last executing test programs: 1m12.351499029s ago: executing program 2 (id=82): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB='nodecompose,decompose,nls=cp864,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x20, 0x6de, &(0x7f0000000f40)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x0) 1m10.932678798s ago: executing program 2 (id=88): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m9.260898203s ago: executing program 2 (id=92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) 1m8.354361773s ago: executing program 2 (id=96): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x2b, 0x800, 0x10000000, 0x4, 0x2, 0x7fff, 0x4, 0x0, 0x0, 0x10, 0xfff}}, 0x50) 46.824469447s ago: executing program 32 (id=110): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x2b, 0x800, 0x10000000, 0x4, 0x2, 0x7fff, 0x4, 0x0, 0x0, 0x10, 0xfff}}, 0x50) 8.920296648s ago: executing program 1 (id=280): r0 = io_uring_setup(0x79bf, &(0x7f0000000180)={0x0, 0x58c}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000200)=0xf0) close_range(r0, 0xffffffffffffffff, 0x0) 8.14206619s ago: executing program 5 (id=282): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x1, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) tkill(r0, 0x7) 7.790496762s ago: executing program 1 (id=284): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0a, &(0x7f0000001040)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) 7.275497262s ago: executing program 5 (id=287): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0x842, 0x808, {0x8, 0x1, 0x1, 0x67, 0xf4b, 0x1, 0x6, 0x5, 0x4132, 0x40, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 6.824398674s ago: executing program 4 (id=289): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6.511626904s ago: executing program 0 (id=291): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 6.49998143s ago: executing program 5 (id=292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x40, 0xca, 0x0, 0x1000, {[@mss={0x2, 0x4, 0x6}]}}}}}}}, 0x0) 6.27990541s ago: executing program 1 (id=293): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x53}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 5.912956043s ago: executing program 4 (id=295): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) 5.744057369s ago: executing program 5 (id=296): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) setuid(0xee00) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x0, 0xffff, 0x1, 0xf9, 0x4000000, 0x0, 0x0, 0x1}}, 0x50) 5.728502669s ago: executing program 0 (id=297): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x64, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) 5.09477149s ago: executing program 4 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="08002dbd7000ffdbdf25090000003c000480240007800800020005000000080001000a000000080001001900000008000200090000001300010062726f6164636173742d6c696e6b0000540007800c000300fdffffffffffffff0c0003000900000000000000080001000b00000008000200cb0000000c00030001000000000000000c0003000d00000000000000080002000500000008000200020000004c0001802c0004001400010002004e206401010000000000000000001400020002004e23ac1e010100000000000000001400028008000400fdffffff08000300030000000800030006000000a00005803c00028008000400ff7f0000080003000200000008000200080000000800010016000000080004000100000008000200d5030000080001000d00000008000100756470000700010069620000340002800800040004000000080004000c0000000800020005000000080001000a0000000800040006000000080001001a00000014000280080001002000e80008000400d608000007000100696200000c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1d0, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x108, 0x1, [@m_csum={0xd4, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x6d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xb4, 0x1, [@m_gact={0xb0, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x81, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a2743418947b1a45472c40db288e9fd9c34c8ceed8fb34c3bb42b89f5d42e9ec5f7e781cf88ee98688cd4e3817aab179991acb608cb1c9d6602df0c66e9c85c04ed665"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 4.931794518s ago: executing program 1 (id=299): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 4.78739249s ago: executing program 0 (id=301): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120000022abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="822e00000200000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40054) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40001140, 0x0) 4.3235415s ago: executing program 3 (id=302): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000140)={0x20, 0xe, 0x2, "897f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.179815393s ago: executing program 5 (id=303): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) 3.067940341s ago: executing program 3 (id=304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2}, 0x8) 2.763932829s ago: executing program 1 (id=305): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0x1003, 0x7}) 2.537239096s ago: executing program 5 (id=306): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) 2.187712716s ago: executing program 0 (id=307): openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/slabinfo\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0xf2, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x891}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x5, 0x7}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 2.04947439s ago: executing program 3 (id=308): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002"]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.884740305s ago: executing program 4 (id=309): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @mcast1, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udplite6\x00') read$FUSE(r2, &(0x7f00000028c0)={0x2020}, 0x2020) 1.523619967s ago: executing program 3 (id=310): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 1.338181677s ago: executing program 4 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 1.061459632s ago: executing program 0 (id=312): getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x11]}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 969.650468ms ago: executing program 1 (id=313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x101}, 0x8) 919.607907ms ago: executing program 3 (id=314): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 661.499747ms ago: executing program 4 (id=315): r0 = syz_io_uring_setup(0x10d6, &(0x7f0000000000)={0x0, 0x6730, 0x80, 0x2, 0xe}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x7, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x51, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 298.364765ms ago: executing program 0 (id=316): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 0s ago: executing program 3 (id=317): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6eb, &(0x7f0000000dc0)="$eJzs3UtoHPcdB/DvrFYvFxw58SMtgYgY0lJTW7JwWvdSt5TiQyghPfQsHDkWXttBUopsSqP0ce8hh9JTetAt9FDSu6E9N6SUXHUMFHLJyTeVnZ1d7UqrXcmSJTX5fMTs/Gf+z/nNzszuDmICfG3dvJT64xS5een11ebyxvpcY2R9brzKbiQZS1JL6s1ZM30/Ze6Naso3kxRV+aLT8L97+/lg8fqbn3258XlrqV5NZfmip95wYztXrVVTppOMVPOdRndp8ePt3fe0d2vX9vZqawubAbvYDlz+fKBW4cA2d1jr5H30n/J1UPX9HLfACVW0rps7TCWnkkwkrat+dXaoHe3oDt/acQ8AAAAA9mty/1Wee5InWc3pZzEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Kqqnv9fVFOtnZ5O0X7+/1i1LlX6BBr+IMRPx1vzx89+MAAAAAAAAADwzL38JE+ymtPt5c2ivOf/Stc9/m/k3SxnIUu5nNXMZyUrWcpskqmuhsZW51dWlmbLmsnZATWv5pM+Na/uPsYbh7zNAAAAAAAAAHDCTQzJvztazv7U/X/7v83Nrfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEhTJSGtWTmfb6anU6kkm2uXWkk+SjB3vaPel6Lfy8dGPAwAAAA5konexmNhDnefey5Os5nR7ebMov/OfL78vT+Td3M9KFrOSRhbyVvUduvmtv7axPtfYWJ+715x2tvvjL/Y19LLFtH576N9zkrV6kttZLNdczq0U2SzVqlZe3Fifa87v9R/X+80xFT+qDBjNSFe67PnCx2X6j72/ItT3tYlPqbZrzlSZO9qJyEw1tmaNM+0I9I9Ez97p9zapD+xpNrXOLz9nB/fUP+bvD97mU9tK9f3l5lhsj8TV1Dp76PzgSCTf/vtHv7zTuH/3zu3lSydnk/p6b2iJ7ZGY64rEha9QJIabKSNxrrN8Mz/LL3IpX4y/kaUs5leZz0oWptv589X7ufk6NThSn57qXnpj2Eiax+R05/zVb0zT6RlTpvPTMjWfV8p9ejqLKfIgyUJeK/+uZrZzNtjaw+f2cNTX9nCm7XLxO+WsE6ZM7l72r3tr8rA043qmK67d59ypMq97zVaUnu8bpfa1bu/Xoy71b1WJZgu/G3h9OGrbIzHbFYkXdnu/tEL6l/Jqsty4f3fpzvw7e+zv1WrePI7+cKKuEs2teT4T1cadKV+L8piaKfNe6Fxhe+M1Vt1xaantyDvXqdc6Un+eB3mr50j9fq7lWq6Xpc+XpUd3XLGaeRc6LfWew5t5LzbzOjd2uj9vPUij9XkIgJPt1HdPjU3+d/Jfkx9O/n7yzuTrEz8Z/8H4S2MZ/efoD+szI6/WXir+lg/zm63v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNNbfvjo7nyjsbDUP1Hrn1UMrjXf2Gw/SGxAmZ5EUT0qZw+Fi+WHjzaHNjg4MV4N7ymrH2ai/Ri+4YWnB7ZTP9AwirXt+2ti+L5oP+VpD10UOwLerPzUoWv3vLVm9ATsyu2J6cNrsP2G7craz7t3tOeg78kaSdKv1pATx8jBzjvA8buycu+dK8sPH31v8d782wtvL9wfvXbt+sz1a6/NXbm92FiYab12VTiSh98CR6H740THWJKXh9cd8KBWAAAAAAAAAAAA4Bk6iv+FOO5tBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/3byU+uMUmZ25PNNc3lifazSndnqrZD1JLUnx66T4R3IjrSlTXc0Vu/XzweL1Nz/7cuPzrbbq7fK1ZG3XenuzVk2ZTjJSzQ+rvVvD2xvbSo73yS46kWkG7GI7cHDc/hcAAP//ZuzqYw==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 