last executing test programs: 3m36.584463467s ago: executing program 3 (id=657): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$dri(0x0, 0x1ff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/4068, 0xfe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 3m35.309701374s ago: executing program 3 (id=661): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0x4, 0x8}, {0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800ef0ad89350b1359334c0b6ad000000b5945318d6a7dc6330f6049656eb2d295ecdd9892a847b1dacbd9fd232be9d4c970586688dffe451b44752c2534f0ff70692c5270249ba21c7a3f6d37cdd33abea7813c4660fa45e1c1c8347686d9011335be5139cb698197e32dd4741c8a0120572c585e02e837a42b5a097b4ca9797bdb25dee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000300)="2e000300010000", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m34.13133681s ago: executing program 3 (id=663): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_uring_setup(0x3055, 0x0) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x80]}, 0x8, 0x80800) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x1, 0x10000, 0x8}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) clock_adjtime(0x0, &(0x7f0000000140)={0x930b}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x58) 3m33.687963002s ago: executing program 3 (id=667): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) socket(0xa, 0x3, 0x6) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150b, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x200000, &(0x7f0000002180)={[{@nobh}], [{@euid_gt}, {@uid_lt}, {@seclabel}]}, 0xfc, 0x561, &(0x7f0000001c00)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2UDux29AAAAAAAAAAAAAAAAAAAALA3HIoY7fT5/9RfQ7vdO2DHbfCV38ALrnv+Z1v68U1PwJ7k/z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+DaSv7/em4HOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAvhvPnzqVLY+XBtWJaL11ZWpyrXjlVKtfm8vOLxXyxunA5P1utzlbK+WJ1frO/V6lWL09Nx+LVyXq5Vp+sLS1/MV9dvPSwsao88kyiAgAAAAAAAAAAAAAAAAAAgOdLbWl5rlCplBcUFLZVGN4b3VDoc2G3RyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOT/AAAA//9+Fz+5") openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x428}}}, 0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(r4, &(0x7f00000000c0)='net/snmp6\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x308, 0x178, 0x178, 0x308, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaae9c7f8f1000028006400000002907800000000e000000211009078e0000002000000020000000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x4c002, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6ffffffffffffffd, 0x0, 0x0, 0xa, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) 3m31.016203125s ago: executing program 3 (id=672): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x802) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x22, &(0x7f00000003c0)=0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) io_submit(r6, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x8, r7, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0xfffffffc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3m29.855038681s ago: executing program 3 (id=677): setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0), 0x4) 3m29.393875263s ago: executing program 32 (id=677): setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0), 0x4) 55.124220931s ago: executing program 2 (id=1080): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x4000181) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rcu_utilization\x00', r4}, 0x10) pipe2$9p(0x0, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) read(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000200000800000007000000", @ANYRES32=r7], 0x1c}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) 54.191011726s ago: executing program 2 (id=1082): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 52.761829613s ago: executing program 2 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 51.245329851s ago: executing program 2 (id=1088): unshare(0x62040200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x800d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r0, 0xffffffffffffffff, 0x0) 48.169660997s ago: executing program 2 (id=1101): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@bsdgroups}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 46.748082084s ago: executing program 2 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x2, &(0x7f0000003040)={0x21, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000066314d12ad7e4f77000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe000000010000000000000000000000000000000000000080"], 0x119) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 31.68240577s ago: executing program 33 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x2, &(0x7f0000003040)={0x21, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000066314d12ad7e4f77000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe000000010000000000000000000000000000000000000080"], 0x119) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 14.691078446s ago: executing program 4 (id=1176): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) statx(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x8, &(0x7f0000002380)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0xd511}}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 14.306374007s ago: executing program 4 (id=1177): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000002c0)={0x5, 0x0, 0x200000, 0x0, 0x2, "a05c7b5d00008023e9c5bcf5ff7700"}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000fc0)=""/102400, 0x19000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0xfffd, 0xfffffff8, @loopback, 0x591}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0xb, 0x3ffffc, 0x0, 0x4, 0xcf7, 0x0, 0xf2, 0x5}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8c0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x3) 12.908784544s ago: executing program 4 (id=1178): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 12.242650918s ago: executing program 4 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000240012800b0001006272696467650000140002800800180004"], 0x44}}, 0x0) 11.481035202s ago: executing program 4 (id=1186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x55f, &(0x7f0000001040)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f0000002340)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{0x2, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x3}], {}, [{}, {}], {0x10, 0x2}}, 0x5c, 0x0) 10.598630576s ago: executing program 1 (id=1188): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 7.445083672s ago: executing program 1 (id=1194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pread64(r1, &(0x7f0000000000)=""/227, 0xe3, 0xfa) 7.263395043s ago: executing program 4 (id=1195): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 6.976109305s ago: executing program 5 (id=1196): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x290, &(0x7f0000000200)="$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") 6.961218015s ago: executing program 1 (id=1197): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x20000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 6.409624767s ago: executing program 1 (id=1199): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b73570000", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000700000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0xfe8a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32], 0x48}}, 0x0) 5.9967516s ago: executing program 0 (id=1200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.86573318s ago: executing program 5 (id=1201): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000140)) 5.622644181s ago: executing program 5 (id=1202): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000032680)}], 0x1}}], 0x1, 0x4040060) pread64(0xffffffffffffffff, &(0x7f000004bfc0)=""/102384, 0x18ff0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x1) pipe(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x11, 0x803, 0x0) sendto$l2tp(r0, &(0x7f0000000100)="5a6057da8e50b1a97dce32db8278c752a6568decef0e7c3d2e3526dafad0d1b6090a0e0fd1af272cf2a2db73f4476878a3649a626ab8a30348e3d1827c0e058ab9d3a427a6e135ee71e3553d954c2a9dad589a1b021a297acb6215d8478f0127a46a7ad8ae550a89a68811166274f16bd98dc8", 0x73, 0x4000, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="cf29d238e0472f7e9d354ce7c16e811451e6abe11bb9484ee27a36533c4106615b54d6383dc88700000000c1c857e6acde98d876395440df625e7fced141d3ceaaddff7a3f7ce444d77e75d650c48e59a47ea8273a3c2c0ce442ba5d07266a0fe23f1d2a3bab7d3d4270b2fe4a877613d889ac4065f3f70ae378d073550724a2af7223f441c80ad009ac5a8904bf5630d6cb8dc57100365e06c99fa7d9a8e9ce41d909dd45c4de92b30e6a94bb791f47d2c170452e8049130cf5", 0xba) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000013c0)) read$dsp(r3, &(0x7f0000000440)=""/171, 0xab) 5.494207952s ago: executing program 0 (id=1203): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000080)=""/123, 0x7b}], 0x1, 0x5, 0x0) 5.441079512s ago: executing program 1 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001cc0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x0, 0x57a, &(0x7f0000001d80)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lchown(&(0x7f0000000e40)='./file1\x00', 0xffffffffffffffff, 0xee01) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x0, 0x3}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x28) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) recvfrom$inet6(r2, 0x0, 0x0, 0x40012000, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 5.307449753s ago: executing program 0 (id=1205): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000280)='./file1\x00', 0x109042, 0x1d2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") 4.804942556s ago: executing program 0 (id=1206): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x802) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x22, &(0x7f00000003c0)=0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x400000000812d000, 0x9, 0x3, 0x8, 0x8, r8, 0x0}]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0xfffffffc) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2.453906597s ago: executing program 5 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.701367381s ago: executing program 1 (id=1208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.005960144s ago: executing program 0 (id=1209): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "6b92a13774ec4d0e9c7a8e7d7d3de18707fbab6e3dffd37a67ee45cc2f77f830", "8a1f80139a799182d6725599e25082f8", {"9c0819b1de901baa65999d34cec64ee8", "d2233a28ba87c0dd91c3baa08773528e"}}}}}}}}, 0x0) 911.390775ms ago: executing program 0 (id=1210): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e0a, &(0x7f000000c740)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x1000200201005) open(0x0, 0x14937e, 0x0) 627.396927ms ago: executing program 5 (id=1211): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) lseek(r0, 0x1, 0x2) 0s ago: executing program 5 (id=1212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): link becomes ready [ 62.674680][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.686894][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.699531][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.709476][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.720085][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.730151][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.742281][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.761273][ T4166] device veth0_macvtap entered promiscuous mode [ 62.774026][ T4166] device veth1_macvtap entered promiscuous mode [ 62.784252][ T4165] device veth0_macvtap entered promiscuous mode [ 62.793505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.802208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.810813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.820203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.829918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.840448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.861235][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.870875][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.881055][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.890240][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.912222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.936378][ T4165] device veth1_macvtap entered promiscuous mode [ 62.959244][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.971103][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.980400][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.989090][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.997515][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.005663][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.021741][ T4173] device veth0_vlan entered promiscuous mode [ 63.046085][ T4178] device veth0_vlan entered promiscuous mode [ 63.062384][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.072719][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.091474][ T4178] device veth1_vlan entered promiscuous mode [ 63.102745][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.114475][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.128705][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.141346][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.159667][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.167446][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.175721][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.185023][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.199941][ T4173] device veth1_vlan entered promiscuous mode [ 