last executing test programs: 27.293947781s ago: executing program 4 (id=155): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 26.353264716s ago: executing program 4 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 25.592742219s ago: executing program 4 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x14, 0x64, 0x0, 0x1, 0x6, 0x0, @empty, @remote}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0x2}}}}}}}, 0x3a) 25.172465515s ago: executing program 4 (id=168): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000200)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/32, 0x20}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 23.721592716s ago: executing program 4 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200004, 0x0, 0x0, 0xfffffffd, 0x8003}}}}]}, 0x4c}}, 0x90) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 22.308401674s ago: executing program 4 (id=183): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 21.789264442s ago: executing program 32 (id=183): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 6.766571587s ago: executing program 2 (id=264): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x34, 0x1}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0x8}, 0x28) 6.415262967s ago: executing program 2 (id=269): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendfile(r0, r0, 0x0, 0x3) 6.224119466s ago: executing program 2 (id=272): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000480)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = timerfd_create(0x3, 0x800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000340)={{r3, r4+60000000}, {r5, r6+10000000}}, &(0x7f0000000380)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) syncfs(r0) sendfile(r9, r9, 0x0, 0x4) 5.142922961s ago: executing program 2 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x31, &(0x7f00000001c0)={0x23, 0x5, 0x7f}) syz_usb_connect(0x0, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) 4.985745782s ago: executing program 0 (id=280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1c, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 4.608328804s ago: executing program 0 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x5) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 4.374179884s ago: executing program 3 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.258895771s ago: executing program 1 (id=285): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x697, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x63) 3.369139037s ago: executing program 0 (id=286): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000480)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = timerfd_create(0x3, 0x800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000340)={{r3, r4+60000000}, {r5, r6+10000000}}, &(0x7f0000000380)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) syncfs(r0) sendfile(r9, r9, 0x0, 0x4) 3.209111058s ago: executing program 3 (id=287): mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3.044584386s ago: executing program 1 (id=288): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 2.474618409s ago: executing program 3 (id=289): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) setfsuid(0x0) 2.202824478s ago: executing program 0 (id=290): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000680)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@debug}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x472, &(0x7f0000000ec0)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a8", 0x2, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x0) 2.112498939s ago: executing program 1 (id=291): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2020) 2.112124564s ago: executing program 2 (id=292): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x3, 0x53e, &(0x7f0000000b40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000140)='./file0\x00') 2.031186483s ago: executing program 3 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) syz_open_dev$usbfs(0x0, 0x201, 0xa401) 1.055819551s ago: executing program 1 (id=294): unshare(0x20000400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 940.532104ms ago: executing program 3 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001200ffff2bbd7000fbdbb60000000000", @ANYRES32=0x0, @ANYBLOB="000000002238030008004000", @ANYRES32, @ANYBLOB="280012"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) 815.122099ms ago: executing program 0 (id=296): syz_io_uring_setup(0x0, &(0x7f0000000280), 0x0, 0x0) 731.397037ms ago: executing program 1 (id=297): mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000abaff9), 0x10) 334.488737ms ago: executing program 1 (id=298): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r4, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 288.57127ms ago: executing program 0 (id=299): mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 251.397306ms ago: executing program 2 (id=300): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000010140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x82, 0x0, 0x2}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x38, 0x0, 0x9, [0xfffffffe, 0x10000, 0x10000, 0x585, 0xc]}, @cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "6afad05d505dd0"}, {0x7, 0x2}]}]}}}], 0x58}}], 0x2, 0x20000000) 0s ago: executing program 3 (id=301): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 88.543425][ T5816] cgroup: Unknown subsys name 'net' [ 88.650891][ T5816] cgroup: Unknown subsys name 'cpuset' [ 88.661568][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.310310][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.047093][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.059463][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.069444][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.078755][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.079083][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.088580][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.096804][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.105385][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.111431][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.119597][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.127186][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.136666][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.144012][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.152504][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.159533][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.166891][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.174901][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.184232][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.191057][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.199009][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.217848][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.226567][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.236795][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.237130][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.277876][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.979970][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 