [ 352.705996][ T5856] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 352.718587][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) [ 352.718651][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.718682][ T5856] Workqueue: hci2 hci_rx_work [ 352.718750][ T5856] Call Trace: [ 352.718765][ T5856] [ 352.718781][ T5856] dump_stack_lvl+0x16c/0x1f0 [ 352.718862][ T5856] sysfs_warn_dup+0x7f/0xa0 [ 352.718905][ T5856] sysfs_create_dir_ns+0x24b/0x2b0 [ 352.718950][ T5856] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 352.718990][ T5856] ? find_held_lock+0x2b/0x80 [ 352.719063][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.719119][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 352.719181][ T5856] kobject_add_internal+0x2c4/0x9b0 [ 352.719241][ T5856] kobject_add+0x16e/0x240 [ 352.719290][ T5856] ? __pfx_kobject_add+0x10/0x10 [ 352.719347][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.719406][ T5856] ? kobject_put+0xab/0x5a0 [ 352.719454][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.719520][ T5856] device_add+0x288/0x1aa0 [ 352.719568][ T5856] ? __pfx_dev_set_name+0x10/0x10 [ 352.719624][ T5856] ? __pfx_device_add+0x10/0x10 [ 352.719672][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.719726][ T5856] ? mgmt_send_event_skb+0x2fb/0x460 [ 352.719805][ T5856] hci_conn_add_sysfs+0x17e/0x230 [ 352.719882][ T5856] le_conn_complete_evt+0x1260/0x2150 [ 352.719959][ T5856] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 352.720018][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.720072][ T5856] ? bt_warn+0xe4/0x120 [ 352.720125][ T5856] ? __pfx_bt_warn+0x10/0x10 [ 352.720194][ T5856] hci_le_conn_complete_evt+0x23c/0x370 [ 352.720268][ T5856] hci_le_meta_evt+0x357/0x5e0 [ 352.720338][ T5856] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 352.720412][ T5856] hci_event_packet+0x685/0x11c0 [ 352.720474][ T5856] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 352.720544][ T5856] ? __pfx_hci_event_packet+0x10/0x10 [ 352.720615][ T5856] ? kcov_remote_start+0x3d9/0x6d0 [ 352.720690][ T5856] hci_rx_work+0x2c5/0x16b0 [ 352.720770][ T5856] process_one_work+0x9cf/0x1b70 [ 352.720847][ T5856] ? __pfx_process_one_work+0x10/0x10 [ 352.720902][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.720972][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.721026][ T5856] ? assign_work+0x1a0/0x250 [ 352.721080][ T5856] worker_thread+0x6c8/0xf10 [ 352.721145][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.721201][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.721255][ T5856] ? __kthread_parkme+0x19e/0x250 [ 352.721326][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.721389][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 352.721444][ T5856] kthread+0x3c5/0x780 [ 352.721495][ T5856] ? __pfx_kthread+0x10/0x10 [ 352.721546][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 352.721600][ T5856] ? rcu_is_watching+0x12/0xc0 [ 352.721667][ T5856] ? __pfx_kthread+0x10/0x10 [ 352.721718][ T5856] ret_from_fork+0x56d/0x730 [ 352.721763][ T5856] ? __pfx_kthread+0x10/0x10 [ 352.721813][ T5856] ret_from_fork_asm+0x1a/0x30 [ 352.721900][ T5856] [ 353.140085][ T5856] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 353.154682][ T5856] Bluetooth: hci2: failed to register connection device [ 353.321374][ T5840] Bluetooth: hci0: command tx timeout [ 353.637540][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.260379][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.824859][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.884190][ T5840] Bluetooth: hci0: command tx timeout [ 356.438240][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.447336][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.455985][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.464431][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.472410][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.741424][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.969751][ T7904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.331468][ T7903] process 'syz.2.486' launched './file1' with NULL argv: empty string added [ 357.934759][ T7863] chnl_net:caif_netlink_parms(): no params data found [ 357.951491][ T5856] Bluetooth: hci0: command tx timeout [ 358.050498][ T7922] cgroup: Unknown subsys name 'cpuset' [ 358.089904][ T7922] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 358.277601][ T7924] loop2: detected capacity change from 0 to 2048 [ 358.421462][ T7922] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 358.459311][ T49] bridge_slave_1: left allmulticast mode [ 358.472555][ T49] bridge_slave_1: left promiscuous mode [ 358.478609][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.511470][ T5856] Bluetooth: hci3: command tx timeout [ 358.587120][ T7924] loop2: p2 p3 p7 [ 358.609597][ T49] bridge_slave_0: left allmulticast mode [ 358.910431][ T49] bridge_slave_0: left promiscuous mode [ 358.931760][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.033281][ T5856] Bluetooth: hci6: unexpected subevent 0x01 length: 37 > 18 [ 359.045389][ T5856] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 359.057887][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: kworker/u9:10 Not tainted syzkaller #0 PREEMPT(full) [ 359.057950][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.057982][ T5856] Workqueue: hci6 hci_rx_work [ 359.058050][ T5856] Call Trace: [ 359.058063][ T5856] [ 359.058080][ T5856] dump_stack_lvl+0x16c/0x1f0 [ 359.058160][ T5856] sysfs_warn_dup+0x7f/0xa0 [ 359.058203][ T5856] sysfs_create_dir_ns+0x24b/0x2b0 [ 359.058250][ T5856] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 359.058293][ T5856] ? find_held_lock+0x2b/0x80 [ 359.058371][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.058428][ T5856] ? do_raw_spin_unlock+0x172/0x230 [ 359.058491][ T5856] kobject_add_internal+0x2c4/0x9b0 [ 359.058551][ T5856] kobject_add+0x16e/0x240 [ 359.058599][ T5856] ? __pfx_kobject_add+0x10/0x10 [ 359.058655][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.058709][ T5856] ? kobject_put+0xab/0x5a0 [ 359.058757][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.058824][ T5856] device_add+0x288/0x1aa0 [ 359.058874][ T5856] ? __pfx_dev_set_name+0x10/0x10 [ 359.058931][ T5856] ? __pfx_device_add+0x10/0x10 [ 359.058979][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.059032][ T5856] ? mgmt_send_event_skb+0x2fb/0x460 [ 359.059112][ T5856] hci_conn_add_sysfs+0x17e/0x230 [ 359.059187][ T5856] le_conn_complete_evt+0x1260/0x2150 [ 359.059264][ T5856] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 359.059323][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.059380][ T5856] ? bt_warn+0xe4/0x120 [ 359.059437][ T5856] ? __pfx_bt_warn+0x10/0x10 [ 359.059505][ T5856] hci_le_conn_complete_evt+0x23c/0x370 [ 359.059579][ T5856] hci_le_meta_evt+0x357/0x5e0 [ 359.059649][ T5856] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 359.059721][ T5856] hci_event_packet+0x685/0x11c0 [ 359.059783][ T5856] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 359.059853][ T5856] ? __pfx_hci_event_packet+0x10/0x10 [ 359.059925][ T5856] ? kcov_remote_start+0x3d9/0x6d0 [ 359.060000][ T5856] hci_rx_work+0x2c5/0x16b0 [ 359.060081][ T5856] process_one_work+0x9cf/0x1b70 [ 359.060157][ T5856] ? __pfx_process_one_work+0x10/0x10 [ 359.060212][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.060279][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.060333][ T5856] ? assign_work+0x1a0/0x250 [ 359.060392][ T5856] worker_thread+0x6c8/0xf10 [ 359.060456][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.060513][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.060566][ T5856] ? __kthread_parkme+0x19e/0x250 [ 359.060638][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.060697][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 359.060751][ T5856] kthread+0x3c5/0x780 [ 359.060801][ T5856] ? __pfx_kthread+0x10/0x10 [ 359.060853][ T5856] ? srso_alias_return_thunk+0x5/0xfbef5 [ 359.060907][ T5856] ? rcu_is_watching+0x12/0xc0 [ 359.060975][ T5856] ? __pfx_kthread+0x10/0x10 [ 359.061028][ T5856] ret_from_fork+0x56d/0x730 [ 359.061074][ T5856] ? __pfx_kthread+0x10/0x10 [ 359.061124][ T5856] ret_from_fork_asm+0x1a/0x30 [ 359.061212][ T5856] [ 359.624928][ T5856] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 359.639508][ T5856] Bluetooth: hci6: failed to register connection device [ 359.811316][ T7940] loop6: detected capacity change from 0 to 128 [ 359.877104][ T7940] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 359.911476][ T7941] loop7: detected capacity change from 0 to 8 [ 359.999941][ T7941] unable to read fragment index table [ 360.032758][ T5856] Bluetooth: hci0: command tx timeout [ 360.386007][ T7945] netlink: 148 bytes leftover after parsing attributes in process `syz.6.493'. [ 360.395156][ T7945] netlink: 116 bytes leftover after parsing attributes in process `syz.6.493'. [ 360.404189][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.6.493'. [ 360.591647][ T5856] Bluetooth: hci3: command tx timeout [ 362.815292][ T5856] Bluetooth: hci3: command tx timeout [ 