63.209192][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.220407][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.230359][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.241655][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.253375][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.263698][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.275366][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.288342][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.309739][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.320588][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.330751][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.341247][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.353867][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.365313][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.374359][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.383214][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.392478][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.403208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.413022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.423066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.432798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.441744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.450800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.460163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.498437][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.506525][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.531072][ T4165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.540650][ T4165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.549855][ T4165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.558933][ T4165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.579948][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.588698][ T4216] Bluetooth: hci1: command 0x040f tx timeout [ 63.589094][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.594904][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 63.609624][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.617457][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.626263][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 63.626707][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.643682][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.652358][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.666467][ T4173] device veth0_macvtap entered promiscuous mode [ 63.678131][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 63.684580][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 63.700696][ T4178] device veth0_macvtap entered promiscuous mode [ 63.722092][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.730593][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.758768][ T4178] device veth1_macvtap entered promiscuous mode [ 63.770839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.779234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.787228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.797474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.811277][ T4173] device veth1_macvtap entered promiscuous mode [ 63.835774][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.852060][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.862379][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.873165][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.883941][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.894615][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.906721][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.951303][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.972164][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.982551][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.994275][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.004602][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.015771][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.027286][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.053030][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.062016][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.075644][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.085525][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.097282][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.105684][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.114980][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.124288][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.133777][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.147564][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.160143][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.170070][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.180780][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.190861][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.201702][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.211737][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.222943][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.235291][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.265699][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.268389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.283843][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.291205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.330190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.483216][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.502086][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.512847][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.523729][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.534231][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.545442][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.559788][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.570309][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.584116][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.630242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.646363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.675475][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.700243][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.709574][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.718447][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.741019][ T358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.761688][ T358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.770942][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.793115][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.825298][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.840567][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.866769][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.895498][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.921469][ T3056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.942615][ T3056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.959766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.972500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.027508][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.051082][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.063859][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.085910][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.123976][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.163764][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.175327][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.183673][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.213478][ T4250] loop1: detected capacity change from 0 to 1024 [ 65.227313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.240370][ T4252] loop2: detected capacity change from 0 to 1024 [ 65.420312][ T4252] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.436239][ T4250] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.688626][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 65.694845][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 65.701114][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 65.800373][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 65.800462][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 66.683112][ T4271] device syzkaller0 entered promiscuous mode [ 68.369171][ T4266] syz.4.7 (4266) used greatest stack depth: 19800 bytes left [ 69.587917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.597323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.606283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 69.615313][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.621929][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 69.625468][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.704232][ T4289] nbd2: detected capacity change from 0 to 67108884 [ 69.753945][ T263] block nbd2: Send control failed (result -89) [ 69.760729][ T263] block nbd2: Request send failed, requeueing [ 69.772202][ T4181] block nbd2: Receive control failed (result -32) [ 69.781109][ T263] block nbd2: Dead connection, failed to find a fallback [ 69.788361][ T263] block nbd2: shutting down sockets [ 69.793964][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.805609][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.820555][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.831812][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.840334][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.851273][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.859672][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.871226][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.887861][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.898760][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.906729][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.917658][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.925712][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.937000][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.946272][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.957236][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.965207][ T4159] ldm_validate_partition_table(): Disk read failed. [ 69.971836][ T4294] device syzkaller0 entered promiscuous mode [ 69.974133][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.989321][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 69.997277][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.008639][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 70.016719][ T4159] Dev nbd2: unable to read RDB block 0 [ 70.031523][ T4159] nbd2: unable to read partition table [ 70.095204][ T4159] ldm_validate_partition_table(): Disk read failed. [ 70.154239][ T4159] Dev nbd2: unable to read RDB block 0 [ 70.214668][ T4159] nbd2: unable to read partition table [ 71.356748][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364301][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.389129][ T4319] loop4: detected capacity change from 0 to 1024 [ 71.486929][ T4319] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.756049][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 74.286284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.674577][ T3142] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.852629][ T4352] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.049911][ T3142] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 75.069702][ T3142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.111082][ T3142] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.127865][ T3142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.217672][ T3142] usb 5-1: config 0 descriptor?? [ 75.266671][ T4341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.326938][ T3142] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 75.816421][ T4364] loop0: detected capacity change from 0 to 1024 [ 76.520575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.530606][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.933499][ T4364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.715423][ T4213] usb 5-1: USB disconnect, device number 2 [ 77.882241][ T4380] loop4: detected capacity change from 0 to 1024 [ 78.074716][ T4380] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.294640][ T4406] sched: RT throttling activated [ 81.590096][ T1323] cfg80211: failed to load regulatory.db [ 82.086051][ T4408] device syzkaller0 entered promiscuous mode [ 83.928938][ T4443] loop1: detected capacity change from 0 to 1024 [ 84.482718][ T4443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.367406][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 86.777939][ T3142] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.026443][ T4475] device syzkaller0 entered promiscuous mode [ 87.478672][ T4480] loop1: detected capacity change from 0 to 1024 [ 87.557731][ T3142] usb 4-1: Using ep0 maxpacket: 8 [ 87.678098][ T3142] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.714268][ T3142] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.762532][ T4480] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.807849][ T3142] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.818428][ T3142] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.832089][ T3142] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.841524][ T3142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.969597][ T3142] usb 4-1: GET_CAPABILITIES returned 0 [ 88.975095][ T3142] usbtmc 4-1:16.0: can't read capabilities [ 89.499993][ T3142] usb 4-1: USB disconnect, device number 2 [ 91.624288][ T4552] loop0: detected capacity change from 0 to 1024 [ 91.952039][ T4552] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.171948][ T4606] fuse: Bad value for 'user_id' [ 96.185901][ T4608] loop0: detected capacity change from 0 to 1024 [ 96.439869][ T4608] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.902491][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.917787][ T23] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.948789][ T23] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.974264][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.988269][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.130741][ T4612] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 99.634704][ T4212] usb 5-1: USB disconnect, device number 3 [ 100.045980][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 100.881774][ T4674] 8021q: adding