96.193532][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 96.286273][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 96.298978][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.308015][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.316437][ T5827] bridge_slave_0: entered allmulticast mode [ 96.325012][ T5827] bridge_slave_0: entered promiscuous mode [ 96.357808][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 96.395458][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.403679][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.412392][ T5827] bridge_slave_1: entered allmulticast mode [ 96.422075][ T5827] bridge_slave_1: entered promiscuous mode [ 96.543641][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 96.581145][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.619670][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.752623][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.762457][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.771530][ T5841] bridge_slave_0: entered allmulticast mode [ 96.780352][ T5841] bridge_slave_0: entered promiscuous mode [ 96.802815][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.813127][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.821796][ T5828] bridge_slave_0: entered allmulticast mode [ 96.829951][ T5828] bridge_slave_0: entered promiscuous mode [ 96.840256][ T5827] team0: Port device team_slave_0 added [ 96.867884][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.878680][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.889152][ T5841] bridge_slave_1: entered allmulticast mode [ 96.897627][ T5841] bridge_slave_1: entered promiscuous mode [ 96.925224][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.935940][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.944580][ T5830] bridge_slave_0: entered allmulticast mode [ 96.953863][ T5830] bridge_slave_0: entered promiscuous mode [ 96.962492][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.970925][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.978868][ T5828] bridge_slave_1: entered allmulticast mode [ 96.986502][ T5828] bridge_slave_1: entered promiscuous mode [ 96.998153][ T5827] team0: Port device team_slave_1 added [ 97.042687][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.051956][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.062390][ T5830] bridge_slave_1: entered allmulticast mode [ 97.070119][ T5830] bridge_slave_1: entered promiscuous mode [ 97.125370][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.162873][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.170834][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.201578][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.215230][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.226050][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.237184][ T5829] bridge_slave_0: entered allmulticast mode [ 97.246926][ T5829] bridge_slave_0: entered promiscuous mode [ 97.258157][ T52] Bluetooth: hci3: command tx timeout [ 97.265568][ T5837] Bluetooth: hci4: command tx timeout [ 97.267172][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.301110][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.312738][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.321267][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.361428][ T52] Bluetooth: hci1: command tx timeout [ 97.361438][ T5840] Bluetooth: hci2: command tx timeout [ 97.361708][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.369804][ T5837] Bluetooth: hci0: command tx timeout [ 97.380350][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.408408][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.416738][ T5829] bridge_slave_1: entered allmulticast mode [ 97.425094][ T5829] bridge_slave_1: entered promiscuous mode [ 97.452565][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.469829][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.517964][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.554176][ T5841] team0: Port device team_slave_0 added [ 97.591199][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.606143][ T5841] team0: Port device team_slave_1 added [ 97.626183][ T5828] team0: Port device team_slave_0 added [ 97.650844][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.676430][ T5830] team0: Port device team_slave_0 added [ 97.685303][ T5828] team0: Port device team_slave_1 added [ 97.732054][ T5830] team0: Port device team_slave_1 added [ 97.758139][ T5827] hsr_slave_0: entered promiscuous mode [ 97.765909][ T5827] hsr_slave_1: entered promiscuous mode [ 97.786924][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.794686][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.825503][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.865837][ T5829] team0: Port device team_slave_0 added [ 97.873040][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.881108][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.913633][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.941646][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.950221][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.982272][ T24] cfg80211: failed to load regulatory.db [ 97.987861][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.003664][ T5829] team0: Port device team_slave_1 added [ 98.021026][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.030678][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.062232][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.075848][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.083821][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.116182][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.129084][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.141528][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.171760][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.272197][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.281278][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.314614][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.329294][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.337134][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.374982][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.491759][ T5841] hsr_slave_0: entered promiscuous mode [ 98.500388][ T5841] hsr_slave_1: entered promiscuous mode [ 98.510628][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 98.516648][ T5841] Cannot create hsr debugfs directory [ 98.530924][ T5830] hsr_slave_0: entered promiscuous mode [ 98.538325][ T5830] hsr_slave_1: entered promiscuous mode [ 98.546372][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 98.555918][ T5830] Cannot create hsr debugfs directory [ 98.575849][ T5828] hsr_slave_0: entered promiscuous mode [ 98.583134][ T5828] hsr_slave_1: entered promiscuous mode [ 98.590983][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 98.597347][ T5828] Cannot create hsr debugfs directory [ 98.655775][ T5829] hsr_slave_0: entered promiscuous mode [ 98.664074][ T5829] hsr_slave_1: entered promiscuous mode [ 98.671470][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 98.677786][ T5829] Cannot create hsr debugfs directory [ 99.241306][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.265429][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.285874][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.304517][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.337690][ T52] Bluetooth: hci3: command tx timeout [ 99.345498][ T5837] Bluetooth: hci4: command tx timeout [ 99.355320][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.380804][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.407698][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.417932][ T52] Bluetooth: hci1: command tx timeout [ 99.417996][ T5840] Bluetooth: hci2: command tx timeout [ 99.424587][ T5837] Bluetooth: hci0: command tx timeout [ 99.445174][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.522940][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.538583][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.551937][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.571729][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.686171][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.701736][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.713578][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.726929][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.882337][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.895978][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.912520][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.933016][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.998388][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.020913][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.071313][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.097924][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.114530][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.139477][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.149085][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.175268][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.183682][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.194981][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.204141][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.246029][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.253689][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.289229][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.343055][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.350889][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.371504][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.405893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.414393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.482378][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.509449][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.552399][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.561161][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.611571][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.619511][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.664656][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.744132][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.752499][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.809363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.816935][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.007178][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.072744][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.205163][ T5827] veth0_vlan: entered promiscuous mode [ 101.293882][ T5827] veth1_vlan: entered promiscuous mode [ 101.419814][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.420237][ T5837] Bluetooth: hci4: command tx timeout [ 101.430730][ T5840] Bluetooth: hci3: command tx timeout [ 101.497711][ T5840] Bluetooth: hci0: command tx timeout [ 101.500692][ T52] Bluetooth: hci2: command tx timeout [ 101.510897][ T5837] Bluetooth: hci1: command tx timeout [ 101.537592][ T5827] veth0_macvtap: entered promiscuous mode [ 101.602425][ T5827] veth1_macvtap: entered promiscuous mode [ 101.714865][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.733347][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.744186][ T5828] veth0_vlan: entered promiscuous mode [ 101.763048][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.774865][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.824175][ T5828] veth1_vlan: entered promiscuous mode [ 101.833833][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.846452][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.864013][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.874509][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.019411][ T5829] veth0_vlan: entered promiscuous mode [ 102.036954][ T5830] veth0_vlan: entered promiscuous mode [ 102.112961][ T5829] veth1_vlan: entered promiscuous mode [ 102.125349][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.126544][ T5830] veth1_vlan: entered promiscuous mode [ 102.135041][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.157334][ T5828] veth0_macvtap: entered promiscuous mode [ 102.164864][ T5841] veth0_vlan: entered promiscuous mode [ 102.197174][ T5828] veth1_macvtap: entered promiscuous mode [ 102.243366][ T5841] veth1_vlan: entered promiscuous mode [ 102.254105][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.266300][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.340402][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.365106][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.393159][ T5829] veth0_macvtap: entered promiscuous mode [ 102.414089][ T5829] veth1_macvtap: entered promiscuous mode [ 