192.343277][ T5794] cgroup: Unknown subsys name 'net' [ 192.451496][ T5794] cgroup: Unknown subsys name 'cpuset' [ 192.468150][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 198.944401][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 204.441721][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.511293][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.526845][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.540610][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.552328][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.560525][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.570709][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.602425][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.666385][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.681414][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.771647][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.871151][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.882178][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.908379][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.921277][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.930751][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.957322][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.960175][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.969425][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.977952][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.998624][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.009492][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.034813][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.048400][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.061479][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.050581][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 206.713230][ T5812] Bluetooth: hci0: command tx timeout [ 206.772249][ T5812] Bluetooth: hci1: command tx timeout [ 206.929472][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 207.092073][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 207.094075][ T5812] Bluetooth: hci4: command tx timeout [ 207.104646][ T5812] Bluetooth: hci3: command tx timeout [ 207.110226][ T5812] Bluetooth: hci2: command tx timeout [ 207.119319][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.130423][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.139111][ T5810] bridge_slave_0: entered allmulticast mode [ 207.149083][ T5810] bridge_slave_0: entered promiscuous mode [ 207.265850][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.276488][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.284373][ T5810] bridge_slave_1: entered allmulticast mode [ 207.294072][ T5810] bridge_slave_1: entered promiscuous mode [ 207.307527][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 207.549648][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.599491][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.670213][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 207.870028][ T5810] team0: Port device team_slave_0 added [ 207.929799][ T5810] team0: Port device team_slave_1 added [ 208.278818][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.288321][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.296152][ T5814] bridge_slave_0: entered allmulticast mode [ 208.305852][ T5814] bridge_slave_0: entered promiscuous mode [ 208.320555][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.327687][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.355211][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.425946][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.436917][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.448835][ T5814] bridge_slave_1: entered allmulticast mode [ 208.459708][ T5814] bridge_slave_1: entered promiscuous mode [ 208.665497][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.673175][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.680955][ T5822] bridge_slave_0: entered allmulticast mode [ 208.690645][ T5822] bridge_slave_0: entered promiscuous mode [ 208.708492][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.717002][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.744522][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.771714][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.792157][ T5816] Bluetooth: hci0: command tx timeout [ 208.808259][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.822391][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.830050][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.838017][ T5822] bridge_slave_1: entered allmulticast mode [ 208.847716][ T5822] bridge_slave_1: entered promiscuous mode [ 208.854492][ T5816] Bluetooth: hci1: command tx timeout [ 209.181402][ T5816] Bluetooth: hci2: command tx timeout [ 209.187207][ T5816] Bluetooth: hci3: command tx timeout [ 209.189072][ T5814] team0: Port device team_slave_0 added [ 209.195124][ T5816] Bluetooth: hci4: command tx timeout [ 209.223574][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.248564][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.369623][ T5814] team0: Port device team_slave_1 added [ 209.640667][ T5810] hsr_slave_0: entered promiscuous mode [ 209.649775][ T5810] hsr_slave_1: entered promiscuous mode [ 209.697675][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.705602][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.713709][ T5818] bridge_slave_0: entered allmulticast mode [ 209.723367][ T5818] bridge_slave_0: entered promiscuous mode [ 209.735414][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.745310][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.753103][ T5823] bridge_slave_0: entered allmulticast mode [ 209.762664][ T5823] bridge_slave_0: entered promiscuous mode [ 209.775071][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.783273][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.791111][ T5818] bridge_slave_1: entered allmulticast mode [ 209.800911][ T5818] bridge_slave_1: entered promiscuous mode [ 209.813964][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.821276][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.847552][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.911699][ T5822] team0: Port device team_slave_0 added [ 209.920824][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.928344][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.937243][ T5823] bridge_slave_1: entered allmulticast mode [ 209.946504][ T5823] bridge_slave_1: entered promiscuous mode [ 209.991808][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.998960][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.025367][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.063794][ T5822] team0: Port device team_slave_1 added [ 210.303322][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.326325][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.401828][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.409017][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.436752][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.460512][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.485697][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.608428][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.615805][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.643740][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.752830][ T5818] team0: Port device team_slave_0 added [ 210.850869][ T5816] Bluetooth: hci0: command tx timeout [ 210.875570][ T5818] team0: Port device team_slave_1 added [ 210.932292][ T5816] Bluetooth: hci1: command tx timeout [ 210.950481][ T5814] hsr_slave_0: entered promiscuous mode [ 210.959592][ T5814] hsr_slave_1: entered promiscuous mode [ 210.968600][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 210.974620][ T5814] Cannot create hsr debugfs directory [ 210.989685][ T5823] team0: Port device team_slave_0 added [ 211.099921][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.108003][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.134478][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.157643][ T5823] team0: Port device team_slave_1 added [ 211.168585][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.177342][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.204387][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.250770][ T5816] Bluetooth: hci3: command tx timeout [ 211.256538][ T5108] Bluetooth: hci2: command tx timeout [ 211.263653][ T5816] Bluetooth: hci4: command tx timeout [ 211.488778][ T5822] hsr_slave_0: entered promiscuous mode [ 211.498518][ T5822] hsr_slave_1: entered promiscuous mode [ 211.507745][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 211.513737][ T5822] Cannot create hsr debugfs directory [ 211.649670][ T5818] hsr_slave_0: entered promiscuous mode [ 211.659983][ T5818] hsr_slave_1: entered promiscuous mode [ 211.669194][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 211.675276][ T5818] Cannot create hsr debugfs directory [ 211.690024][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.697417][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.723875][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.866232][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.873536][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.900063][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.478491][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.573454][ T5823] hsr_slave_0: entered promiscuous mode [ 212.583847][ T5823] hsr_slave_1: entered promiscuous mode [ 212.592855][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 212.598733][ T5823] Cannot create hsr debugfs directory [ 212.628308][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.667627][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.707519][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.937753][ T5812] Bluetooth: hci0: command tx timeout [ 213.020733][ T5812] Bluetooth: hci1: command tx timeout [ 213.342330][ T5812] Bluetooth: hci2: command tx timeout [ 213.347962][ T5812] Bluetooth: hci4: command tx timeout [ 213.354031][ T5812] Bluetooth: hci3: command tx timeout [ 213.433918][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.496420][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.526766][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.607500][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.807947][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.903858][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.932006][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.959722][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.206128][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.277968][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.380493][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.480094][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.596161][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.697152][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.733375][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.847445][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.068805][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.288468][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.325896][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.356323][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.458986][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.466644][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.581774][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.589315][ T3844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.632888][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.720516][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.728038][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.788819][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.835918][ T1899] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.843530][ T1899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.942290][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.949822][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.087434][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.095141][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.151335][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.315178][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.326265][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.497889][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.586953][ T3745] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.594597][ T3745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.668544][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.725938][ T3745] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.733726][ T3745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.938770][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.205834][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.297982][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.305702][ T3786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.456949][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.464622][ T3786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.816600][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.665767][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.840891][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.037396][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.283296][ T5810] veth0_vlan: entered promiscuous mode [ 219.424948][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.462407][ T5810] veth1_vlan: entered promiscuous mode [ 219.539400][ T5814] veth0_vlan: entered promiscuous mode [ 219.682649][ T5814] veth1_vlan: entered promiscuous mode [ 219.772933][ T5822] veth0_vlan: entered promiscuous mode [ 219.992592][ T5810] veth0_macvtap: entered promiscuous mode [ 220.016293][ T5822] veth1_vlan: entered promiscuous mode [ 220.061673][ T5810] veth1_macvtap: entered promiscuous mode [ 220.180537][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.197856][ T5814] veth0_macvtap: entered promiscuous mode [ 220.216330][ T5818] veth0_vlan: entered promiscuous mode [ 220.316750][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.353337][ T5814] veth1_macvtap: entered promiscuous mode [ 220.377026][ T5818] veth1_vlan: entered promiscuous mode [ 220.436553][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.505968][ T5822] veth0_macvtap: entered promiscuous mode [ 220.561138][ T5822] veth1_macvtap: entered promiscuous mode [ 220.606617][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.656670][ T3803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.711899][ T3803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.729707][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.747488][ T3745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.802131][ T3745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.844752][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.949205][ T5818] veth0_macvtap: entered promiscuous mode [ 220.961459][ T3745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.992576][ T3745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.013557][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.059838][ T5818] veth1_macvtap: entered promiscuous mode [ 221.095359][ T3745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.145315][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.218891][ T5098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.295058][ T5098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.342538][ T5098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.409192][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.428053][ T5098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.559590][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.715809][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.790623][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.813401][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.871879][ T3745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.304137][ T5823] veth0_vlan: entered promiscuous mode [ 223.413870][ T5823] veth1_vlan: entered promiscuous mode [ 223.787043][ T5823] veth0_macvtap: entered promiscuous mode [ 223.891477][ T5823] veth1_macvtap: entered promiscuous mode [ 224.146555][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.263584][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.395278][ T3803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.454924][ T3803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.534942][ T5098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.552928][ T3786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.876939][ T5098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.885351][ T5098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.156707][ T3803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.166428][ T3803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.554948][ T1899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.563097][ T1899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.784216][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.792818][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.811473][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.292417][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.300754][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.308999][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.317312][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.627932][ T3844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.636251][ T3844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.817281][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.825805][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.495726][ T5999] Bluetooth: MGMT ver 1.23 [ 232.092919][ T6016] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 232.773892][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.782273][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.360999][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.369061][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.464430][ T6020] loop3: detected capacity change from 0 to 32768 [ 234.474326][ T6020] ======================================================= [ 234.474326][ T6020] WARNING: The mand mount option has been deprecated and [ 234.474326][ T6020] and is ignored by this kernel. Remove the mand [ 234.474326][ T6020] option from the mount to silence this warning. [ 234.474326][ T6020] ======================================================= [ 234.686706][ T6020] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 234.823677][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.830606][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.911345][ T5810] ocfs2: Unmounting device (7,3) on (node local) [ 236.123703][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 236.383137][ T5872] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 236.392171][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.504157][ T5872] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 236.514053][ T5872] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 236.522988][ T5872] usb 2-1: Manufacturer: syz [ 236.592108][ T6043] loop0: detected capacity change from 0 to 1024 [ 236.654084][ T5872] usb 2-1: config 0 descriptor?? [ 236.704370][ T6043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.713765][ T6043] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 236.822981][ T6043] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 236.835318][ T6043] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 236.845579][ T6043] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 236.857206][ T6043] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: comm syz.0.19: inode #1: comm syz.0.19: iget: illegal inode # [ 237.052644][ T6043] EXT4-fs (loop0): Remounting filesystem read-only [ 237.059585][ T6043] EXT4-fs (loop0): no journal found [ 237.150784][ T5872] rc_core: IR keymap rc-hauppauge not found [ 237.157151][ T5872] Registered IR keymap rc-empty [ 237.169907][ T5872] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 237.189714][ T5872] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 237.491709][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 237.597687][ T42] usb 2-1: USB disconnect, device number 2 [ 237.726145][ T5441] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 237.894965][ T5441] usb 3-1: Using ep0 maxpacket: 16 [ 238.018852][ T5441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.032536][ T5441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.043259][ T5441] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 238.052864][ T5441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.204717][ T5441] usb 3-1: config 0 descriptor?? [ 239.200012][ T5441] letsketch 0003:6161:4D15.0001: Device info:   [ 239.402414][ T5441] letsketch 0003:6161:4D15.0001: Device info: 篶 [ 239.726839][ T5441] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 239.746330][ T5441] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -71 [ 239.872446][ T5441] usb 3-1: USB disconnect, device number 2 [ 240.642575][ T5441] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 240.884347][ T5441] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.979903][ T5441] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.992512][ T5441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.001166][ T5441] usb 1-1: Product: syz [ 241.005558][ T5441] usb 1-1: Manufacturer: syz [ 241.010512][ T5441] usb 1-1: SerialNumber: syz [ 241.954490][ T6091] loop2: detected capacity change from 0 to 40427 [ 241.966621][ T6091] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 241.974904][ T6091] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 241.993115][ T6091] F2FS-fs (loop2): invalid crc value [ 242.367339][ T6091] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 242.411180][ T5441] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 242.418012][ T5441] cdc_ncm 1-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048 [ 242.423369][ T6091] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 242.425837][ T5441] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 242.433649][ T6091] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 242.682234][ T5441] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 242.710157][ T5441] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 242.929486][ T5441] usb 1-1: USB disconnect, device number 2 [ 242.937714][ T5441] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 243.354228][ T6101] loop3: detected capacity change from 0 to 4096 [ 243.460972][ T6101] EXT4-fs (loop3): Test dummy encryption mode enabled [ 243.517724][ T6101] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 243.611360][ T6101] System zones: 0-5 [ 243.694738][ T6109] ------------[ cut here ]------------ [ 243.701673][ T6109] WARNING: CPU: 1 PID: 6109 at fs/exec.c:119 path_noexec+0x2ac/0x310 [ 243.710099][ T6109] Modules linked in: [ 243.714651][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.1.42 Not tainted syzkaller #0 PREEMPT(none) [ 243.724232][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.748798][ T6109] RIP: 0010:path_noexec+0x2ac/0x310 [ 243.755082][ T6109] Code: 49 89 ff 8b 7d d4 e8 a3 5e e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 93 5e e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 85 8b 3e ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 55 53 e1 ff 48 8b 00 48 89 45 c8 [ 243.775186][ T6109] RSP: 0018:ffff888052483b90 EFLAGS: 00010283 [ 243.781671][ T6109] RAX: ffffffff82b6731b RBX: ffff8880501e8b60 RCX: 0000000000080000 [ 243.789860][ T6109] RDX: ffffc90008c03000 RSI: 0000000000000056 RDI: 0000000000000057 [ 243.798236][ T6109] RBP: ffff888052483bd0 R08: ffffea000000000f R09: 0000000000000003 [ 243.807478][ T6109] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 243.816512][ T6109] R13: 0000000000000000 R14: ffff88810074e620 R15: 0000000000000000 [ 243.824858][ T6109] FS: 0000000000000000(0000) GS:ffff8881aa791000(0063) knlGS:00000000f54b6b40 [ 243.839281][ T6110] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 243.839594][ T6110] macvtap1: entered allmulticast mode [ 243.839705][ T6110] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 243.852400][ T6110] batman_adv: batadv0: Adding interface: macvtap1 [ 243.854583][ T6109] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 243.862192][ T6110] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.868285][ T6109] CR2: 0000000030021ffc CR3: 