VLAN 0 to HW filter on device team1 [ 100.900629][ T4678] loop4: detected capacity change from 0 to 1024 [ 101.106377][ T4678] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.034078][ T4723] syz.3.128 sent an empty control message without MSG_MORE. [ 106.823387][ T4744] loop4: detected capacity change from 0 to 1024 [ 106.912321][ T4744] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.994804][ T4754] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.725165][ T4811] loop1: detected capacity change from 0 to 1024 [ 110.925243][ T4811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.790146][ T4888] loop4: detected capacity change from 0 to 1024 [ 115.587443][ T4905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.169'. [ 115.775027][ T4888] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.240194][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 121.506489][ T4996] loop1: detected capacity change from 0 to 1024 [ 122.551624][ T26] audit: type=1800 audit(1731533322.185:2): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.190" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 122.572207][ T5001] fuse: Bad value for 'group_id' [ 122.718056][ T1107] Bluetooth: hci5: command 0x1003 tx timeout [ 122.760211][ T4175] Bluetooth: hci5: sending frame failed (-49) [ 122.822142][ T5011] loop1: detected capacity change from 0 to 1024 [ 122.853137][ T5012] netlink: 277 bytes leftover after parsing attributes in process `syz.3.188'. [ 123.158857][ T5011] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.011606][ T4209] Bluetooth: hci5: command 0x1001 tx timeout [ 125.018349][ T4175] Bluetooth: hci5: sending frame failed (-49) [ 125.983353][ T5025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.196'. [ 127.038147][ T4209] Bluetooth: hci5: command 0x1009 tx timeout [ 127.118819][ T5047] loop2: detected capacity change from 0 to 1024 [ 127.128415][ T5045] loop3: detected capacity change from 0 to 1024 [ 127.387168][ T5045] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.893079][ T5056] device syzkaller0 entered promiscuous mode [ 128.439040][ T26] audit: type=1800 audit(1731533328.075:3): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 133.248594][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254988][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.492280][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 133.541493][ T5089] 8021q: adding VLAN 0 to HW filter on device team1 [ 133.919603][ T5095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.215'. [ 134.049223][ T5083] netlink: 277 bytes leftover after parsing attributes in process `syz.1.211'. [ 134.625505][ T5105] loop0: detected capacity change from 0 to 1024 [ 134.634654][ T5103] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 134.904925][ T5105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.454771][ T5132] device syzkaller0 entered promiscuous mode [ 140.697211][ T5165] loop4: detected capacity change from 0 to 1024 [ 140.745361][ T5157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.230'. [ 140.883467][ T5165] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.019999][ T5191] device syzkaller0 entered promiscuous mode [ 146.070093][ T5209] loop2: detected capacity change from 0 to 1024 [ 146.529688][ T5209] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.933783][ T5196] netlink: 277 bytes leftover after parsing attributes in process `syz.1.240'. [ 150.228900][ T5257] device syzkaller0 entered promiscuous mode [ 153.676577][ T5288] loop0: detected capacity change from 0 to 1024 [ 154.141028][ T5288] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.702868][ T5321] loop1: detected capacity change from 0 to 1024 [ 156.145708][ T26] audit: type=1800 audit(1731533355.775:4): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 157.940012][ T5350] ip6t_rpfilter: unknown options [ 158.840804][ T5355] loop0: detected capacity change from 0 to 1024 [ 160.230280][ T5355] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.980238][ T5383] loop4: detected capacity change from 0 to 1024 [ 163.600252][ T5399] ip6t_rpfilter: unknown options [ 163.667026][ T26] audit: type=1800 audit(1731533363.105:5): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.282" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 163.937033][ T5403] loop3: detected capacity change from 0 to 1024 [ 164.424790][ T5414] device syzkaller0 entered promiscuous mode [ 166.996068][ T5403] EXT4-fs: error -4 creating inode table initialization thread [ 167.579269][ T5403] EXT4-fs (loop3): mount failed [ 168.070535][ T5423] loop1: detected capacity change from 0 to 1024 [ 168.230771][ T5423] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.037500][ T5447] loop4: detected capacity change from 0 to 1024 [ 170.462868][ T5455] netlink: 277 bytes leftover after parsing attributes in process `syz.2.295'. [ 170.487846][ T26] audit: type=1800 audit(1731533370.125:6): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.299" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 171.234119][ T5461] ip6t_rpfilter: unknown options [ 172.047304][ T5474] loop1: detected capacity change from 0 to 1024 [ 172.260664][ T5477] device syzkaller0 entered promiscuous mode [ 172.356627][ T5474] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.344726][ T5507] loop0: detected capacity change from 0 to 1024 [ 174.652775][ T5507] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.743605][ T5536] ip6t_rpfilter: unknown options [ 176.708888][ T5553] loop2: detected capacity change from 0 to 1024 [ 176.812539][ T5553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.265119][ T5574] device syzkaller0 entered promiscuous mode [ 179.728588][ T5591] loop0: detected capacity change from 0 to 1024 [ 180.442442][ T5591] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.039763][ T5062] Bluetooth: hci1: command 0x0406 tx timeout [ 181.045883][ T5062] Bluetooth: hci3: command 0x0406 tx timeout [ 181.052054][ T5062] Bluetooth: hci0: command 0x0406 tx timeout [ 181.058182][ T5062] Bluetooth: hci2: command 0x0406 tx timeout [ 181.064252][ T5062] Bluetooth: hci4: command 0x0406 tx timeout [ 181.178005][ T5600] ip6t_rpfilter: unknown options [ 181.910491][ T5612] loop3: detected capacity change from 0 to 1024 [ 182.542449][ T5612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.436171][ T5658] device syzkaller0 entered promiscuous mode [ 185.470156][ T5659] ip6t_rpfilter: unknown options [ 187.274935][ T5678] loop3: detected capacity change from 0 to 1024 [ 187.866400][ T5678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.225201][ T5706] ip6t_rpfilter: unknown options [ 192.485789][ T5736] loop0: detected capacity change from 0 to 1024 [ 193.232665][ T26] audit: type=1800 audit(1731533392.855:7): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.365" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 194.240013][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246708][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.398686][ T5798] netlink: 'syz.2.374': attribute type 13 has an invalid length. [ 196.497823][ T5798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.374'. [ 196.544383][ T5798] syz_tun: refused to change device tx_queue_len [ 196.665334][ T5798] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 198.766912][ T5819] loop0: detected capacity change from 0 to 1024 [ 199.277662][ T26] audit: type=1800 audit(1731533398.895:8): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.379" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 202.376803][ T5855] fuse: Unknown parameter 'grou00000000000000000000' [ 208.483712][ T5926] fuse: Unknown parameter 'grou00000000000000000000' [ 208.871943][ T5932] loop3: detected capacity change from 0 to 1024 [ 210.158738][ T26] audit: type=1800 audit(1731533409.785:9): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.402" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 213.302106][ T5972] netlink: 277 bytes leftover after parsing attributes in process `syz.3.409'. [ 213.934645][ T5977] device syzkaller0 entered promiscuous mode [ 216.017097][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 220.406189][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 220.622403][ T6083] netlink: 277 bytes leftover after parsing attributes in process `syz.2.432'. [ 220.731519][ T6088] loop3: detected capacity change from 0 to 1024 [ 221.899491][ T26] audit: type=1800 audit(1731533421.535:10): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.438" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 224.351252][ T6123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.446'. [ 225.251772][ T6150] loop1: detected capacity change from 0 to 1024 [ 226.595286][ T26] audit: type=1800 audit(1731533426.215:11): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.450" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 228.033155][ T6188] fuse: Unknown parameter 'group_i00000000000000000000' [ 231.125788][ T6239] loop0: detected capacity change from 0 to 1024 [ 232.337932][ T26] audit: type=1800 audit(1731533431.935:12): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.464" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 232.498933][ T6250] fuse: Unknown parameter 'group_id00000000000000000000' [ 235.976798][ T6298] kvm: pic: level sensitive irq not supported [ 235.979856][ T6298] kvm: pic: single mode not supported [ 235.986440][ T6298] kvm: pic: level sensitive irq not supported [ 236.465555][ T6305] loop2: detected capacity change from 0 to 1024 [ 237.241402][ T26] audit: type=1800 audit(1731533436.795:13): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.479" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 237.488688][ T6309] fuse: Unknown parameter 'group_id00000000000000000000' [ 240.769855][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 240.866705][ T6340] kvm: pic: level sensitive irq not supported [ 240.867848][ T6340] kvm: pic: single mode not supported [ 240.874461][ T6340] kvm: pic: level sensitive irq not supported [ 241.067873][ T1107] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 241.103739][ T6348] loop2: detected capacity change from 0 to 1024 [ 241.163612][ T6351] fuse: Unknown parameter 'group_id00000000000000000000' [ 241.167859][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.187930][ T1107] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 241.197759][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 241.397755][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.444672][ T26] audit: type=1800 audit(1731533442.025:14): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.492" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 242.701865][ T1107] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 242.712974][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 243.517774][ T1107] usb 1-1: unable to read config index 2 descriptor/all [ 243.538830][ T1107] usb 1-1: can't read configurations, error -71 [ 245.224760][ T6383] kvm: pic: level sensitive irq not supported [ 245.225413][ T6383] kvm: pic: single mode not supported [ 245.231861][ T6383] kvm: pic: level sensitive irq not supported [ 246.996307][ T6403] loop0: detected capacity change from 0 to 1024 [ 249.020657][ T26] audit: type=1800 audit(1731533448.655:15): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.507" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 250.310348][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 250.328950][ T6430] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.513'. [ 253.050643][ T6461] loop4: detected capacity change from 0 to 1024 [ 254.245218][ T26] audit: type=1800 audit(1731533453.875:16): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.524" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 254.925959][ T6485] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 254.925959][ T6485] program syz.3.529 not setting count and/or reply_len properly [ 255.670035][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.676437][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.672196][ T6512] loop4: detected capacity change from 0 to 1024 [ 258.637572][ T26] audit: type=1800 audit(1731533458.195:17): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.537" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 263.145310][ T6559] loop2: detected capacity change from 0 to 1024 [ 264.167782][ T26] audit: type=1800 audit(1731533463.765:18): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.551" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 264.470329][ T6576] loop0: detected capacity change from 0 to 2048 [ 264.796404][ T6576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.842476][ T6576] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.909696][ T6576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.557: bg 0: block 288: padding at end of block bitmap is not set [ 264.936174][ T6576] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 265.001869][ T6589] nfs: Unknown parameter ' [heap] [ 265.001869][ T6589] 55559437c000-55559438e000 rw-p 00000000 00:00 0 [heap] [ 265.001869][ T6589] 7fa6d75be000-7fa6d75bf000 ---p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d75bf000-7fa6d75df000 rw-p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d75df000-7fa6d75e0000 ---p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d75e0000-7fa6d7600000 rw-p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d7600000-7fa6d7601000 ---p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d7601000-7fa6d7e01000 rw-p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d7e01000-7fa6d7e02000 ---p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d7e02000-7fa6d8602000 rw-s 00000000 00:07 1186 /sys/kernel/debug/kcov [ 265.001869][ T6589] 7fa6d8602000-7fa6d8604000 ---p 00000000 00:00 0 [ 265.001869][ T6589] 7fa6d8604000-7fa6d8804000 rw-s 00000000 00:07 1186 /sys/kernel/debug/kcov [ 266.799050][ T6608] loop0: detected capacity change from 0 to 8 [ 266.983771][ T6608] SQUASHFS error: Unable to read directory block [629:0] [ 267.121219][ T6612] loop3: detected capacity change from 