102.433831][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.484378][ T5830] veth0_macvtap: entered promiscuous mode [ 102.521430][ T5841] veth0_macvtap: entered promiscuous mode [ 102.540441][ T1159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.565091][ T1159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.590631][ T5841] veth1_macvtap: entered promiscuous mode [ 102.608720][ T1159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.629705][ T1159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.645051][ T5830] veth1_macvtap: entered promiscuous mode [ 102.669552][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.702255][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.733819][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.752575][ T3507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.763252][ T3507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.783328][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.802309][ T3507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.812853][ T3507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.825386][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.864070][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.874488][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.885132][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.912331][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.923446][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.946206][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.960929][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.961486][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.988331][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.999670][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.032947][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.078204][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.086881][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.162229][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.189361][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.351696][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.365876][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.376570][ T5955] loop3: detected capacity change from 0 to 512 [ 103.443032][ T5955] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.7: inode has both inline data and extents flags [ 103.491005][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.499643][ T52] Bluetooth: hci4: command tx timeout [ 103.512390][ T5837] Bluetooth: hci3: command tx timeout [ 103.533308][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.558179][ T5955] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7: couldn't read orphan inode 15 (err -117) [ 103.577402][ T5837] Bluetooth: hci1: command tx timeout [ 103.578124][ T5840] Bluetooth: hci0: command tx timeout [ 103.583326][ T52] Bluetooth: hci2: command tx timeout [ 103.594970][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.616650][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.641390][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.801308][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.862887][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.906410][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.986544][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.004272][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.719206][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.307791][ T878] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.514504][ T878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.518051][ T6015] loop1: detected capacity change from 0 to 16 [ 105.554879][ T878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.575890][ T6018] loop4: detected capacity change from 0 to 8 [ 105.595270][ T878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.623587][ T6015] erofs (device loop1): mounted with root inode @ nid 36. [ 105.663889][ T878] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.703173][ T878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.822346][ T878] usb 1-1: config 0 descriptor?? [ 106.582295][ T6029] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.582295][ T6029] The task syz.2.33 (6029) triggered the difference, watch for misbehavior. [ 106.679115][ T878] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.067660][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.249367][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 107.270343][ T5908] usb 5-1: config 3 has an invalid interface number: 86 but max is 0 [ 107.284286][ T5908] usb 5-1: config 3 has no interface number 0 [ 107.318238][ T5908] usb 5-1: config 3 interface 86 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 107.342692][ T5908] usb 5-1: config 3 interface 86 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 107.355011][ T5908] usb 5-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=5c.8a [ 107.372656][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.608207][ T5908] usb 5-1: string descriptor 0 read error: -71 [ 107.639991][ T5908] hub 5-1:3.86: bad descriptor, ignoring hub [ 107.659681][ T5908] hub 5-1:3.86: probe with driver hub failed with error -5 [ 107.743025][ T5908] usb 5-1: USB disconnect, device number 2 [ 107.840061][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 108.095169][ T6052] loop2: detected capacity change from 0 to 512 [ 108.105761][ T6052] ======================================================= [ 108.105761][ T6052] WARNING: The mand mount option has been deprecated and [ 108.105761][ T6052] and is ignored by this kernel. Remove the mand [ 108.105761][ T6052] option from the mount to silence this warning. [ 108.105761][ T6052] ======================================================= [ 108.153549][ T6052] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.286979][ T6058] loop4: detected capacity change from 0 to 512 [ 108.319117][ T6052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.336495][ T6052] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.412566][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.450299][ T6058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.469475][ T6058] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.476304][ T6063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.671655][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.694679][ T5976] usb 1-1: USB disconnect, device number 2 [ 108.825452][ T6073] loop1: detected capacity change from 0 to 2048 [ 108.847889][ T6075] loop3: detected capacity change from 0 to 512 [ 108.904790][ T6075] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.933166][ T6073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.952436][ T6077] loop4: detected capacity change from 0 to 512 [ 108.962834][ T6075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.021922][ T6077] journal_path: Lookup failure for './file0/file0/file0' [ 109.040843][ T6075] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.51: inode has both inline data and extents flags [ 109.073406][ T6077] EXT4-fs: error: could not find journal device path [ 109.167612][ T6075] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.51: couldn't read orphan inode 15 (err -117) [ 109.270349][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.117059][ T30] audit: type=1326 audit(1763687546.473:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b9f8f749 code=0x7ffc0000 [ 110.152321][ T6088] syz.2.53 (6088) used greatest stack depth: 16392 bytes left [ 110.254496][ T30] audit: type=1326 audit(1763687546.523:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f11b9f8f749 code=0x7ffc0000 [ 110.306367][ T30] audit: type=1326 audit(1763687546.593:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b9f8f749 code=0x7ffc0000 [ 110.408994][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.614628][ T6107] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.928345][ T6113] loop4: detected capacity change from 0 to 1024 [ 111.739900][ T6119] mmap: syz.0.70 (6119) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.783407][ T6123] loop2: detected capacity change from 0 to 512 [ 111.841654][ T6123] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.71: bg 0: block 5: invalid block bitmap [ 111.957601][ T6123] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 112.011883][ T6123] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.71: invalid indirect mapped block 3 (level 2) [ 112.048149][ T6123] EXT4-fs (loop2): 1 orphan inode deleted [ 112.052264][ T6126] loop4: detected capacity change from 0 to 1024 [ 112.086235][ T6123] EXT4-fs (loop2): 1 truncate cleaned up [ 112.102503][ T6123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.157662][ T6126] EXT4-fs (loop4): Test dummy encryption mode enabled [ 112.214875][ T6126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.242258][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.301725][ T6126] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 112.434256][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.647398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 112.850935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.851218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.872702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.953660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.965418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.157651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 113.260036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 113.363482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.363921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 113.373692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.422557][ T30] audit: type=1326 audit(1763687550.363:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.3.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b8f8f749 code=0x7fc00000 [ 114.537387][ T52] Bluetooth: hci2: command tx timeout [ 114.833114][ T6164] devpts: Bad value for 'mode' [ 115.200017][ T30] audit: type=1326 audit(1763687551.573:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 115.331062][ T6170] futex_wake_op: syz.4.90 tries to shift op by 144; fix this program [ 115.746789][ T30] audit: type=1326 audit(1763687551.573:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 115.772727][ T30] audit: type=1326 audit(1763687551.573:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 115.825930][ T30] audit: type=1326 audit(1763687551.573:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 115.874392][ T6178] Zero length message leads to an empty skb [ 116.016671][ T30] audit: type=1326 audit(1763687551.573:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 116.153737][ T30] audit: type=1326 audit(1763687551.573:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 116.266853][ T30] audit: type=1326 audit(1763687551.573:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 116.367112][ T30] audit: type=1326 audit(1763687551.573:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de378f749 code=0x7ffc0000 [ 116.467754][ T6191] loop1: detected capacity change from 0 to 128 [ 116.862880][ T6203] loop0: detected capacity change from 0 to 512 [ 116.964316][ T6203] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 117.010356][ T6203] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 117.036814][ T6203] System zones: 0-1, 15-15, 18-18, 34-34 [ 117.119127][ T6203] EXT4-fs (loop0): orphan cleanup on readonly fs [ 117.156628][ T6203] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 117.201088][ T6203] EXT4-fs warning (device loop0): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 117.273729][ T6203] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 117.318174][ T6203] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.102: bg 0: block 40: padding at end of block bitmap is not set [ 117.337013][ T6203] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 117.337204][ T6191] syz.1.98: attempt to access beyond end of device [ 117.337204][ T6191] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 117.371961][ T6191] syz.1.98: attempt to access beyond end of device [ 117.371961][ T6191] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 117.389775][ T6191] syz.1.98: attempt to access beyond end of device [ 117.389775][ T6191] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 117.406816][ T6191] syz.1.98: attempt to access beyond end of device [ 117.406816][ T6191] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 117.509400][ T6191] syz.1.98: attempt to access beyond end of device [ 117.509400][ T6191] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 117.526696][ T6203] EXT4-fs (loop0): 1 truncate cleaned up [ 117.704616][ T6203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.738455][ T6191] syz.1.98: attempt to access beyond end of device [ 117.738455][ T6191] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 117.822355][ T6203] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.102: bad symlink. [ 117.837533][ T6191] syz.1.98: attempt to access beyond end of device [ 117.837533][ T6191] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 117.848689][ T6203] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.102: bad symlink. [ 117.853827][ T6191] syz.1.98: attempt to access beyond end of device [ 117.853827][ T6191] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 