363.965424][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.012174][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.053185][ T49] bond0 (unregistering): Released all slaves [ 365.313055][ T5856] Bluetooth: hci3: command tx timeout [ 366.756011][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.791438][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.820263][ T7863] bridge_slave_0: entered allmulticast mode [ 366.833564][ T7863] bridge_slave_0: entered promiscuous mode [ 367.345330][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.361084][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.368262][ T7863] bridge_slave_1: entered allmulticast mode [ 367.376581][ T7863] bridge_slave_1: entered promiscuous mode [ 367.894193][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.046092][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.927415][ T7863] team0: Port device team_slave_0 added [ 368.985716][ T7898] chnl_net:caif_netlink_parms(): no params data found [ 369.482852][ T49] hsr_slave_0: left promiscuous mode [ 369.689791][ T49] hsr_slave_1: left promiscuous mode [ 369.864649][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.013265][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.728842][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.819608][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.102500][ T49] veth1_macvtap: left promiscuous mode [ 371.108067][ T49] veth0_macvtap: left promiscuous mode [ 371.114062][ T49] veth1_vlan: left promiscuous mode [ 371.119418][ T49] veth0_vlan: left promiscuous mode [ 371.906786][ T8006] loop7: detected capacity change from 0 to 16 [ 371.914152][ T8006] erofs: Unknown parameter '/dev/rtc0' [ 372.966366][ T8011] loop7: detected capacity change from 0 to 2048 [ 373.044421][ T8011] EXT4-fs (loop7): Test dummy encryption mode enabled [ 373.117897][ T8011] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.261102][ T8011] EXT4-fs: Cannot specify journal on remount [ 373.502076][ T6563] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.778878][ T8023] loop7: detected capacity change from 0 to 128 [ 373.804010][ T8025] netlink: 108 bytes leftover after parsing attributes in process `syz.6.510'. [ 373.846941][ T8023] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 373.848253][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.6.510'. [ 374.706335][ T8029] netlink: 148 bytes leftover after parsing attributes in process `syz.7.508'. [ 374.715563][ T8029] netlink: 116 bytes leftover after parsing attributes in process `syz.7.508'. [ 374.724649][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.7.508'. [ 374.965177][ T8031] binder_alloc: binder_alloc_mmap_handler: 8026 200000ffc000-200000ffd000 already mapped failed -16 [ 376.611548][ T49] team0 (unregistering): Port device team_slave_1 removed [ 376.682896][ T49] team0 (unregistering): Port device team_slave_0 removed [ 377.707940][ T7863] team0: Port device team_slave_1 added [ 378.094826][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.105324][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.160966][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.363102][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.380346][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.410191][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.876515][ T7863] hsr_slave_0: entered promiscuous mode [ 378.888016][ T7863] hsr_slave_1: entered promiscuous mode [ 378.918583][ T7863] debugfs: 'hsr0' already exists in 'hsr' [ 378.933674][ T7863] Cannot create hsr debugfs directory [ 379.219621][ T7898] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.239393][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.255168][ T7898] bridge_slave_0: entered allmulticast mode [ 379.264513][ T7898] bridge_slave_0: entered promiscuous mode [ 379.379269][ T7898] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.402552][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.430785][ T7898] bridge_slave_1: entered allmulticast mode [ 379.465406][ T7898] bridge_slave_1: entered promiscuous mode [ 379.979939][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.086104][ T7898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.147964][ T7898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.252503][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.334165][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 380.531017][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 380.538469][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.539210][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.559910][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 