0 to 1024 [ 268.803042][ T26] audit: type=1800 audit(1731533468.425:19): pid=6621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.567" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 271.548643][ T6645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.906332][ T6661] loop3: detected capacity change from 0 to 1024 [ 272.539083][ T26] audit: type=1800 audit(1731533471.925:20): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 275.953791][ T6702] loop1: detected capacity change from 0 to 1024 [ 276.557866][ T26] audit: type=1800 audit(1731533476.015:21): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.594" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 277.588954][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 278.122566][ T6716] 8021q: adding VLAN 0 to HW filter on device team1 [ 278.673028][ T6739] ip6t_rpfilter: unknown options [ 279.451334][ T6741] loop3: detected capacity change from 0 to 1024 [ 279.533892][ T6746] loop4: detected capacity change from 0 to 1024 [ 279.564154][ T6741] EXT4-fs (loop3): Ignoring removed orlov option [ 279.586057][ T6741] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 279.792962][ T6748] loop2: detected capacity change from 0 to 1764 [ 280.577435][ T26] audit: type=1800 audit(1731533480.205:22): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.607" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 280.714417][ T6741] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 280.736728][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.619259][ T6763] process 'syz.3.606' launched './file0' with NULL argv: empty string added [ 283.239997][ T6769] device bond_slave_0 entered promiscuous mode [ 283.672020][ T6775] loop3: detected capacity change from 0 to 1024 [ 283.907247][ T6778] loop0: detected capacity change from 0 to 1024 [ 284.155743][ T6775] EXT4-fs (loop3): Test dummy encryption mode enabled [ 284.184085][ T6775] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,nodelalloc,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 284.257208][ T9] hfsplus: b-tree write err: -5, ino 8 [ 284.427028][ T6788] loop0: detected capacity change from 0 to 512 [ 284.517198][ T6788] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.618: casefold flag without casefold feature [ 284.602262][ T6788] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.618: couldn't read orphan inode 15 (err -117) [ 284.725347][ T6788] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.782090][ T6775] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 289.354876][ T6845] netlink: 173 bytes leftover after parsing attributes in process `syz.4.626'. [ 290.077185][ T6856] loop2: detected capacity change from 0 to 1024 [ 290.214398][ T6856] EXT4-fs (loop2): Ignoring removed orlov option [ 290.231462][ T6856] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 290.312285][ T6856] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 290.413573][ T6861] loop3: detected capacity change from 0 to 256 [ 290.585419][ T6861] FAT-fs (loop3): Directory bread(block 64) failed [ 290.610970][ T6861] FAT-fs (loop3): Directory bread(block 65) failed [ 290.632753][ T6861] FAT-fs (loop3): Directory bread(block 66) failed [ 290.663875][ T6861] FAT-fs (loop3): Directory bread(block 67) failed [ 290.687790][ T6861] FAT-fs (loop3): Directory bread(block 68) failed [ 290.710411][ T6861] FAT-fs (loop3): Directory bread(block 69) failed [ 290.727377][ T6861] FAT-fs (loop3): Directory bread(block 70) failed [ 290.766428][ T6861] FAT-fs (loop3): Directory bread(block 71) failed [ 290.815634][ T6861] FAT-fs (loop3): Directory bread(block 72) failed [ 290.827969][ T6861] FAT-fs (loop3): Directory bread(block 73) failed [ 291.059493][ T6867] attempt to access beyond end of device [ 291.059493][ T6867] loop3: rw=524288, want=1164, limit=256 [ 291.071447][ T6867] attempt to access beyond end of device [ 291.071447][ T6867] loop3: rw=0, want=1164, limit=256 [ 291.082701][ T26] audit: type=1800 audit(1731533490.715:23): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.636" name="file0" dev="loop3" ino=1048591 res=0 errno=0 [ 291.690500][ T5137] Bluetooth: hci5: Frame reassembly failed (-84) [ 291.802731][ T4265] attempt to access beyond end of device [ 291.802731][ T4265] loop3: rw=1, want=1256, limit=256 [ 293.183268][ T4265] attempt to access beyond end of device [ 293.183268][ T4265] loop3: rw=1, want=1448, limit=256 [ 293.757825][ T5062] Bluetooth: hci5: command 0x1003 tx timeout [ 293.766334][ T4175] Bluetooth: hci5: sending frame failed (-49) [ 295.691950][ T6923] loop4: detected capacity change from 0 to 1024 [ 295.977076][ T6931] netlink: 173 bytes leftover after parsing attributes in process `syz.0.650'. [ 295.982344][ T5062] Bluetooth: hci5: command 0x1001 tx timeout [ 295.993009][ T4247] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 296.001591][ T4175] Bluetooth: hci5: sending frame failed (-49) [ 296.207940][ T26] audit: type=1800 audit(1731533495.835:24): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.655" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 296.408444][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.499051][ T4247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.600286][ T4247] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 296.640432][ T4247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.686040][ T4247] usb 4-1: config 0 descriptor?? [ 297.578228][ T4247] usbhid 4-1:0.0: can't add hid device: -71 [ 297.591075][ T4247] usbhid: probe of 4-1:0.0 failed with error -71 [ 297.638958][ T4247] usb 4-1: USB disconnect, device number 4 [ 298.427227][ T3142] Bluetooth: hci5: command 0x1009 tx timeout [ 298.588769][ T6950] loop4: detected capacity change from 0 to 1024 [ 298.668362][ T6953] loop0: detected capacity change from 0 to 1024 [ 298.773696][ T6950] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 298.790213][ T6953] EXT4-fs (loop0): Invalid want_extra_isize 127 [ 298.847993][ T6950] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 299.020849][ T6950] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.123452][ T26] audit: type=1326 audit(1731533498.755:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 299.257577][ T6966] loop0: detected capacity change from 0 to 128 [ 299.497725][ T6966] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 299.843236][ T6950] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,grpjquota=,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 299.878861][ T26] audit: type=1326 audit(1731533498.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.064031][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 300.081703][ T26] audit: type=1326 audit(1731533498.775:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.105176][ T26] audit: type=1326 audit(1731533498.775:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.127717][ T26] audit: type=1326 audit(1731533498.775:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.157541][ T26] audit: type=1326 audit(1731533498.775:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.180936][ T26] audit: type=1326 audit(1731533499.465:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.205197][ T26] audit: type=1326 audit(1731533499.465:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.242427][ T26] audit: type=1326 audit(1731533499.495:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.0.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6d9187719 code=0x7ffc0000 [ 300.287124][ T6978] loop0: detected capacity change from 0 to 512 [ 300.358604][ T6978] ======================================================= [ 300.358604][ T6978] WARNING: The mand mount option has been deprecated and [ 300.358604][ T6978] and is ignored by this kernel. Remove the mand [ 300.358604][ T6978] option from the mount to silence this warning. [ 300.358604][ T6978] ======================================================= [ 300.431334][ T6983] loop2: detected capacity change from 0 to 1024 [ 300.942265][ T6993] loop3: detected capacity change from 0 to 256 [ 300.985781][ T6978] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.665: Failed to acquire dquot type 0 [ 301.017894][ T5062] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 301.127723][ T6978] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.665: bg 0: block 64: padding at end of block bitmap is not set [ 301.460309][ T6990] 9pnet: Insufficient options for proto=fd [ 301.689495][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 301.873072][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 301.873118][ T26] audit: type=1800 audit(1731533501.365:45): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.666" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 301.926117][ T6978] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 302.102006][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.121149][ T6978] EXT4-fs (loop0): 1 truncate cleaned up [ 302.179228][ T6978] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.198212][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 302.285568][ T6978] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.306406][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 302.458842][ T6978] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 302.471543][ T6978] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 302.477956][ T6990] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 302.503207][ T6978] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.665: Failed to acquire dquot type 0 [ 302.558368][ T5062] usb 5-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 302.587621][ T5062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.587649][ T5062] usb 5-1: Product: syz [ 302.587665][ T5062] usb 5-1: Manufacturer: syz [ 302.587679][ T5062] usb 5-1: SerialNumber: syz [ 302.591518][ T5062] usb 5-1: config 0 descriptor?? [ 302.634071][ T5062] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 302.651309][ T5062] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 302.913923][ T1323] usb 5-1: USB disconnect, device number 4 [ 302.939387][ T1323] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 303.282569][ T7023] netlink: 173 bytes leftover after parsing attributes in process `syz.1.669'. [ 304.616404][ T3056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.772876][ T3056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.914248][ T3056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.067384][ T3056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.503686][ T7048] syz.0.684 uses obsolete (PF_INET,SOCK_PACKET) [ 305.794653][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 305.959620][ T7053] 8021q: adding VLAN 0 to HW filter on device team1 [ 305.973966][ T7040] chnl_net:caif_netlink_parms(): no params data found [ 309.072457][ T4216] Bluetooth: hci3: command 0x0409 tx timeout [ 309.973379][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.996670][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.028884][ T7040] device bridge_slave_0 entered promiscuous mode [ 310.156512][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.199632][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.238539][ T7040] device bridge_slave_1 entered promiscuous mode [ 310.440570][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.480396][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.727628][ T4216] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 310.772482][ T7040] team0: Port device team_slave_0 added [ 310.821936][ T7040] team0: Port device team_slave_1 added [ 310.873547][ T7112] netlink: 173 bytes leftover after parsing attributes in process `syz.0.692'. [ 311.020889][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.051419][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.125630][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.137797][ T4216] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.155075][ T4216] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 311.175686][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.203898][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.227549][ T4216] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.261499][ T4216] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.318688][ T5062] Bluetooth: hci3: command 0x041b tx timeout [ 311.327090][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.577817][ T4216] usb 5-1: string descriptor 0 read error: -22 [ 311.590153][ T4216] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.618789][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.700777][ T4216] usb 5-1: 0:2 : does not exist [ 311.775547][ T7040] device hsr_slave_0 entered promiscuous mode [ 311.820374][ T7040] device hsr_slave_1 entered promiscuous mode [ 311.847738][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.861648][ T7040] Cannot create hsr debugfs directory [ 311.917713][ T5062] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 311.978469][ T4216] usb 5-1: USB disconnect, device number 5 [ 312.152912][ T3056] device hsr_slave_0 left promiscuous mode [ 312.162456][ T3056] device hsr_slave_1 left promiscuous mode [ 312.185898][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.197610][ T5062] usb 3-1: Using ep0 maxpacket: 16 [ 312.216113][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.244069][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.267592][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.285968][ T3056] device bridge_slave_1 left promiscuous mode [ 312.308118][ T3056] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.358548][ T5062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.371349][ T3056] device bridge_slave_0 left promiscuous mode [ 312.377789][ T5062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.397924][ T3056] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.423210][ T5062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.452963][ T3056] device veth1_macvtap left promiscuous mode [ 312.456822][ T5062] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.470182][ T3056] device veth0_macvtap left promiscuous mode [ 