00000000279f6000 CR4: 00000000003526f0 [ 243.868390][ T6109] Call Trace: [ 243.875168][ T6110] batman_adv: batadv0: Interface activated: macvtap1 [ 243.919864][ T6109] [ 243.923152][ T6109] do_mmap+0x1570/0x1d70 [ 243.927702][ T6109] vm_mmap_pgoff+0x40d/0x770 [ 243.939117][ T6109] ksys_mmap_pgoff+0x51b/0x7c0 [ 243.946081][ T6109] __ia32_sys_mmap_pgoff+0x11a/0x1d0 [ 243.951783][ T6109] ia32_sys_call+0x1e23/0x4310 [ 243.956902][ T6109] __do_fast_syscall_32+0xb0/0x150 [ 243.959832][ T6101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.963908][ T6109] do_fast_syscall_32+0x38/0x80 [ 243.982577][ T6109] do_SYSENTER_32+0x1f/0x30 [ 243.987327][ T6109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.994182][ T6109] RIP: 0023:0xf7fb4539 [ 243.998514][ T6109] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.018670][ T6109] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 244.027556][ T6109] RAX: ffffffffffffffda RBX: 0000000080ffd000 RCX: 0000000000003000 [ 244.042162][ T6109] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000005 [ 244.053282][ T6109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.061815][ T6109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.070010][ T6109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.078484][ T6109] [ 244.081828][ T6109] ---[ end trace 0000000000000000 ]--- [ 244.977400][ T6118] Bluetooth: Invalid byte 06 after esc byte [ 245.038759][ T6101] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 245.534362][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.055992][ T6129] loop3: detected capacity change from 0 to 256 [ 246.953214][ T5812] Bluetooth: hci5: command 0x1003 tx timeout [ 246.958623][ T5108] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 249.222723][ T6166] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 249.815979][ T6164] loop1: detected capacity change from 0 to 4096 [ 251.152926][ T6177] sctp: failed to load transform for md5: -2 [ 251.368765][ T6183] loop0: detected capacity change from 0 to 2048 [ 251.446874][ T6183] EXT4-fs: Ignoring removed nobh option [ 251.688608][ T6183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.702978][ T6183] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.805356][ T5872] IPVS: starting estimator thread 0... [ 251.940901][ T6195] IPVS: using max 192 ests per chain, 9600 per kthread [ 252.185819][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.647668][ T6199] loop2: detected capacity change from 0 to 2048 [ 252.752575][ T6199] loop2: p1 < > p2 p3 [ 252.803037][ T6199] loop2: p3 size 134217728 extends beyond EOD, truncated [ 253.948621][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 253.983077][ T6218] loop2: detected capacity change from 0 to 1024 [ 254.029916][ T5441] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 254.054878][ T6219] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 254.260624][ T5441] usb 1-1: Using ep0 maxpacket: 16 [ 254.285543][ T5441] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 254.298473][ T5441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.407648][ T5441] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 254.417783][ T5441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.426281][ T5441] usb 1-1: Product: syz [ 254.430725][ T5441] usb 1-1: Manufacturer: syz [ 254.435521][ T5441] usb 1-1: SerialNumber: syz [ 254.602999][ T5441] usb 1-1: config 0 descriptor?? [ 254.733619][ T5441] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 254.743475][ T5441] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 254.981574][ T1899] hfsplus: b-tree write err: -5, ino 4 [ 255.041810][ T6230] capability: warning: `syz.1.87' uses deprecated v2 capabilities in a way that may be insecure [ 255.307574][ T5441] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 255.354381][ T5441] em28xx 1-1:0.0: Config register raw data: 0x3f [ 255.361277][ T5441] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 255.367672][ T5441] em28xx 1-1:0.0: No AC97 audio processor [ 255.760048][ T5441] usb 1-1: USB disconnect, device number 3 [ 255.821272][ T6235] syz.4.89 uses obsolete (PF_INET,SOCK_PACKET) [ 255.981426][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 256.231605][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.243737][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.253916][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.267326][ T5872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.276795][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.350741][ T5872] usb 4-1: config 0 descriptor?? [ 257.012857][ T6246] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.028111][ T5872] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 258.181660][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 258.486038][ T6258] loop1: detected capacity change from 0 to 16 [ 258.568077][ T6258] erofs (device loop1): mounted with root inode @ nid 36. [ 259.413121][ T6264] loop4: detected capacity change from 0 to 1024 [ 259.543190][ T6260] loop2: detected capacity change from 0 to 32768 [ 259.772449][ T5872] usb 4-1: USB disconnect, device number 2 [ 259.911594][ T6260] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 259.911729][ T6260] allowing incompatible features above 0.0: (unknown version) [ 259.911825][ T6260] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 259.912672][ T6264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.928856][ T6260] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 259.971802][ T6260] bcachefs (loop2): initializing new filesystem [ 259.995207][ T6260] bcachefs (loop2): going read-write [ 260.069319][ T6260] bcachefs (loop2): marking superblocks [ 260.135301][ T6260] bcachefs (loop2): initializing freespace [ 260.165314][ T6260] bcachefs (loop2): done initializing freespace [ 260.186895][ T6260] bcachefs (loop2): reading snapshots table [ 260.193413][ T6260] bcachefs (loop2): reading snapshots done [ 260.347910][ T6260] bcachefs (loop2): done starting filesystem [ 260.981369][ T6260] syz.2.99 (6260) used greatest stack depth: 1152 bytes left [ 261.097000][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.624229][ T5814] bcachefs (loop2): shutting down [ 261.629470][ T5814] bcachefs (loop2): going read-only [ 261.635773][ T5814] bcachefs (loop2): finished waiting for writes to stop [ 261.753130][ T5814] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 261.885362][ T6294] loop4: detected capacity change from 0 to 1764 [ 261.948329][ T6294] iso9660: Bad value for 'uid' [ 261.960234][ T6294] iso9660: Bad value for 'uid' [ 262.026847][ T5814] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 262.108540][ T5814] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 262.142532][ T5814] bcachefs (loop2): marking filesystem clean [ 262.274079][ T5814] bcachefs (loop2): shutdown complete [ 262.409909][ T6300] input: syz1 as /devices/virtual/input/input6 [ 263.317716][ T6313] input: syz0 as /devices/virtual/input/input7 [ 264.196318][ T6322] loop3: detected capacity change from 0 to 64 [ 264.561181][ T30] audit: type=1800 audit(1758206982.882:2): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.117" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 264.571193][ T6324] loop4: detected capacity change from 0 to 1024 [ 264.699026][ T5108] Bluetooth: hci0: command 0x0c1a tx timeout [ 264.706315][ T5872] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 264.712907][ T5872] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 264.877585][ T6324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.768555][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.013212][ T5872] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 267.014463][ T5108] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.019645][ T5872] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 269.252408][ T5108] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.267106][ T5872] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 269.273670][ T5872] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 270.308775][ T6399] Zero length message leads to an empty skb [ 270.763787][ T6393] loop1: detected capacity change from 0 to 2048 [ 270.842209][ T6393] hpfs: Unknown parameter '00000000000000000003' [ 271.119424][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 271.492249][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 271.510716][ T5872] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 271.517039][ T5872] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 271.772334][ T6421] process 'syz.0.148' launched './file2' with NULL argv: empty string added [ 272.376253][ T6415] sctp: failed to load transform for md5: -2 [ 273.737713][ T5108] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.812959][ T5872] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 273.819279][ T5872] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 274.282580][ T6450] netlink: 'syz.0.155': attribute type 12 has an invalid length. [ 274.291075][ T6450] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 274.298989][ T6450] netlink: 148 bytes leftover after parsing attributes in process `syz.0.155'. [ 274.308428][ T6450] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 274.316441][ T6450] netlink: 'syz.0.155': attribute type 3 has an invalid length. [ 276.893990][ T78] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.547158][ T78] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.059783][ T78] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.316559][ T78] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.915548][ T6423] Set syz1 is full, maxelem 65536 reached [ 280.983736][ T78] bridge_slave_1: left allmulticast mode [ 280.989627][ T78] bridge_slave_1: left promiscuous mode [ 280.997434][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.034134][ T78] bridge_slave_0: left allmulticast mode [ 281.042346][ T78] bridge_slave_0: left promiscuous mode [ 281.049031][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.012674][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.026329][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.039030][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.068573][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.085397][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.107899][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.171798][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.206185][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.224024][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.263542][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.264676][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.317153][ T78] bond0 (unregistering): Released all slaves [ 282.326529][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.633828][ T78] hsr_slave_0: left promiscuous mode [ 283.698540][ T78] hsr_slave_1: left promiscuous mode [ 283.706946][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.714745][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.803915][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.811840][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.917874][ T78] veth1_macvtap: left promiscuous mode [ 283.923850][ T78] veth0_macvtap: left promiscuous mode [ 283.929916][ T78] veth1_vlan: left promiscuous mode [ 283.935676][ T78] veth0_vlan: left promiscuous mode [ 284.017020][ T6511] loop0: detected capacity change from 0 to 64 [ 284.379565][ T5812] Bluetooth: hci1: command tx timeout [ 284.450917][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 284.689018][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 284.795036][ T5872] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 284.807860][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.878995][ T5872] usb 2-1: config 0 descriptor?? [ 284.890485][ T78] team0 (unregistering): Port device team_slave_1 removed [ 284.966432][ T5872] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 285.004486][ T78] team0 (unregistering): Port device team_slave_0 removed [ 285.967129][ T5872] gspca_vc032x: reg_w err -71 [ 285.974044][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.979543][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.986335][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.992018][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.997480][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.003088][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.008543][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.014127][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.019586][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.025626][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.031213][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.036671][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.042245][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.047685][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.053398][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.058842][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.064421][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.069868][ T5872] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.075563][ T5872] gspca_vc032x: Unknown sensor... [ 286.081120][ T5872] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 286.095155][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 286.151032][ T5872] usb 2-1: USB disconnect, device number 3 [ 286.171714][ T6523] netlink: 72 bytes leftover after parsing attributes in process `syz.3.175'. [ 286.455567][ T5812] Bluetooth: hci1: command tx timeout [ 286.841194][ T6532] mmap: syz.3.178 (6532) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 287.331513][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 287.468052][ T6536] loop0: detected capacity change from 0 to 8 [ 287.551885][ T6536] squashfs: Unknown parameter 'workdir' [ 288.534539][ T5812] Bluetooth: hci1: command tx timeout [ 289.535091][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.553941][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.567482][ T6495] bridge_slave_0: entered allmulticast mode [ 289.578017][ T6495] bridge_slave_0: entered promiscuous mode [ 289.773964][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.784787][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.792812][ T6495] bridge_slave_1: entered allmulticast mode [ 289.802765][ T6495] bridge_slave_1: entered promiscuous mode [ 290.082798][ T42] IPVS: starting estimator thread 0... [ 290.134059][ T6573] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.192334][ T6576] IPVS: using max 192 ests per chain, 9600 per kthread [ 290.232304][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.395346][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.560799][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 290.594300][ T6495] team0: Port device team_slave_0 added [ 290.610698][ T5812] Bluetooth: hci1: command tx timeout [ 290.631747][ T6495] team0: Port device team_slave_1 added [ 290.722097][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 290.787345][ T42] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 290.797026][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.875274][ T42] usb 5-1: config 0 descriptor?? [ 290.935693][ T42] gspca_main: sunplus-2.14.0 probing 041e:400b [ 291.046565][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.054242][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.080958][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.341790][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.349281][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.376222][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.145542][ T6495] hsr_slave_0: entered promiscuous mode [ 292.162233][ T6495] hsr_slave_1: entered promiscuous mode [ 292.173847][ T6495] debugfs: 'hsr0' already exists in 'hsr' [ 292.180128][ T6495] Cannot create hsr debugfs directory [ 292.248100][ T42] gspca_sunplus: reg_w_riv err -71 [ 292.254067][ T42] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 292.394101][ T42] usb 5-1: USB disconnect, device number 2 [ 294.246358][ T6621] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 294.444623][ T6495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 294.492667][ T6495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 294.578640][ T6495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 294.671974][ T6495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.010904][ T6633] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 295.123742][ T6633] bond1: entered promiscuous mode [ 295.130721][ T6633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.366995][ T6633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.376502][ T6633] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 