380.592369][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.630440][ T9] usb 8-1: config 0 descriptor?? [ 380.632555][ T7898] team0: Port device team_slave_0 added [ 380.698921][ T7898] team0: Port device team_slave_1 added [ 380.825386][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.066121][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.078971][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.119948][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.121909][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.141865][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.174926][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.207113][ T7898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.239359][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 381.243674][ T7898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.265802][ T7898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.280977][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 381.313182][ T7898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.336802][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 381.381153][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 381.391548][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 381.644584][ T9] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0 [ 381.661199][ T9] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 381.670184][ T9] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 381.692710][ T9] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71 [ 381.697594][ T8088] loop2: detected capacity change from 0 to 1024 [ 382.441564][ T9] usb 8-1: USB disconnect, device number 5 [ 382.561933][ T8088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 382.657341][ T8088] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.674027][ T8090] fido_id[8090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 382.852370][ T8088] EXT4-fs error (device loop2): ext4_free_blocks:6695: comm syz.2.524: Freeing blocks not in datazone - block = 0, count = 16 [ 382.942194][ T8088] EXT4-fs (loop2): Remounting filesystem read-only [ 383.146940][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 383.256667][ T7898] hsr_slave_0: entered promiscuous mode [ 383.302689][ T7898] hsr_slave_1: entered promiscuous mode [ 384.057482][ T7898] debugfs: 'hsr0' already exists in 'hsr' [ 384.063516][ T7898] Cannot create hsr debugfs directory [ 384.215214][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.532'. [ 384.470610][ T49] bridge_slave_1: left allmulticast mode [ 384.500573][ T49] bridge_slave_1: left promiscuous mode [ 384.521160][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.631026][ T49] bridge_slave_0: left allmulticast mode [ 384.657838][ T49] bridge_slave_0: left promiscuous mode [ 384.681230][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.819759][ T8139] netlink: 9 bytes leftover after parsing attributes in process `syz.6.535'. [ 384.871969][ T8142] netlink: 5 bytes leftover after parsing attributes in process `syz.6.535'. [ 384.940273][ T8145] loop6: detected capacity change from 0 to 256 [ 384.969369][ T8145] exfat: Unknown parameter '€' [ 385.151784][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 385.318780][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 385.340849][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.386102][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.399245][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 385.409825][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.427245][ T9] usb 8-1: config 0 descriptor?? [ 386.796669][ T9] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 387.934062][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.950635][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.968530][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.982461][ T842] usb 8-1: USB disconnect, device number 6 [ 388.025744][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.057060][ T49] bond0 (unregistering): Released all slaves [ 388.101269][ T8139] gretap0: entered promiscuous mode [ 388.131688][ T8142] 0ªî{X¹¦: renamed from gretap0 [ 388.141116][ T8142] 0ªî{X¹¦: left promiscuous mode [ 388.146160][ T8142] 0ªî{X¹¦: entered allmulticast mode [ 388.167651][ T8142] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 388.951237][ T49] hsr_slave_0: left promiscuous mode [ 388.965372][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.547'. [ 388.988393][ T49] hsr_slave_1: left promiscuous mode [ 389.031394][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.046346][ T8178] binder: 8173:8178 ioctl c0306201 200000000000 returned -14 [ 389.057952][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.060766][ T8178] binder: 8173:8178 ioctl c0306201 0 returned -14 [ 389.082138][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.099145][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.193114][ T49] veth1_macvtap: left promiscuous mode [ 389.213461][ T49] veth0_macvtap: left promiscuous mode [ 389.239532][ T49] veth1_vlan: left promiscuous mode [ 389.258575][ T49] veth0_vlan: left promiscuous mode [ 390.890077][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.897843][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.659429][ T49] team0 (unregistering): Port device team_slave_1 removed [ 392.697979][ T49] team0 (unregistering): Port device team_slave_0 removed [ 393.235906][ T8205] netlink: 148 bytes leftover after parsing attributes in process `syz.0.551'. [ 393.245213][ T8205] netlink: 116 bytes leftover after parsing attributes in process `syz.0.551'. [ 393.256357][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 393.381072][ T842] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 393.541236][ T842] usb 3-1: Using ep0 maxpacket: 32 [ 393.563324][ T842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.582514][ T842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.592794][ T842] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 393.603410][ T842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.653213][ T842] usb 3-1: config 0 descriptor?? [ 394.361920][ T842] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 394.651702][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.734104][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.825523][ T842] usb 3-1: USB disconnect, device number 15 [ 395.864835][ T8223] fido_id[8223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 396.653632][ T7898] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 396.746262][ T8234] binder: 8232:8234 ioctl c0306201 200000000000 returned -14 [ 396.812491][ T8235] binder: 8232:8235 ioctl c0306201 0 returned -14 [ 396.892866][ T7898] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 396.967412][ T7898] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 397.035219][ T7898] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 397.208988][ T7863] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 397.282952][ T7863] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 397.354152][ T7863] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 398.924018][ T7863] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 398.952070][ T8260] loop2: detected capacity change from 0 to 1024 [ 399.022656][ T8260] EXT4-fs: Ignoring removed bh option [ 399.028164][ T8260] EXT4-fs: Ignoring removed bh option [ 399.243111][ T8260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.915572][ T7898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.687116][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.698155][ T7898] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.784214][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.791423][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.853244][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.860379][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.215379][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.512604][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.706107][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.713299][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.818412][ T8289] loop2: detected capacity change from 0 to 512 [ 403.828991][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.836270][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.009043][ T8289] EXT4-fs: Ignoring removed oldalloc option [ 404.040983][ T8289] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 404.151365][ T8289] EXT4-fs (loop2): 1 truncate cleaned up [ 404.159345][ T8289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.227660][ T7863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.494102][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.640769][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 404.982157][ T7898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.834050][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.113923][ T8347] fuse: Unknown parameter 'use' [ 410.479313][ T7898] veth0_vlan: entered promiscuous mode [ 410.544324][ T8353] loop2: detected capacity change from 0 to 128 [ 410.588381][ T7898] veth1_vlan: entered promiscuous mode [ 410.622226][ T8353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 410.699561][ T8353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.814264][ T7898] veth0_macvtap: entered promiscuous mode [ 410.855710][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 410.855733][ T30] audit: type=1800 audit(1759338429.170:112): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.584" name="file1" dev="loop2" ino=104 res=0 errno=0 [ 410.877544][ T7898] veth1_macvtap: entered promiscuous mode [ 410.905852][ T8353] ------------[ cut here ]------------ [ 410.911676][ T8353] WARNING: CPU: 0 PID: 8353 at fs/udf/truncate.c:224 udf_truncate_extents+0x985/0xa80 [ 410.922160][ T8353] Modules linked in: [ 410.926207][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT(full) [ 410.936297][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.946711][ T8353] RIP: 0010:udf_truncate_extents+0x985/0xa80 [ 410.952833][ T8353] Code: fe e9 4c f8 ff ff 48 8b 7c 24 18 e8 f5 63 de fe e9 09 f9 ff ff 48 8b 7c 24 18 e8 e6 63 de fe e9 a9 f7 ff ff e8 0c de 77 fe 90 <0f> 0b 90 e9 a5 f9 ff ff e8 fe dd 77 fe 90 0f 0b 48 8b 7c 24 10 48 [ 410.972598][ T8353] RSP: 0018:ffffc90002f077f0 EFLAGS: 00010283 [ 410.978701][ T8353] RAX: 00000000000012f2 RBX: ffff8880547aa0e8 RCX: ffffc9000c6dc000 [ 410.987107][ T8353] RDX: 0000000000080000 RSI: ffffffff83433ab4 RDI: 0000000000000007 [ 410.995518][ T8353] RBP: ffffc90002f078e8 R08: 0000000000000007 R09: 0000000000000000 [ 411.003705][ T8353] R10: 000000000000000a R11: 0000000000000000 R12: ffff88802a980000 [ 411.011855][ T8353] R13: 0000000000000000 R14: 000000000000000a R15: ffffc90002f078a8 [ 411.020659][ T8353] FS: 00007f87c896e6c0(0000) GS:ffff888124e72000(0000) knlGS:0000000000000000 [ 411.030332][ T8353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.037349][ T8353] CR2: 0000200000001200 CR3: 000000005892f000 CR4: 0000000000350ef0 [ 411.045544][ T8353] Call Trace: [ 411.048831][ T8353] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 411.051832][ T8353] ? __pfx_udf_truncate_extents+0x10/0x10 [ 411.057622][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.063425][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.069108][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.075105][ T8353] ? do_raw_spin_lock+0x12c/0x2b0 [ 411.080182][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.086063][ T8353] udf_write_failed.isra.0+0x170/0x1c0 [ 411.091636][ T8353] udf_write_begin+0x21f/0x2a0 [ 411.096534][ T8353] generic_perform_write+0x3c4/0x900 [ 411.101915][ T8353] ? __pfx_generic_perform_write+0x10/0x10 [ 411.108191][ T8353] ? filemap_invalidate_pages+0x88/0xd0 [ 411.114085][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.120570][ T8353] ? generic_file_direct_write+0x128/0x410 [ 411.127174][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.132924][ T8353] ? mnt_put_write_access_file+0x45/0xf0 [ 411.138608][ T8353] __generic_file_write_iter+0x1ce/0x240 [ 411.144350][ T8353] udf_file_write_iter+0x233/0x7b0 [ 411.149507][ T8353] do_iter_readv_writev+0x662/0x9e0 [ 411.155063][ T8353] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 411.161018][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.166792][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.172516][ T8353] vfs_writev+0x35f/0xde0 [ 411.177465][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.183179][ T8353] ? __pfx_vfs_writev+0x10/0x10 [ 411.189534][ T8353] ? __mutex_lock+0x1c5/0x1060 [ 411.194387][ T8353] ? kmem_cache_free+0x2d1/0x4d0 [ 411.199374][ T8353] ? __pfx___mutex_lock+0x10/0x10 [ 411.204468][ T8353] ? __fget_files+0x20e/0x3c0 [ 411.209208][ T8353] ? do_writev+0x132/0x340 [ 411.213693][ T8353] do_writev+0x132/0x340 [ 411.217960][ T8353] ? __pfx_do_writev+0x10/0x10 [ 411.223607][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.229287][ T8353] do_syscall_64+0xcd/0x4e0 [ 411.234825][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.240743][ T8353] RIP: 0033:0x7f87c7b8eec9 [ 411.245359][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.265142][ T8353] RSP: 002b:00007f87c896e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 411.273622][ T8353] RAX: ffffffffffffffda RBX: 00007f87c7de5fa0 RCX: 00007f87c7b8eec9 [ 411.281668][ T8353] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 411.289660][ T8353] RBP: 00007f87c7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.297766][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.305797][ T8353] R13: 