312.476901][ T5062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.499410][ T3056] device veth1_vlan left promiscuous mode [ 312.505878][ T3056] device veth0_vlan left promiscuous mode [ 312.516779][ T5062] usb 3-1: config 0 descriptor?? [ 313.660616][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.670041][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.678634][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.688421][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.696436][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.708313][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.716029][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.723779][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.737732][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.753512][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.765941][ T5062] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.797536][ T5062] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input6 [ 313.839268][ T5062] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 313.936947][ T5062] usb 3-1: USB disconnect, device number 2 [ 313.959979][ T3142] Bluetooth: hci3: command 0x040f tx timeout [ 314.687003][ T3056] team0 (unregistering): Port device team_slave_1 removed [ 314.706269][ T3056] team0 (unregistering): Port device team_slave_0 removed [ 314.733951][ T3056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.766017][ T3056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.031567][ T3056] bond0 (unregistering): Released all slaves [ 315.171805][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 315.299029][ T7135] 8021q: adding VLAN 0 to HW filter on device team2 [ 316.580999][ T5062] Bluetooth: hci3: command 0x0419 tx timeout [ 317.158591][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.178143][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.356224][ T7040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.551010][ T7040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.612771][ T7040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.668693][ T7040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 319.031433][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.309363][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 319.596708][ T7208] 8021q: adding VLAN 0 to HW filter on device team1 [ 319.646950][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.785637][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.980375][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.114194][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.185845][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.262406][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.269666][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.382662][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.392527][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.402322][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.409510][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.418544][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.426701][ T7225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.722'. [ 320.449039][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.479423][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.722142][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.756105][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.808635][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.893140][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.964327][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.243718][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.444430][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.552124][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.619022][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.669533][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.511306][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.544180][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.606070][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.129665][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 328.168933][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.045410][ T7040] device veth0_vlan entered promiscuous mode [ 329.097763][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 329.165179][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.219039][ T7317] loop1: detected capacity change from 0 to 512 [ 329.256999][ T7040] device veth1_vlan entered promiscuous mode [ 329.296379][ T7317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 329.300157][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.329155][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.358649][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 329.388075][ T7317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.458255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.466942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.543411][ T7317] EXT4-fs (loop1): 1 truncate cleaned up [ 329.560772][ T7040] device veth0_macvtap entered promiscuous mode [ 329.585672][ T7040] device veth1_macvtap entered promiscuous mode [ 329.606524][ T7317] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 329.687349][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.811990][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.844312][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.886196][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.922707][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.948503][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.981255][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.009262][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.051744][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.100822][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.128754][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.157111][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.243353][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.285325][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.358877][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.404907][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.460200][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.477800][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.491804][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.503093][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.517365][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.553397][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.566081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.608069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.695855][ T7040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.738385][ T7040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.805688][ T7040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.827079][ T7040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.346250][ T7338] kvm: pic: single mode not supported [ 331.346273][ T7338] kvm: pic: level sensitive irq not supported [ 331.383489][ T7345] loop1: detected capacity change from 0 to 2048 [ 331.639685][ T7345] loop1: p3 < > p4 < > [ 331.643918][ T7345] loop1: partition table partially beyond EOD, truncated [ 331.653362][ T7345] loop1: p3 start 4284289 is beyond EOD, truncated [ 332.728407][ T3545] loop1: p3 < > p4 < > [ 332.732645][ T3545] loop1: partition table partially beyond EOD, truncated [ 332.797978][ T3545] loop1: p3 start 4284289 is beyond EOD, truncated [ 332.928018][ T7366] loop0: detected capacity change from 0 to 1024 [ 333.068113][ T7366] EXT4-fs (loop0): Test dummy encryption mode enabled [ 333.178101][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.197791][ T7366] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,nodelalloc,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 333.268709][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.341853][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.348083][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.364884][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.378955][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 333.408435][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.824734][ T7384] loop5: detected capacity change from 0 to 512 [ 333.888742][ T7384] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 333.959732][ T7384] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,init_itable=0x0000000000000098,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 333.992945][ T7384] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.972370][ T7399] netlink: 'syz.4.751': attribute type 13 has an invalid length. [ 335.050861][ T7399] netlink: 152 bytes leftover after parsing attributes in process `syz.4.751'. [ 335.176990][ T7399] syz_tun: refused to change device tx_queue_len [ 335.241010][ T7399] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 336.238980][ T7412] kvm: pic: single mode not supported [ 336.239003][ T7412] kvm: pic: level sensitive irq not supported [ 336.263729][ T7412] kvm: pic: single mode not supported [ 336.270051][ T7412] kvm: pic: level sensitive irq not supported [ 336.289297][ T7412] kvm: pic: level sensitive irq not supported [ 336.297202][ T7412] kvm: pic: level sensitive irq not supported [ 336.397039][ T7412] kvm: pic: single mode not supported [ 336.403772][ T7412] kvm: pic: level sensitive irq not supported [ 338.701583][ T7447] loop0: detected capacity change from 0 to 1024 [ 338.763326][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 338.895436][ T7447] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 338.951691][ T7447] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 339.017620][ T7447] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 339.097727][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 341.274294][ T7447] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,grpjquota=,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 341.407816][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 341.415442][ T13] usb 3-1: can't read configurations, error -71 [ 341.700978][ T7473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 341.845242][ T7481] loop1: detected capacity change from 0 to 512 [ 341.922675][ T7481] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 342.008606][ T7481] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 342.041077][ T7481] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 342.059327][ T7481] EXT4-fs (loop1): 1 truncate cleaned up [ 342.085229][ T7481] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 344.150353][ T7520] loop2: detected capacity change from 0 to 1024 [ 344.338351][ T7520] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 344.518185][ T7520] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 344.723770][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 345.149986][ T7520] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.251557][ T7520] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,grpjquota=,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 345.565280][ T7536] netlink: 'syz.4.775': attribute type 13 has an invalid length. [ 345.636126][ T7536] netlink: 152 bytes leftover after parsing attributes in process `syz.4.775'. [ 345.816912][ T7536] syz_tun: refused to change device tx_queue_len [ 345.845974][ T7536] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 347.472150][ T4212] Bluetooth: hci5: command 0x1003 tx timeout [ 347.482509][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 348.907329][ T7585] loop5: detected capacity change from 0 to 16 [ 349.086868][ T7585] erofs: (device loop5): mounted with root inode @ nid 36. [ 349.518064][ T5062] Bluetooth: hci5: command 0x1001 tx timeout [ 349.533989][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 350.858504][ T7585] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 350.921643][ T7585] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 352.108120][ T4212] Bluetooth: hci5: command 0x1009 tx timeout [ 353.297363][ T7622] loop5: detected capacity change from 0 to 512 [ 353.432291][ T7622] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.446701][ T7622] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.425483][ T7663] loop0: detected capacity change from 0 to 2048 [ 358.034296][ T7663] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000040,discard,,errors=continue. Quota mode: none. [ 359.730534][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 360.958152][ T7696] trusted_key: encrypted_key: master key parameter '*'˜Ýñˆ' is invalid [ 361.427730][ T4216] Bluetooth: hci5: command 0x1003 tx timeout [ 361.434126][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 363.507694][ T4216] Bluetooth: hci5: command 0x1001 tx timeout [ 363.521510][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 365.587768][ T4212] Bluetooth: hci5: command 0x1009 tx timeout [ 365.796424][ T7744] loop1: detected capacity change from 0 to 1024 [ 365.922655][ T7744] EXT4-fs (loop1): Ignoring removed orlov option [ 365.940996][ T7744] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 366.043138][ T7744] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 366.319081][ T7762] ALSA: seq fatal error: cannot create timer (-22) [ 368.602713][ T7784] loop2: detected capacity change from 0 to 8192 [ 371.025637][ T7809] loop0: detected capacity change from 0 to 512 [ 371.291368][ T7809] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 371.328139][ T7809] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.617366][ T7825] netlink: 92 bytes leftover after parsing attributes in process `syz.4.836'. [ 373.638069][ T7840] loop4: detected capacity change from 0 to 256 [ 374.436681][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.445630][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.455242][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.464408][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.473897][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.485371][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.495988][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.506056][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.744427][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.843016][ T7840] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 374.883754][ T26] audit: type=1800 audit(1731533574.512:46): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.841" name="file1" dev="loop4" ino=1048597 res=0 errno=0 [ 375.240410][ T7840] syz.4.841 (7840) used greatest stack depth: 19264 bytes left [ 375.536360][ T7868] kvm: pic: non byte read [ 375.555814][ T7868] kvm: pic: level sensitive irq not supported [ 375.555892][ T7868] kvm: pic: non byte read [ 376.418357][ T7890] netlink: 'syz.5.846': attribute type 13 has an invalid length. [ 376.474803][ T7890] netlink: 152 bytes leftover after parsing attributes in process `syz.5.846'. [ 376.490474][ T7890] syz_tun: refused to change device tx_queue_len [ 376.522229][ T7890] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 377.696053][ T7908] binder: 7906:7908 ioctl c0306201 20000080 returned -14 [ 378.551447][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.272389][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.960180][ T7948] loop0: detected capacity change from 0 to 1024 [ 383.827679][ T26] audit: type=1800 audit(1731533583.432:47): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.861" name="bus" dev="loop0" ino=26 res=0 errno=0 [ 383.888864][ T7957] loop1: detected capacity change from 0 to 1024 [ 384.324988][ T7957] EXT4-fs (loop1): Ignoring removed orlov option [ 384.365979][ T7957] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 385.223344][ T7957] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 387.127019][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.875'. [ 387.470424][ T8002] loop2: detected capacity change from 0 to 164 [ 387.525679][ T8004] loop1: detected capacity change from 0 to 2048 [ 387.768508][ T8016] kvm: pic: level sensitive irq not supported [ 387.768593][ T8016] kvm: pic: non byte read [ 387.807857][ T8016] kvm: pic: level sensitive irq not supported [ 387.807932][ T8016] kvm: pic: non byte read [ 387.833232][ T8014] kvm: emulating exchange as write [ 387.938973][ T8023] loop1: detected capacity change from 0 to 128 [ 388.128362][ T26] audit: type=1800 audit(1731533587.762:48): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.884" name="bus" dev="loop1" ino=1048598 res=0 errno=0 [ 389.021318][ T8027] netlink: 48 bytes leftover after parsing attributes in process `syz.5.885'. [ 391.321626][ T8054] loop1: detected capacity change from 0 to 2048 [ 391.484174][ T8054] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.571438][ T8054] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 391.795052][ T8054] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 23 with error 28 [ 391.837708][ T8054] EXT4-fs (loop1): This should not happen!! Data will be lost [ 391.837708][ T8054] [ 391.972825][ T8054] EXT4-fs (loop1): Total free blocks count 0 [ 392.032621][ T8054] EXT4-fs (loop1): Free/Dirty block details [ 392.047703][ T8054] EXT4-fs (loop1): free_blocks=2415919120 [ 392.053537][ T8054] EXT4-fs (loop1): dirty_blocks=48 [ 392.094702][ T8054] EXT4-fs (loop1): Block reservation details [ 392.249485][ T4316] Bluetooth: hci5: Frame reassembly failed (-84) [ 392.281284][ T4316] Bluetooth: hci5: Frame reassembly failed (-84) [ 392.391028][ T8054] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 394.247650][ T4212] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 394.307574][ T5062] Bluetooth: hci5: command 0x1003 tx timeout [ 394.313836][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 394.497978][ T4212] usb 2-1: Using ep0 maxpacket: 32 [ 395.351373][ T8093] netlink: 48 bytes leftover after parsing attributes in process `syz.4.900'. [ 395.402878][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.424085][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.459316][ T4212] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 395.468480][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.479753][ T4212] usb 2-1: config 0 descriptor?? [ 395.518927][ T4212] hub 2-1:0.0: USB hub found [ 395.677744][ T1107] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 395.738587][ T4212] hub 2-1:0.0: 1 port detected [ 396.007739][ T4212] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 396.840276][ T4212] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 396.886279][ T5062] Bluetooth: hci5: command 0x1001 tx timeout [ 396.902505][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 396.987756][ T4212] usbhid 2-1:0.0: can't add hid device: -71 [ 396.997834][ T1107] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.008800][ T4212] usbhid: probe of 2-1:0.0 failed with error -71 [ 397.035941][ T1107] usb 6-1: config 0 interface 0 has no altsetting 0 [ 397.056690][ T4212] usb 2-1: USB disconnect, device number 2 [ 397.278024][ T1107] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.287146][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.317251][ T1107] usb 6-1: Product: syz [ 397.336577][ T1107] usb 6-1: Manufacturer: syz [ 397.349175][ T1107] usb 6-1: SerialNumber: syz [ 397.375404][ T1107] usb 6-1: config 0 descriptor?? [ 397.446076][ T1107] usb 6-1: selecting invalid altsetting 0 [ 397.716770][ T1107] usb 6-1: USB disconnect, device number 2 [ 398.602885][ T8126] loop5: detected capacity change from 0 to 1024 [ 398.674792][ T8126] EXT4-fs (loop5): Ignoring removed orlov option [ 398.688317][ T8126] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 398.793761][ T8126] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 398.947775][ T5062] Bluetooth: hci5: command 0x1009 tx timeout [ 399.855839][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.5.914'. [ 402.617570][ T4216] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 403.587979][ T4216] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.607590][ T4216] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 403.627322][ T4216] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.647696][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.672984][ T4216] usb 2-1: config 0 descriptor?? [ 404.527746][ T4216] usb 2-1: string descriptor 0 read error: -71 [ 404.547554][ T4216] usb 2-1: USB disconnect, device number 3 [ 404.929880][ T8196] loop4: detected capacity change from 0 to 8192 [ 405.354240][ T8196] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.708373][ T8220] loop5: detected capacity change from 0 to 1024 [ 406.789230][ T8220] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 406.823420][ T8220] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 406.847610][ T8220] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 407.062645][ T8220] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,grpjquota=,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 407.776288][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.947'. [ 409.569332][ T8263] loop0: detected capacity change from 0 to 1024 [ 409.776311][ T8263] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 409.787885][ T8263] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 409.807192][ T8263] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.064602][ T8263] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,grpjquota=,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 412.138886][ T8301] loop5: detected capacity change from 0 to 2048 [ 412.142460][ T8304] binder: 8302:8304 ioctl c0306201 200004c0 returned -22 [ 414.557851][ T8301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.837833][ T8329] loop4: detected capacity change from 0 to 1024 [ 414.911437][ T8329] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 414.912237][ T8330] loop2: detected capacity change from 0 to 2048 [ 414.939965][ T8329] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 414.987352][ T8329] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 415.017269][ T8329] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,grpjquota=,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 415.297214][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 417.313055][ T8357] loop4: detected capacity change from 0 to 8192 [ 417.364710][ T8366] loop0: detected capacity change from 0 to 128 [ 419.879478][ T26] audit: type=1800 audit(1731533619.462:49): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.985" name="file0" dev="loop0" ino=1048599 res=0 errno=0 [ 420.255828][ T8380] loop0: detected capacity change from 0 to 1024 [ 420.365804][ T8380] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 420.393695][ T8380] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 420.404849][ T8380] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 420.512733][ T8380] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,grpjquota=,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 423.929190][ T8412] loop5: detected capacity change from 0 to 8192 [ 424.663121][ T8423] loop2: detected capacity change from 0 to 128 [ 426.048651][ T8423] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 426.136936][ T8423] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.197837][ T8423] EXT4-fs warning (device loop2): ext4_resize_fs:1981: can't read last block, resize aborted [ 426.710100][ T8436] "syz.2.1007" (8436) uses obsolete ecb(arc4) skcipher [ 427.722798][ T8443] netlink: 'syz.0.1005': attribute type 7 has an invalid length. [ 428.734691][ T8449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1010'. [ 429.733876][ T8467] loop5: detected capacity change from 0 to 8192 [ 430.245697][ T4213] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 430.653994][ T8475] loop4: detected capacity change from 0 to 1024 [ 430.708785][ T4213] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 430.728655][ T4213] usb 2-1: config 0 has no interface number 0 [ 430.929626][ T8475] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 432.487131][ T4212] Bluetooth: hci3: command 0x0406 tx timeout [ 432.577745][ T4213] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 432.587262][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.651258][ T4213] usb 2-1: Product: syz [ 432.712164][ T4213] usb 2-1: config 0 descriptor?? [ 434.417616][ T8498] Zero length message leads to an empty skb [ 435.037938][ T4213] usb 2-1: can't set config #0, error -71 [ 435.074470][ T4213] usb 2-1: USB disconnect, device number 4 [ 435.998350][ T8505] loop0: detected capacity change from 0 to 8192 [ 439.041008][ T8528] loop2: detected capacity change from 0 to 512 [ 439.150534][ T8528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 439.208863][ T8528] EXT4-fs (loop2): orphan cleanup on readonly fs [ 439.238340][ T8528] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 439.328133][ T8528] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 439.335234][ T8528] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.1034: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 439.468203][ T8528] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1034: couldn't read orphan inode 13 (err -117) [ 439.530658][ T8528] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 439.628312][ T8528] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 439.681491][ T8528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 439.754318][ T8528] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 439.820404][ T8530] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 439.871687][ T8530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 439.935441][ T8530] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 439.992208][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.998586][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.070505][ T8544] loop2: detected capacity change from 0 to 2048 [ 445.232613][ T8561] loop0: detected capacity change from 0 to 8192 [ 446.579939][ T8582] loop4: detected capacity change from 0 to 8 [ 446.825942][ T8582] SQUASHFS error: zlib decompression failed, data probably corrupt [ 446.858655][ T8582] SQUASHFS error: Failed to read block 0x4de: -5 [ 446.895506][ T8582] SQUASHFS error: Failed to read block 0x4e2: -5 [ 446.922997][ T8582] SQUASHFS error: Failed to read block 0x9ca: -5 [ 446.966948][ T8582] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 446.994636][ T8582] SQUASHFS error: Failed to read block 0x35f2: -5 [ 447.041642][ T26] audit: type=1800 audit(1731533646.672:50): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1050" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 447.606620][ T8582] syz.4.1050 (8582) used greatest stack depth: 18264 bytes left [ 447.787194][ T8588] loop4: detected capacity change from 0 to 256 [ 447.825319][ T8588] exfat: Unknown parameter 'keep_last_dots' [ 448.701054][ T8595] loop5: detected capacity change from 0 to 512 [ 449.259714][ T8595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 449.615223][ T8595] EXT4-fs (loop5): 1 orphan inode deleted [ 449.657993][ T8595] EXT4-fs (loop5): 1 truncate cleaned up [ 449.663692][ T8595] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 450.126281][ T8608] loop0: detected capacity change from 0 to 1024 [ 450.485648][ T8608] hfsplus: failed to load root directory [ 450.778111][ T8607] hub 6-0:1.0: USB hub found [ 450.784672][ T8607] hub 6-0:1.0: 1 port detected [ 450.922672][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 452.942497][ T4213] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 453.370100][ T4213] usb 3-1: not running at top speed; connect to a high speed hub [ 453.470157][ T4213] usb 3-1: config 1 interface 0 has no altsetting 0 [ 454.909300][ T4213] usb 3-1: string descriptor 0 read error: -22 [ 454.922841][ T4213] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.40 [ 454.946881][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.589055][ T4213] usbhid 3-1:1.0: can't add hid device: -71 [ 455.595463][ T4213] usbhid: probe of 3-1:1.0 failed with error -71 [ 455.606599][ T4213] usb 3-1: USB disconnect, device number 5 [ 456.120911][ T8652] loop5: detected capacity