117.876658][ T6217] loop4: detected capacity change from 0 to 2048 [ 117.882019][ T6191] syz.1.98: attempt to access beyond end of device [ 117.882019][ T6191] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 117.902588][ T6191] syz.1.98: attempt to access beyond end of device [ 117.902588][ T6191] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 118.065407][ T6217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.131241][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.437605][ T6240] capability: warning: `syz.3.117' uses deprecated v2 capabilities in a way that may be insecure [ 120.267106][ T6257] loop3: detected capacity change from 0 to 1024 [ 120.448682][ T6254] netlink: 'syz.4.124': attribute type 3 has an invalid length. [ 120.494809][ T6254] netlink: 48 bytes leftover after parsing attributes in process `syz.4.124'. [ 120.699130][ T6257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.727488][ T6257] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.276507][ T6257] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.122: inode has both inline data and extents flags [ 121.411388][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.797695][ T6151] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.977674][ T6151] usb 1-1: Using ep0 maxpacket: 32 [ 121.997313][ T6151] usb 1-1: config index 0 descriptor too short (expected 6683, got 27) [ 122.007111][ T6151] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 122.016861][ T6151] usb 1-1: config 0 has no interface number 0 [ 122.023949][ T6151] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.036731][ T6151] usb 1-1: config 0 interface 85 has no altsetting 0 [ 122.050468][ T6151] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 122.069163][ T6151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.095244][ T6151] usb 1-1: Product: syz [ 122.105691][ T6151] usb 1-1: Manufacturer: syz [ 122.117289][ T6151] usb 1-1: SerialNumber: syz [ 122.130019][ T6298] loop1: detected capacity change from 0 to 8 [ 122.146181][ T6151] usb 1-1: config 0 descriptor?? [ 123.133390][ T6151] appletouch 1-1:0.85: Geyser mode initialized. [ 123.159682][ T6151] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 123.203191][ T6151] usb 1-1: USB disconnect, device number 3 [ 123.203333][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 123.342220][ T6151] appletouch 1-1:0.85: input: appletouch disconnected [ 123.475548][ T6326] loop2: detected capacity change from 0 to 16 [ 123.486203][ T6326] erofs (device loop2): mounted with root inode @ nid 36. [ 123.612360][ T5973] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.877733][ T5973] usb 4-1: Using ep0 maxpacket: 16 [ 124.280615][ T5973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 124.359805][ T5973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.460920][ T5973] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.536698][ T5973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.567971][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.628628][ T5973] usb 4-1: Product: syz [ 124.633568][ T5973] usb 4-1: Manufacturer: syz [ 124.696924][ T5973] usb 4-1: SerialNumber: syz [ 125.270874][ T5973] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 125.394560][ T6350] netlink: 128 bytes leftover after parsing attributes in process `syz.2.161'. [ 125.406650][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'. [ 125.468374][ T5973] usb 4-1: USB disconnect, device number 2 [ 125.515416][ T6356] loop0: detected capacity change from 0 to 1024 [ 125.558696][ T6356] hfsplus: invalid length 789 has been corrected to 255 [ 125.616615][ T6360] loop2: detected capacity change from 0 to 7 [ 125.635419][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.678499][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.689583][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.705739][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.716384][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.738746][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.749476][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.763141][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.773118][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.783051][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.793369][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.807268][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.819187][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.831606][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.842545][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.852917][ T6360] ldm_validate_partition_table(): Disk read failed. [ 125.871203][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.882026][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.919767][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.929791][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.962331][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.973418][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 125.993718][ T6367] loop4: detected capacity change from 0 to 16 [ 126.008046][ T6360] Dev loop2: unable to read RDB block 0 [ 126.026476][ T6367] erofs (device loop4): mounted with root inode @ nid 36. [ 126.037341][ T6360] loop2: unable to read partition table [ 126.100776][ T6360] loop2: partition table beyond EOD, truncated [ 126.110491][ T6360] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 126.694443][ T6367] bio_check_eod: 87 callbacks suppressed [ 126.694461][ T6367] syz.4.168: attempt to access beyond end of device [ 126.694461][ T6367] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 126.751402][ T6367] syz.4.168: attempt to access beyond end of device [ 126.751402][ T6367] loop4: rw=524288, sector=40, nr_sectors = 64 limit=16 [ 126.907659][ T6367] syz.4.168: attempt to access beyond end of device [ 126.907659][ T6367] loop4: rw=0, sector=16, nr_sectors = 8 limit=16 [ 126.978649][ T30] audit: type=1800 audit(1763687563.353:14): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.168" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 127.105988][ T6383] loop2: detected capacity change from 0 to 512 [ 127.209055][ T5830] erofs (device loop4): bogus dirent @ nid 36 [ 127.224544][ T6383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.297631][ T6383] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.475181][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.804589][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.833986][ T6420] loop3: detected capacity change from 0 to 128 [ 