295.387233][ T6633] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 295.413076][ T6633] bond1: (slave ip6gre1): making interface the new active one [ 295.422051][ T6633] ip6gre1: entered promiscuous mode [ 295.445773][ T6633] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 295.697435][ T6642] input: syz1 as /devices/virtual/input/input8 [ 296.243344][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.250026][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.442478][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.670949][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.787157][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.794998][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.891712][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.899370][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.994769][ T6669] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 298.099293][ T6670] loop4: detected capacity change from 0 to 256 [ 298.313498][ T6670] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.324749][ T6670] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 298.926559][ T6680] loop0: detected capacity change from 0 to 512 [ 299.039422][ T6670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 299.079861][ T6680] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 299.177638][ T6680] EXT4-fs (loop0): 1 truncate cleaned up [ 299.186284][ T6680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.228766][ T6495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.294792][ T30] audit: type=1800 audit(1758207017.582:3): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.215" name="file1" dev="loop4" ino=1048605 res=0 errno=0 [ 299.884578][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.236901][ T30] audit: type=1804 audit(1758207018.562:4): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.215" name="/newroot/43/file0/file1" dev="loop4" ino=1048605 res=1 errno=0 [ 300.880835][ T30] audit: type=1326 audit(1758207019.202:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 300.903864][ T30] audit: type=1326 audit(1758207019.212:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 300.926355][ T30] audit: type=1326 audit(1758207019.252:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 300.949439][ T30] audit: type=1326 audit(1758207019.272:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 300.972847][ T30] audit: type=1326 audit(1758207019.272:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 300.995463][ T30] audit: type=1326 audit(1758207019.272:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 301.017739][ T30] audit: type=1326 audit(1758207019.272:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.226" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 301.755734][ T6719] overlayfs: failed to clone upperpath [ 302.667718][ T6495] veth0_vlan: entered promiscuous mode [ 302.794883][ T6495] veth1_vlan: entered promiscuous mode [ 302.807648][ T6715] loop4: detected capacity change from 0 to 8192 [ 303.081864][ T6715] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.300080][ T6495] veth0_macvtap: entered promiscuous mode [ 303.390983][ T6495] veth1_macvtap: entered promiscuous mode [ 303.595146][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.714318][ T6495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.835507][ T3786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.945584][ T3786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.995184][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.046216][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.141252][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 307.401495][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.413178][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.423479][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.437431][ T5872] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.447067][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.472268][ T5872] usb 2-1: config 0 descriptor?? [ 307.988176][ T5872] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 307.996076][ T5872] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 308.136008][ T5872] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 308.264003][ T5872] usb 2-1: USB disconnect, device number 4 [ 308.326190][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 308.909072][ T6804] fido_id[6804]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 309.675947][ T6820] loop1: detected capacity change from 0 to 256 [ 309.869796][ T6820] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.881611][ T6820] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 310.204898][ T6820] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 310.283497][ T30] audit: type=1800 audit(1758207028.612:12): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.256" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 310.510816][ T6816] loop0: detected capacity change from 0 to 8192 [ 310.645574][ T6816] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.164470][ T30] audit: type=1804 audit(1758207029.492:13): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.256" name="/newroot/61/file0/file1" dev="loop1" ino=1048607 res=1 errno=0 [ 311.573016][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 311.786423][ T3803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.795804][ T3803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.853078][ T5872] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 311.862714][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.965247][ T5872] usb 5-1: config 0 descriptor?? [ 312.324280][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.333722][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.292867][ T5872] usb 5-1: Cannot set autoneg [ 313.298728][ T5872] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 313.452097][ T5872] usb 5-1: USB disconnect, device number 3 [ 314.554043][ T6869] block nbd0: shutting down sockets [ 315.390803][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 315.615893][ T42] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 315.625443][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.634403][ T6887] loop1: detected capacity change from 0 to 1024 [ 315.695328][ T6887] EXT4-fs: Ignoring removed nobh option [ 315.701494][ T6887] EXT4-fs: Ignoring removed bh option [ 315.706178][ T42] usb 5-1: config 0 descriptor?? [ 315.953539][ T6887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.404170][ T42] kaweth 5-1:0.0: Firmware present in device. [ 316.460986][ T42] kaweth 5-1:0.0: Statistics collection: 0 [ 316.467448][ T42] kaweth 5-1:0.0: Multicast filter limit: 0 [ 316.474713][ T42] kaweth 5-1:0.0: MTU: 0 [ 316.479179][ T42] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 316.947409][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.085290][ T42] kaweth 5-1:0.0: kaweth interface created at eth5 [ 317.390728][ T42] usb 5-1: USB disconnect, device number 4 [ 318.597494][ T6921] loop1: detected capacity change from 0 to 2048 [ 318.799848][ T6921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.952589][ T6932] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.009027][ T30] audit: type=1800 audit(1758207293.344:14): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.284" name="file1" dev="loop1" ino=1335 res=0 errno=0 [ 319.213177][ T30] audit: type=1800 audit(1758207293.544:15): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.284" name="file1" dev="loop1" ino=1335 res=0 errno=0 [ 319.335350][ T6936] netlink: 'syz.4.289': attribute type 4 has an invalid length. [ 319.495497][ T6939] netlink: 'syz.4.289': attribute type 4 has an invalid length. [ 320.091184][ T6946] loop1: detected capacity change from 0 to 512 [ 320.103555][ T6946] EXT4-fs: Ignoring removed oldalloc option [ 320.232213][ T6946] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.293: corrupted in-inode xattr: e_value size too large [ 320.270812][ T6946] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.293: couldn't read orphan inode 15 (err -117) [ 320.299427][ T6946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.485495][ T6946] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.293: Logical block already allocated [ 320.842118][ T6956] loop5: detected capacity change from 0 to 2048 [ 320.932768][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.986671][ T6956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.000759][ T6956] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.750996][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 321.855300][ T6495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.901227][ T6970] loop1: detected capacity change from 0 to 1024 [ 321.942277][ T6970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.982297][ T42] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 321.991065][ T42] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 322.000643][ T42] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 322.011362][ T42] usb 1-1: config 220 has no interface number 2 [ 322.017902][ T42] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 322.031972][ T42] usb 1-1: config 220 interface 0 has no altsetting 0 [ 322.039006][ T42] usb 1-1: config 220 interface 76 has no altsetting 0 [ 322.040593][ T6970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102] [ 322.046330][ T42] usb 1-1: config 220 interface 1 has no altsetting 0 [ 322.083999][ T6970] System zones: 0-1, 3-12 [ 322.092461][ T6970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.237283][ T42] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 322.246950][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.255519][ T42] usb 1-1: Product: syz [ 322.259880][ T42] usb 1-1: Manufacturer: syz [ 322.265100][ T42] usb 1-1: SerialNumber: syz [ 322.747046][ T42] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 322.753961][ T42] usb 1-1: No valid video chain found. [ 322.759884][ T42] usb 1-1: selecting invalid altsetting 0 [ 322.897884][ T42] usb 1-1: selecting invalid altsetting 0 [ 322.904154][ T42] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 323.072910][ T42] usb 1-1: USB disconnect, device number 4 [ 323.154718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 323.182304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 323.389585][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.891282][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 324.035496][ T6992] loop1: detected capacity change from 0 to 1024 [ 324.088671][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.094229][ T6992] EXT4-fs: Ignoring removed nobh option [ 324.100971][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.105777][ T6992] EXT4-fs: Ignoring removed bh option [ 324.115585][ T42] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 324.115740][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.187961][ T42] usb 6-1: config 0 descriptor?? [ 324.315644][ T6992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.702335][ T42] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 324.757160][ T42] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 324.844691][ T42] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 324.855167][ T42] hid-steam 0003:28DE:1142.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 324.935897][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.948122][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.957449][ T42] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 324.958548][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.060054][ T42] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 325.124392][ T7008] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 325.234565][ T42] usb 6-1: USB disconnect, device number 2 [ 325.343162][ T42] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 326.062089][ T5098] ===================================================== [ 326.069268][ T5098] BUG: KMSAN: uninit-value in ppp_asynctty_receive+0x857/0x2da0 [ 326.077101][ T5098] ppp_asynctty_receive+0x857/0x2da0 [ 326.082759][ T5098] tty_ldisc_receive_buf+0x1f7/0x2c0 [ 326.088279][ T5098] tty_port_default_receive_buf+0xd7/0x1a0 [ 326.094325][ T5098] flush_to_ldisc+0x43e/0xe30 [ 326.099206][ T5098] process_scheduled_works+0xb8e/0x1d80 [ 326.104993][ T5098] worker_thread+0xedf/0x1590 [ 326.109900][ T5098] kthread+0xd59/0xf00 [ 326.114141][ T5098] ret_from_fork+0x233/0x380 [ 326.118917][ T5098] ret_from_fork_asm+0x1a/0x30 [ 326.123913][ T5098] [ 326.126323][ T5098] Uninit was created at: [ 326.130771][ T5098] __kmalloc_noprof+0x95f/0x1310 [ 326.135886][ T5098] __tty_buffer_request_room+0x3d4/0x7a0 [ 326.141725][ T5098] __tty_insert_flip_string_flags+0x157/0x6f0 [ 326.147989][ T5098] uart_insert_char+0x368/0x930 [ 326.153009][ T5098] serial8250_read_char+0x1ba/0x670 [ 326.158370][ T5098] serial8250_handle_irq+0x930/0x1110 [ 326.163911][ T5098] serial8250_default_handle_irq+0x116/0x330 [ 326.170104][ T5098] serial8250_interrupt+0xcb/0x400 [ 326.175383][ T5098] __handle_irq_event_percpu+0x11c/0xbf0 [ 326.181205][ T5098] handle_irq_event+0xe0/0x2a0 [ 326.186133][ T5098] handle_edge_irq+0x2a9/0xb50 [ 326.191037][ T5098] __common_interrupt+0x9a/0x180 [ 326.196180][ T5098] common_interrupt+0x94/0xb0 [ 326.201019][ T5098] asm_common_interrupt+0x2b/0x40 [ 326.206191][ T5098] [ 326.208733][ T5098] CPU: 0 UID: 0 PID: 5098 Comm: kworker/u8:26 Tainted: G W syzkaller #0 PREEMPT(none) [ 326.220281][ T5098] Tainted: [W]=WARN [ 326.224177][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.234358][ T5098] Workqueue: events_unbound flush_to_ldisc [ 326.240388][ T5098] ===================================================== [ 326.247396][ T5098] Disabling lock debugging due to kernel taint [ 326.253639][ T5098] Kernel panic - not syncing: kmsan.panic set ... [ 326.260167][ T5098] CPU: 0 UID: 0 PID: 5098 Comm: kworker/u8:26 Tainted: G B W syzkaller #0 PREEMPT(none) [ 326.271486][ T5098] Tainted: [B]=BAD_PAGE, [W]=WARN [ 326.276599][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.286781][ T5098] Workqueue: events_unbound flush_to_ldisc [ 326.292896][ T5098] Call Trace: [ 326.296284][ T5098] [ 326.299304][ T5098] __dump_stack+0x26/0x30 [ 326.303835][ T5098] dump_stack_lvl+0x53/0x270 [ 326.308627][ T5098] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.314648][ T5098] dump_stack+0x1e/0x25 [ 326.318991][ T5098] vpanic+0x361/0xc50 [ 326.323166][ T5098] panic+0x15d/0x160 [ 326.327288][ T5098] kmsan_report+0x31c/0x320 [ 326.331966][ T5098] ? __msan_warning+0x1b/0x30 [ 326.336797][ T5098] ? ppp_asynctty_receive+0x857/0x2da0 [ 326.342410][ T5098] ? tty_ldisc_receive_buf+0x1f7/0x2c0 [ 326.348061][ T5098] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 326.354239][ T5098] ? flush_to_ldisc+0x43e/0xe30 [ 326.359276][ T5098] ? process_scheduled_works+0xb8e/0x1d80 [ 326.365201][ T5098] ? worker_thread+0xedf/0x1590 [ 326.370335][ T5098] ? kthread+0xd59/0xf00 [ 326.374745][ T5098] ? ret_from_fork+0x233/0x380 [ 326.379664][ T5098] ? ret_from_fork_asm+0x1a/0x30 [ 326.384809][ T5098] ? kmsan_get_metadata+0xfb/0x160 [ 326.390096][ T5098] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.396093][ T5098] ? _raw_spin_trylock_bh+0xb1/0xc0 [ 326.401484][ T5098] ? filter_irq_stacks+0x49/0x190 [ 326.406677][ T5098] ? stack_depot_save_flags+0x35/0x7b0 [ 326.412295][ T5098] ? kmsan_get_metadata+0xfb/0x160 [ 326.417576][ T5098] ? kmsan_get_metadata+0xfb/0x160 [ 326.422878][ T5098] ? kmsan_get_metadata+0xfb/0x160 [ 326.428193][ T5098] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 326.434638][ T5098] ? kmsan_get_metadata+0xfb/0x160 [ 326.439972][ T5098] __msan_warning+0x1b/0x30 [ 326.444722][ T5098] ppp_asynctty_receive+0x857/0x2da0 [ 326.450174][ T5098] ? tracing_record_taskinfo_sched_switch+0xc4/0x6f0 [ 326.457108][ T5098] ? kmsan_get_metadata+0x30/0x160 [ 326.462407][ T5098] ? kmsan_get_metadata+0x30/0x160 [ 326.467724][ T5098] tty_ldisc_receive_buf+0x1f7/0x2c0 [ 326.473216][ T5098] ? __pfx_ppp_asynctty_receive+0x10/0x10 [ 326.479099][ T5098] tty_port_default_receive_buf+0xd7/0x1a0 [ 326.485127][ T5098] flush_to_ldisc+0x43e/0xe30 [ 326.490009][ T5098] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 326.496636][ T5098] ? __pfx_flush_to_ldisc+0x10/0x10 [ 326.502034][ T5098] process_scheduled_works+0xb8e/0x1d80 [ 326.507849][ T5098] worker_thread+0xedf/0x1590 [ 326.512759][ T5098] kthread+0xd59/0xf00 [ 326.516979][ T5098] ? __pfx_worker_thread+0x10/0x10 [ 326.522314][ T5098] ? __pfx_kthread+0x10/0x10 [ 326.527056][ T5098] ret_from_fork+0x233/0x380 [ 326.531800][ T5098] ? __pfx_kthread+0x10/0x10 [ 326.536550][ T5098] ret_from_fork_asm+0x1a/0x30 [ 326.541552][ T5098] [ 326.544992][ T5098] Kernel Offset: disabled [ 326.549412][ T5098] Rebooting in 86400 seconds..