change from 0 to 8192 [ 457.434054][ T8665] loop2: detected capacity change from 0 to 164 [ 457.618854][ T8665] Unsupported NM flag settings (8) [ 457.631011][ T8668] loop4: detected capacity change from 0 to 8 [ 463.780867][ T8725] loop5: detected capacity change from 0 to 128 [ 463.794477][ T8719] loop0: detected capacity change from 0 to 512 [ 463.937211][ T8725] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 463.967679][ T8719] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 463.988780][ T8725] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 464.012838][ T8719] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1091: invalid indirect mapped block 4294967295 (level 1) [ 464.060864][ T8719] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1091: invalid indirect mapped block 4294967295 (level 1) [ 464.154435][ T8719] EXT4-fs (loop0): 2 truncates cleaned up [ 464.208643][ T8719] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,,errors=continue. Quota mode: writeback. [ 466.134485][ T8756] loop2: detected capacity change from 0 to 1024 [ 466.292719][ T8756] EXT4-fs (loop2): Ignoring removed orlov option [ 466.311278][ T8756] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 467.089484][ T8756] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,bsdgroups,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 468.128974][ T4242] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 468.289103][ T4242] Bluetooth: hci2: Injecting HCI hardware error event [ 468.327721][ T4175] Bluetooth: hci2: hardware error 0x00 [ 469.847048][ T8772] loop0: detected capacity change from 0 to 1024 [ 470.677691][ T8772] EXT4-fs (loop0): Ignoring removed orlov option [ 470.684098][ T8772] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 470.934205][ T8772] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 471.837600][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 472.009523][ T8795] loop5: detected capacity change from 0 to 512 [ 472.440973][ T8795] EXT4-fs (loop5): journaled quota format not specified [ 473.149108][ T8794] device syzkaller0 entered promiscuous mode [ 473.514310][ T8804] loop1: detected capacity change from 0 to 1024 [ 474.337655][ T8699] Bluetooth: hci5: command 0x1003 tx timeout [ 474.343864][ T4170] Bluetooth: hci5: sending frame failed (-49) [ 474.400798][ T8804] EXT4-fs (loop1): Invalid want_extra_isize 127 [ 475.418082][ T26] audit: type=1326 audit(1731533674.552:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 475.497954][ T26] audit: type=1326 audit(1731533674.552:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 475.621106][ T26] audit: type=1326 audit(1731533674.552:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 475.658733][ T26] audit: type=1326 audit(1731533674.552:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 475.754050][ T26] audit: type=1326 audit(1731533674.552:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 476.526705][ T4242] Bluetooth: hci5: command 0x1001 tx timeout [ 476.546890][ T4170] Bluetooth: hci5: sending frame failed (-49) [ 476.581181][ T26] audit: type=1326 audit(1731533674.552:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 477.148994][ T8841] device syzkaller0 entered promiscuous mode [ 478.660958][ T8807] Bluetooth: hci5: command 0x1009 tx timeout [ 478.691593][ T8851] loop1: detected capacity change from 0 to 1024 [ 478.864218][ T8851] EXT4-fs (loop1): Invalid want_extra_isize 127 [ 480.121673][ T26] audit: type=1326 audit(1731533679.752:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 481.018995][ T8861] loop1: detected capacity change from 0 to 128 [ 481.032446][ T26] audit: type=1326 audit(1731533679.752:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 481.069404][ T8861] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 481.156882][ T26] audit: type=1326 audit(1731533679.752:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 481.180653][ T26] audit: type=1326 audit(1731533679.752:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 481.394131][ T26] audit: type=1326 audit(1731533679.752:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 482.425005][ T8875] loop1: detected capacity change from 0 to 256 [ 482.503937][ T26] audit: type=1326 audit(1731533679.772:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 482.597837][ T26] audit: type=1326 audit(1731533680.542:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 482.662615][ T8875] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 482.701133][ T26] audit: type=1326 audit(1731533680.542:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 482.751441][ T8875] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 482.870640][ T26] audit: type=1326 audit(1731533680.712:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 482.935502][ T26] audit: type=1326 audit(1731533680.712:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 482.988980][ T8883] device syzkaller0 entered promiscuous mode [ 483.017899][ T4213] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 483.097138][ T26] audit: type=1326 audit(1731533680.712:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8850 comm="syz.1.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e8732c719 code=0x7ffc0000 [ 483.277708][ T4213] usb 6-1: Using ep0 maxpacket: 32 [ 483.418877][ T4213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.476645][ T4213] usb 6-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.00 [ 483.498261][ T4213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.553954][ T4213] usb 6-1: config 0 descriptor?? [ 483.759665][ T4291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.257798][ T4213] usbhid 6-1:0.0: can't add hid device: -71 [ 484.266906][ T4213] usbhid: probe of 6-1:0.0 failed with error -71 [ 484.859984][ T4213] usb 6-1: USB disconnect, device number 3 [ 484.972228][ T4291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.117567][ T4213] Bluetooth: hci5: command 0x0409 tx timeout [ 485.132053][ T4291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.225114][ T8906] loop5: detected capacity change from 0 to 1024 [ 485.295682][ T8906] EXT4-fs (loop5): Invalid want_extra_isize 127 [ 485.325949][ T4291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.507591][ T4213] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 485.733903][ T8911] loop5: detected capacity change from 0 to 128 [ 485.988860][ T8911] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 485.998785][ T4213] usb 2-1: config 3 has an invalid interface number: 221 but max is 0 [ 486.007505][ T4213] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 486.104531][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 486.104576][ T26] audit: type=1326 audit(1731533685.732:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c8693719 code=0x7ffc0000 [ 486.158960][ T4213] usb 2-1: config 3 has no interface number 0 [ 486.167650][ T4213] usb 2-1: config 3 interface 221 has no altsetting 0 [ 486.253254][ T26] audit: type=1326 audit(1731533685.732:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c8693719 code=0x7ffc0000 [ 486.343762][ T26] audit: type=1326 audit(1731533685.732:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19c8693719 code=0x7ffc0000 [ 486.446969][ T8884] chnl_net:caif_netlink_parms(): no params data found [ 486.447627][ T4213] usb 2-1: New USB device found, idVendor=9277, idProduct=0561, bcdDevice=7a.8f [ 486.597210][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.606953][ T4213] usb 2-1: Product: syz [ 486.612022][ T4213] usb 2-1: Manufacturer: syz [ 486.616640][ T4213] usb 2-1: SerialNumber: syz [ 486.656290][ T26] audit: type=1326 audit(1731533685.732:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c8693719 code=0x7ffc0000 [ 486.999866][ T4213] cdc_acm 2-1:3.221: skipping garbage [ 487.224925][ T4213] usb 2-1: USB disconnect, device number 5 [ 487.384536][ T26] audit: type=1326 audit(1731533685.732:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c8693719 code=0x7ffc0000 [ 487.453911][ T4210] Bluetooth: hci5: command 0x041b tx timeout [ 487.482671][ T26] audit: type=1326 audit(1731533685.762:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19c8693719 code=0x7ffc0000 [ 487.807628][ T26] audit: type=1326 audit(1731533685.762:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19c8693753 code=0x7ffc0000 [ 487.889083][ T26] audit: type=1326 audit(1731533685.762:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f19c86937a7 code=0x7ffc0000 [ 487.912155][ T26] audit: type=1326 audit(1731533685.762:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19c86923aa code=0x7ffc0000 [ 488.529879][ T8929] loop5: detected capacity change from 0 to 8192 [ 488.553334][ T26] audit: type=1326 audit(1731533685.762:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c8693719 code=0x7ffc0000 [ 489.214386][ T8934] loop1: detected capacity change from 0 to 2048 [ 489.336732][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.353089][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.382008][ T8884] device bridge_slave_0 entered promiscuous mode [ 489.444247][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.475679][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.479012][ T8934] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 489.509296][ T8884] device bridge_slave_1 entered promiscuous mode [ 489.517822][ T4213] Bluetooth: hci5: command 0x040f tx timeout [ 489.835366][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.898267][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.907651][ T4213] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 490.167345][ T8884] team0: Port device team_slave_0 added [ 490.422781][ T8884] team0: Port device team_slave_1 added [ 490.548043][ T4213] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 490.568534][ T4213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.588588][ T4213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 490.609092][ T4213] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 490.609587][ T8966] loop4: detected capacity change from 0 to 1024 [ 490.624442][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.645146][ T4213] usb 1-1: config 0 descriptor?? [ 490.747613][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.783833][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.841683][ T8966] EXT4-fs (loop4): Invalid want_extra_isize 127 [ 490.872503][ T8884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.885510][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.892689][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.585529][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.923854][ T8966] loop4: detected capacity change from 0 to 128 [ 491.983941][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 491.983962][ T26] audit: type=1326 audit(1731533691.542:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.118333][ T26] audit: type=1326 audit(1731533691.542:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.194152][ T8807] Bluetooth: hci5: command 0x0419 tx timeout [ 492.199647][ T8966] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 492.210620][ T26] audit: type=1326 audit(1731533691.542:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.234341][ T26] audit: type=1326 audit(1731533691.542:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.258957][ T4213] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 492.266098][ T4213] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 492.275329][ T26] audit: type=1326 audit(1731533691.542:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.309325][ T4213] cherry 0003:046A:0027.0002: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.0-1/input0 [ 492.328237][ T26] audit: type=1326 audit(1731533691.542:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.351703][ T26] audit: type=1326 audit(1731533691.542:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.376976][ T26] audit: type=1326 audit(1731533691.542:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.420856][ T26] audit: type=1326 audit(1731533691.542:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.461232][ T8884] device hsr_slave_0 entered promiscuous mode [ 492.468722][ T26] audit: type=1326 audit(1731533691.542:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.4.