129.000367][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.159747][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.491654][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.599893][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.612507][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.622786][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.638473][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.648728][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.046621][ T6454] loop1: detected capacity change from 0 to 16 [ 130.135062][ T6454] erofs (device loop1): mounted with root inode @ nid 36. [ 130.367674][ T43] bridge_slave_1: left allmulticast mode [ 130.404119][ T43] bridge_slave_1: left promiscuous mode [ 130.462562][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.573694][ T43] bridge_slave_0: left allmulticast mode [ 130.608393][ T43] bridge_slave_0: left promiscuous mode [ 130.635513][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.397384][ T52] Bluetooth: hci3: command tx timeout [ 132.937599][ T52] Bluetooth: hci4: command tx timeout [ 133.618072][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.633248][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.690201][ T43] bond0 (unregistering): Released all slaves [ 134.203253][ T6502] loop1: detected capacity change from 0 to 256 [ 134.236510][ T6502] exfat: Invalid uid '0x00000000ffffffff' [ 134.466253][ T5837] Bluetooth: hci3: command tx timeout [ 134.698227][ T30] audit: type=1326 audit(1763687827.072:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2b8f749 code=0x7ffc0000 [ 134.806364][ T30] audit: type=1326 audit(1763687827.072:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2b8f749 code=0x7ffc0000 [ 134.900097][ T30] audit: type=1326 audit(1763687827.072:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fa0d2b8f749 code=0x7ffc0000 [ 135.007370][ T30] audit: type=1326 audit(1763687827.072:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2b8f749 code=0x7ffc0000 [ 135.107416][ T30] audit: type=1326 audit(1763687827.072:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2b8f749 code=0x7ffc0000 [ 135.479639][ T43] hsr_slave_0: left promiscuous mode [ 135.537136][ T43] hsr_slave_1: left promiscuous mode [ 135.620256][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.825158][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.539430][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.551657][ T5837] Bluetooth: hci3: command tx timeout [ 136.577561][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.620282][ T43] veth1_macvtap: left promiscuous mode [ 136.652507][ T43] veth0_macvtap: left promiscuous mode [ 136.687953][ T43] veth1_vlan: left promiscuous mode [ 136.717426][ T43] veth0_vlan: left promiscuous mode [ 137.411950][ T6552] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 137.781872][ T6562] loop3: detected capacity change from 0 to 1024 [ 137.984705][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 138.102233][ T223] hfsplus: b-tree write err: -5, ino 4 [ 138.518941][ T43] team0 (unregistering): Port device team_slave_1 removed [ 138.618288][ T5837] Bluetooth: hci3: command tx timeout [ 138.628437][ T43] team0 (unregistering): Port device team_slave_0 removed [ 138.700653][ T6578] loop3: detected capacity change from 0 to 512 [ 138.709965][ T6578] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 138.722956][ T6578] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 138.734754][ T6578] EXT4-fs (loop3): group descriptors corrupted! [ 138.954408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.967090][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.579787][ T6584] cgroup: Invalid name [ 139.803864][ T6588] loop3: detected capacity change from 0 to 256 [ 139.838175][ T6588] vfat: Bad value for 'fmask' [ 140.026031][ T6592] Bluetooth: MGMT ver 1.23 [ 140.404025][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 141.311289][ T6611] loop2: detected capacity change from 0 to 8 [ 143.551269][ T5976] IPVS: starting estimator thread 0... [ 143.656251][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.727345][ T6630] IPVS: using max 32 ests per chain, 76800 per kthread [ 143.727442][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.763105][ T6440] bridge_slave_0: entered allmulticast mode [ 143.824844][ T6440] bridge_slave_0: entered promiscuous mode [ 143.894974][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.932033][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.969044][ T6440] bridge_slave_1: entered allmulticast mode [ 144.005371][ T6440] bridge_slave_1: entered promiscuous mode [ 144.378790][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.424861][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.623990][ T6440] team0: Port device team_slave_0 added [ 144.677773][ T6440] team0: Port device team_slave_1 added [ 144.821859][ T6673] loop2: detected capacity change from 0 to 16 [ 144.862454][ T6673] erofs (device loop2): mounted with root inode @ nid 36. [ 144.908458][ T6676] loop0: detected capacity change from 0 to 2048 [ 145.109323][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.474528][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.665482][ T6676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.771808][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.832137][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.877896][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.922685][ T6692] loop1: detected capacity change from 0 to 256 [ 145.949973][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.983929][ T6692] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 145.998522][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.033537][ T6692] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 146.059230][ T6692] exFAT-fs (loop1): failed to load alloc-bitmap [ 146.065879][ T6692] exFAT-fs (loop1): failed to recognize exfat type [ 146.268979][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 146.295511][ T6440] hsr_slave_0: entered promiscuous mode [ 146.341676][ T6440] hsr_slave_1: entered promiscuous mode [ 146.375935][ T6440] debugfs: 'hsr0' already exists in 'hsr' [ 146.413480][ T6440] Cannot create hsr debugfs directory [ 146.635627][ T9] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 146.646412][ T9] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 146.655748][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.668684][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.679297][ T9] usb 3-1: config 0 has no interface number 0 [ 146.687097][ T9] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 146.716663][ T9] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 147.577303][ T9] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.598587][ T9] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.614536][ T9] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 147.630965][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.665353][ T6719] loop1: detected capacity change from 0 to 1024 [ 147.683185][ T9] usb 3-1: config 0 descriptor?? [ 147.711397][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 147.736708][ T6723] loop0: detected capacity change from 0 to 16 [ 147.834327][ T6723] erofs (device loop0): mounted with root inode @ nid 36. [ 147.912834][ T9] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 147.942058][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 147.957414][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 148.830028][ T9] usb 3-1: USB disconnect, device number 2 [ 148.913122][ T6740] loop2: detected capacity change from 0 to 512 [ 148.914584][ T6741] loop0: detected capacity change from 0 to 512 [ 148.948401][ T6741] EXT4-fs: Ignoring removed nobh option [ 148.992255][ T6741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 149.019956][ T6741] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 149.049179][ T6741] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.290: invalid indirect mapped block 256 (level 1) [ 149.065598][ T6741] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.290: invalid indirect mapped block 2683928664 (level 1) [ 149.103788][ T6741] EXT4-fs (loop0): 1 truncate cleaned up [ 149.120979][ T6740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.123116][ T6741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.157058][ T6740] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.965236][ T6440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.069674][ T6440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.143246][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.201208][ T6757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.295'. [ 150.313335][ T6759] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz.2.292: invalid size [ 150.450374][ T6440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.705102][ T6768] loop1: detected capacity change from 0 to 1024 [ 150.720140][ T6757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.295'. [ 150.734185][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.787136][ T6440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.799968][ T6768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.856612][ T30] audit: type=1800 audit(1763687843.222:20): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.298" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 150.946262][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 150.959402][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 150.968640][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 150.978686][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.991040][ C1] RIP: 0010:__queue_work+0xa4/0xf90 [ 150.997044][ C1] Code: 10 31 ff 89 ee e8 0c 2a 37 00 85 ed 0f 85 9d 0c 00 00 e8 bf 25 37 00 4d 8d b5 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 18 84 c0 0f 85 c4 0c 00 00 4c 89 34 24 41 8b 2e 89 ee 81 [ 151.019536][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010002 [ 151.026142][ C1] RAX: 0000000000000038 RBX: dffffc0000000000 RCX: ffff88801d2d5b80 [ 151.035295][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.044617][ C1] RBP: 0000000000000000 R08: ffff888076e7fb47 R09: 1ffff1100edcff68 [ 151.053686][ C1] R10: dffffc0000000000 R11: ffffed100edcff69 R12: 0000000000000008 [ 151.062452][ C1] R13: 0000000000000000 R14: 00000000000001c0 R15: 0000000000000200 [ 151.070980][ C1] FS: 0000000000000000(0000) GS:ffff888125fb9000(0000) knlGS:0000000000000000 [ 151.080118][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.086982][ C1] CR2: 00007fe8b9d156c0 CR3: 0000000073e06000 CR4: 00000000003526f0 [ 151.095744][ C1] Call Trace: [ 151.099905][ C1] [ 151.102850][ C1] ? rcu_is_watching+0x15/0xb0 [ 151.108133][ C1] queue_work_on+0x181/0x270 [ 151.113513][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.120926][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 151.127177][ C1] ? iomap_dio_done+0x380/0x520 [ 151.132399][ C1] iomap_dio_bio_end_io+0xf4/0x1c0 [ 151.138132][ C1] blk_update_request+0x57e/0xe60 [ 151.143267][ C1] blk_mq_end_request+0x3e/0x70 [ 151.148419][ C1] blk_done_softirq+0x10a/0x160 [ 151.153762][ C1] handle_softirqs+0x27d/0x880 [ 151.158872][ C1] ? run_ksoftirqd+0x9b/0x100 [ 151.163876][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 151.169911][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 151.175469][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 151.181145][ C1] run_ksoftirqd+0x9b/0x100 [ 151.186012][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 151.191709][ C1] smpboot_thread_fn+0x542/0xa60 [ 151.197256][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 151.202738][ C1] kthread+0x711/0x8a0 [ 151.207270][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 151.213022][ C1] ? __pfx_kthread+0x10/0x10 [ 151.217834][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.224044][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.230048][ C1] ? __pfx_kthread+0x10/0x10 [ 151.235349][ C1] ret_from_fork+0x599/0xb30 [ 151.240729][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 151.246713][ C1] ? __switch_to_asm+0x39/0x70 [ 151.252415][ C1] ? __switch_to_asm+0x33/0x70 [ 151.257790][ C1] ? __pfx_kthread+0x10/0x10 [ 151.263293][ C1] ret_from_fork_asm+0x1a/0x30 [ 151.268510][ C1] [ 151.271883][ C1] Modules linked in: [ 151.276056][ C1] ---[ end trace 0000000000000000 ]--- [ 151.282338][ C1] RIP: 0010:__queue_work+0xa4/0xf90 [ 151.288183][ C1] Code: 10 31 ff 89 ee e8 0c 2a 37 00 85 ed 0f 85 9d 0c 00 00 e8 bf 25 37 00 4d 8d b5 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 30 <0f> b6 04 18 84 c0 0f 85 c4 0c 00 00 4c 89 34 24 41 8b 2e 89 ee 81 [ 151.310118][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010002 [ 151.316906][ C1] RAX: 0000000000000038 RBX: dffffc0000000000 RCX: ffff88801d2d5b80 [ 151.326013][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.334651][ C1] RBP: 0000000000000000 R08: ffff888076e7fb47 R09: 1ffff1100edcff68 [ 151.344204][ C1] R10: dffffc0000000000 R11: ffffed100edcff69 R12: 0000000000000008 [ 151.352909][ C1] R13: 0000000000000000 R14: 00000000000001c0 R15: 0000000000000200 [ 151.362514][ C1] FS: 0000000000000000(0000) GS:ffff888125fb9000(0000) knlGS:0000000000000000 [ 151.373038][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.379996][ C1] CR2: 00007fe8b9d156c0 CR3: 0000000073e06000 CR4: 00000000003526f0 [ 151.388820][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 151.397403][ C1] Kernel Offset: disabled [ 151.402185][ C1] Rebooting in 86400 seconds..