00007f87c7de6038 R14: 00007f87c7de5fa0 R15: 00007fff4eccde98 [ 411.313858][ T8353] [ 411.316885][ T8353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 411.324168][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT(full) [ 411.333383][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.343447][ T8353] Call Trace: [ 411.346723][ T8353] [ 411.349656][ T8353] dump_stack_lvl+0x3d/0x1f0 [ 411.354295][ T8353] vpanic+0x6e8/0x7a0 [ 411.358289][ T8353] ? __pfx_vpanic+0x10/0x10 [ 411.362799][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.368456][ T8353] ? udf_truncate_extents+0x985/0xa80 [ 411.373838][ T8353] panic+0xca/0xd0 [ 411.377566][ T8353] ? __pfx_panic+0x10/0x10 [ 411.382010][ T8353] check_panic_on_warn+0xab/0xb0 [ 411.386960][ T8353] __warn+0xf6/0x3c0 [ 411.390860][ T8353] ? udf_truncate_extents+0x985/0xa80 [ 411.396254][ T8353] report_bug+0x3c3/0x580 [ 411.400616][ T8353] ? udf_truncate_extents+0x985/0xa80 [ 411.406000][ T8353] handle_bug+0x184/0x210 [ 411.410341][ T8353] exc_invalid_op+0x17/0x50 [ 411.414856][ T8353] asm_exc_invalid_op+0x1a/0x20 [ 411.419716][ T8353] RIP: 0010:udf_truncate_extents+0x985/0xa80 [ 411.425713][ T8353] Code: fe e9 4c f8 ff ff 48 8b 7c 24 18 e8 f5 63 de fe e9 09 f9 ff ff 48 8b 7c 24 18 e8 e6 63 de fe e9 a9 f7 ff ff e8 0c de 77 fe 90 <0f> 0b 90 e9 a5 f9 ff ff e8 fe dd 77 fe 90 0f 0b 48 8b 7c 24 10 48 [ 411.445335][ T8353] RSP: 0018:ffffc90002f077f0 EFLAGS: 00010283 [ 411.451421][ T8353] RAX: 00000000000012f2 RBX: ffff8880547aa0e8 RCX: ffffc9000c6dc000 [ 411.459393][ T8353] RDX: 0000000000080000 RSI: ffffffff83433ab4 RDI: 0000000000000007 [ 411.467362][ T8353] RBP: ffffc90002f078e8 R08: 0000000000000007 R09: 0000000000000000 [ 411.475331][ T8353] R10: 000000000000000a R11: 0000000000000000 R12: ffff88802a980000 [ 411.483301][ T8353] R13: 0000000000000000 R14: 000000000000000a R15: ffffc90002f078a8 [ 411.491287][ T8353] ? udf_truncate_extents+0x984/0xa80 [ 411.496693][ T8353] ? __pfx_udf_truncate_extents+0x10/0x10 [ 411.502429][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.508086][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.513736][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.519389][ T8353] ? do_raw_spin_lock+0x12c/0x2b0 [ 411.524435][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.530095][ T8353] udf_write_failed.isra.0+0x170/0x1c0 [ 411.535591][ T8353] udf_write_begin+0x21f/0x2a0 [ 411.540379][ T8353] generic_perform_write+0x3c4/0x900 [ 411.545700][ T8353] ? __pfx_generic_perform_write+0x10/0x10 [ 411.551531][ T8353] ? filemap_invalidate_pages+0x88/0xd0 [ 411.557108][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.562754][ T8353] ? generic_file_direct_write+0x128/0x410 [ 411.568594][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.574242][ T8353] ? mnt_put_write_access_file+0x45/0xf0 [ 411.579908][ T8353] __generic_file_write_iter+0x1ce/0x240 [ 411.585575][ T8353] udf_file_write_iter+0x233/0x7b0 [ 411.590709][ T8353] do_iter_readv_writev+0x662/0x9e0 [ 411.595931][ T8353] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 411.601668][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.607325][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.612980][ T8353] vfs_writev+0x35f/0xde0 [ 411.617331][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.622983][ T8353] ? __pfx_vfs_writev+0x10/0x10 [ 411.627846][ T8353] ? __mutex_lock+0x1c5/0x1060 [ 411.632616][ T8353] ? kmem_cache_free+0x2d1/0x4d0 [ 411.637584][ T8353] ? __pfx___mutex_lock+0x10/0x10 [ 411.642629][ T8353] ? __fget_files+0x20e/0x3c0 [ 411.647343][ T8353] ? do_writev+0x132/0x340 [ 411.651774][ T8353] do_writev+0x132/0x340 [ 411.656035][ T8353] ? __pfx_do_writev+0x10/0x10 [ 411.660818][ T8353] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.666477][ T8353] do_syscall_64+0xcd/0x4e0 [ 411.670991][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.676891][ T8353] RIP: 0033:0x7f87c7b8eec9 [ 411.681307][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.700921][ T8353] RSP: 002b:00007f87c896e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 411.709342][ T8353] RAX: ffffffffffffffda RBX: 00007f87c7de5fa0 RCX: 00007f87c7b8eec9 [ 411.717313][ T8353] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 411.725284][ T8353] RBP: 00007f87c7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.733252][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.741223][ T8353] R13: 00007f87c7de6038 R14: 00007f87c7de5fa0 R15: 00007fff4eccde98 [ 411.749217][ T8353] [ 411.752531][ T8353] Kernel Offset: disabled [ 411.756846][ T8353] Rebooting in 86400 seconds..