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba9ca9719 code=0x7ffc0000 [ 492.591281][ T4216] usb 1-1: USB disconnect, device number 4 [ 492.636523][ T8884] device hsr_slave_1 entered promiscuous mode [ 492.720762][ T8884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.781135][ T8884] Cannot create hsr debugfs directory [ 495.074327][ T9020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 496.523346][ T4291] device hsr_slave_0 left promiscuous mode [ 496.561698][ T4291] device hsr_slave_1 left promiscuous mode [ 496.626060][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.644656][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.665911][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.691133][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.783196][ T4291] device bridge_slave_1 left promiscuous mode [ 496.804043][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.824384][ T4291] device bridge_slave_0 left promiscuous mode [ 496.836888][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.936491][ T4291] device veth1_macvtap left promiscuous mode [ 496.953132][ T4291] device veth0_macvtap left promiscuous mode [ 497.087920][ T4291] device veth1_vlan left promiscuous mode [ 497.170793][ T4291] device veth0_vlan left promiscuous mode [ 500.474372][ T4291] team0 (unregistering): Port device team_slave_1 removed [ 500.552307][ T4291] team0 (unregistering): Port device team_slave_0 removed [ 500.624221][ T4291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.724946][ T4291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.456497][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464639][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.934377][ T4291] bond0 (unregistering): Released all slaves [ 502.125507][ T9076] netlink: 'syz.4.1179': attribute type 24 has an invalid length. [ 502.157491][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 502.246114][ T9076] device bridge1 entered promiscuous mode [ 502.413571][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 502.595187][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1185'. [ 502.645202][ T8884] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 502.730103][ T8884] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 503.463990][ T9099] loop5: detected capacity change from 0 to 1024 [ 503.528085][ T8884] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 503.584380][ T9099] EXT4-fs (loop5): Ignoring removed orlov option [ 503.596444][ T8884] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 503.625646][ T9099] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 503.648762][ T9104] loop4: detected capacity change from 0 to 1024 [ 504.679846][ T9099] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 504.781972][ T9104] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 505.863510][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.887089][ T9104] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 505.966821][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.003546][ T8807] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 506.012057][ T8807] Bluetooth: hci1: Injecting HCI hardware error event [ 506.022883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 506.028015][ T4175] Bluetooth: hci1: hardware error 0x00 [ 506.084154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.614161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.645859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.677815][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.685026][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.718011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.737300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.831761][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.838958][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.992733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 507.020695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 507.207691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.229472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.242902][ T9157] loop5: detected capacity change from 0 to 512 [ 507.452896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.472002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.530166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.610237][ T8884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.621023][ T8884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.635118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.700508][ T9157] FAT-fs (loop5): bogus number of FAT sectors [ 507.706803][ T9157] FAT-fs (loop5): Can't find a valid FAT filesystem [ 507.713538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.755087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.788120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.814260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.834579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 507.952418][ T9164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'. [ 508.832687][ T9184] loop0: detected capacity change from 0 to 1024 [ 508.925985][ T9189] loop1: detected capacity change from 0 to 1024 [ 508.999752][ T9184] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 509.097211][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.113720][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.171460][ T9189] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 509.224594][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.413622][ T9189] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,bsdgroups,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 510.483477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 510.532375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 510.674881][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 510.725210][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 510.799764][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 510.835530][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 510.889958][ T8884] device veth0_vlan entered promiscuous mode [ 510.950669][ T8884] device veth1_vlan entered promiscuous mode [ 511.243175][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 511.264167][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 511.313336][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 511.393690][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.445702][ T8884] device veth0_macvtap entered promiscuous mode [ 511.514490][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 511.554569][ T8884] device veth1_macvtap entered promiscuous mode [ 511.677849][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.768430][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.968593][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.036934][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.087592][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.127518][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.276344][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.423723][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.470506][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.524531][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 512.552653][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 512.819549][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.046701][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.083613][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.125693][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.159602][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.207629][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.250514][ T8884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.272884][ T8884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.310711][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.372991][ T8884] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.452817][ T9244] loop5: detected capacity change from 0 to 512 [ 513.459439][ T8884] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.607785][ T8884] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.617084][ T8884] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.682625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 513.707290][ T9244] EXT4-fs (loop5): Ignoring removed oldalloc option [ 513.729394][ T9244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 513.790380][ T9244] EXT4-fs (loop5): 1 truncate cleaned up [ 513.796084][ T9244] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 513.839274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.882285][ T9241] loop0: detected capacity change from 0 to 32768 [ 513.908971][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 513.908987][ T26] audit: type=1800 audit(1731533713.542:157): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1211" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 514.416289][ T26] audit: type=1800 audit(1731533714.042:158): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1210" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 514.467850][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.557648][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.649304][ T26] audit: type=1800 audit(1731533714.162:159): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1210" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 514.759561][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.770296][ T9241] ================================================================================ [ 514.818184][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.862966][ T9241] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:633:9 [ 514.877484][ T26] audit: type=1800 audit(1731533714.182:160): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1210" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 514.932332][ T9241] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 514.960302][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 514.987330][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 515.007595][ T9241] CPU: 1 PID: 9241 Comm: syz.0.1210 Not tainted 5.15.171-syzkaller #0 [ 515.015945][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 515.026056][ T9241] Call Trace: [ 515.029431][ T9241] [ 515.032391][ T9241] dump_stack_lvl+0x1e3/0x2d0 [ 515.037203][ T9241] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 515.042871][ T9241] ? panic+0x860/0x860 [ 515.046996][ T9241] __ubsan_handle_out_of_bounds+0x118/0x140 [ 515.052955][ T9241] xtInsert+0xf41/0xfa0 [ 515.057164][ T9241] ? xtSearch+0x1ca0/0x1ca0 [ 515.061749][ T9241] ? __dquot_drop+0x420/0x420 [ 515.066475][ T9241] ? rcu_is_watching+0x11/0xa0 [ 515.071425][ T9241] ? __mark_inode_dirty+0x3dd/0xd60 [ 515.076828][ T9241] extAlloc+0xa70/0x1000 [ 515.081324][ T9241] ? jfs_ioc_trim+0x6a0/0x6a0 [ 515.086065][ T9241] jfs_get_block+0x417/0xe50 [ 515.090800][ T9241] ? dio_bio_add_page+0x259/0x3e0 [ 515.095988][ T9241] ? jfs_dirty_inode+0x230/0x230 [ 515.100980][ T9241] ? submit_page_section+0x66a/0xdd0 [ 515.106315][ T9241] ? jfs_dirty_inode+0x230/0x230 [ 515.111297][ T9241] __blockdev_direct_IO+0x1b13/0x4f40 [ 515.116772][ T9241] ? sb_init_dio_done_wq+0x80/0x80 [ 515.121922][ T9241] ? invalidate_inode_pages2_range+0x1088/0x1230 [ 515.128305][ T9241] ? jfs_dirty_inode+0x230/0x230 [ 515.133286][ T9241] ? seqcount_lockdep_reader_access+0x153/0x220 [ 515.139562][ T9241] ? lockdep_hardirqs_on+0x94/0x130 [ 515.144801][ T9241] ? invalidate_mapping_pagevec+0x30/0x30 [ 515.150564][ T9241] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 515.156875][ T9241] ? filemap_write_and_wait_range+0x1d3/0x280 [ 515.163015][ T9241] jfs_direct_IO+0xf6/0x1e0 [ 515.167575][ T9241] generic_file_direct_write+0x204/0x460 [ 515.173464][ T9241] __generic_file_write_iter+0x2a2/0x4f0 [ 515.179512][ T9241] generic_file_write_iter+0xa7/0x1b0 [ 515.185096][ T9241] do_iter_readv_writev+0x594/0x7a0 [ 515.190702][ T9241] ? generic_file_rw_checks+0x260/0x260 [ 515.196919][ T9241] ? common_file_perm+0x17d/0x1d0 [ 515.202088][ T9241] ? fsnotify_perm+0x64/0x590 [ 515.206981][ T9241] ? security_file_permission+0x75/0xa0 [ 515.212566][ T9241] do_iter_write+0x1e6/0x760 [ 515.217391][ T9241] do_pwritev+0x219/0x360 [ 515.221773][ T9241] ? do_preadv+0x350/0x350 [ 515.226227][ T9241] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 515.232220][ T9241] ? vtime_user_exit+0x2d1/0x400 [ 515.237169][ T9241] ? syscall_enter_from_user_mode+0x2e/0x240 [ 515.243153][ T9241] ? lockdep_hardirqs_on+0x94/0x130 [ 515.248440][ T9241] ? __x64_sys_pwritev2+0xb9/0x100 [ 515.253551][ T9241] do_syscall_64+0x3b/0xb0 [ 515.258143][ T9241] ? clear_bhb_loop+0x15/0x70 [ 515.262913][ T9241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.268820][ T9241] RIP: 0033:0x7fa6d9187719 [ 515.273362][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.293181][ T9241] RSP: 002b:00007fa6d75ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 515.301786][ T9241] RAX: ffffffffffffffda RBX: 00007fa6d933ef80 RCX: 00007fa6d9187719 [ 515.309796][ T9241] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000006 [ 515.317767][ T9241] RBP: 00007fa6d91fa75e R08: 0000000000000000 R09: 0000000000000003 [ 515.325735][ T9241] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 515.333705][ T9241] R13: 0000000000000000 R14: 00007fa6d933ef80 R15: 00007ffdfea420d8 [ 515.341692][ T9241] [ 515.363006][ T9241] ================================================================================ [ 515.374344][ T9241] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 515.381581][ T9241] CPU: 0 PID: 9241 Comm: syz.0.1210 Not tainted 5.15.171-syzkaller #0 [ 515.389823][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 515.400233][ T9241] Call Trace: [ 515.403539][ T9241] [ 515.407022][ T9241] dump_stack_lvl+0x1e3/0x2d0 [ 515.412084][ T9241] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 515.418146][ T9241] ? panic+0x860/0x860 [ 515.422347][ T9241] panic+0x318/0x860 [ 515.426242][ T9241] ? check_panic_on_warn+0x1d/0xa0 [ 515.431350][ T9241] ? fb_is_primary_device+0xd0/0xd0 [ 515.436543][ T9241] ? dump_stack_lvl+0x24f/0x2d0 [ 515.441390][ T9241] check_panic_on_warn+0x7e/0xa0 [ 515.446440][ T9241] __ubsan_handle_out_of_bounds+0x138/0x140 [ 515.452335][ T9241] xtInsert+0xf41/0xfa0 [ 515.456490][ T9241] ? xtSearch+0x1ca0/0x1ca0 [ 515.461006][ T9241] ? __dquot_drop+0x420/0x420 [ 515.465704][ T9241] ? rcu_is_watching+0x11/0xa0 [ 515.470503][ T9241] ? __mark_inode_dirty+0x3dd/0xd60 [ 515.475913][ T9241] extAlloc+0xa70/0x1000 [ 515.480179][ T9241] ? jfs_ioc_trim+0x6a0/0x6a0 [ 515.485529][ T9241] jfs_get_block+0x417/0xe50 [ 515.490375][ T9241] ? dio_bio_add_page+0x259/0x3e0 [ 515.495440][ T9241] ? jfs_dirty_inode+0x230/0x230 [ 515.500396][ T9241] ? submit_page_section+0x66a/0xdd0 [ 515.505730][ T9241] ? jfs_dirty_inode+0x230/0x230 [ 515.510811][ T9241] __blockdev_direct_IO+0x1b13/0x4f40 [ 515.516257][ T9241] ? sb_init_dio_done_wq+0x80/0x80 [ 515.521387][ T9241] ? invalidate_inode_pages2_range+0x1088/0x1230 [ 515.527751][ T9241] ? jfs_dirty_inode+0x230/0x230 [ 515.532709][ T9241] ? seqcount_lockdep_reader_access+0x153/0x220 [ 515.539101][ T9241] ? lockdep_hardirqs_on+0x94/0x130 [ 515.544307][ T9241] ? invalidate_mapping_pagevec+0x30/0x30 [ 515.550031][ T9241] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 515.556293][ T9241] ? filemap_write_and_wait_range+0x1d3/0x280 [ 515.562368][ T9241] jfs_direct_IO+0xf6/0x1e0 [ 515.566875][ T9241] generic_file_direct_write+0x204/0x460 [ 515.573477][ T9241] __generic_file_write_iter+0x2a2/0x4f0 [ 515.581233][ T9241] generic_file_write_iter+0xa7/0x1b0 [ 515.586984][ T9241] do_iter_readv_writev+0x594/0x7a0 [ 515.592219][ T9241] ? generic_file_rw_checks+0x260/0x260 [ 515.597904][ T9241] ? common_file_perm+0x17d/0x1d0 [ 515.602976][ T9241] ? fsnotify_perm+0x64/0x590 [ 515.607720][ T9241] ? security_file_permission+0x75/0xa0 [ 515.613290][ T9241] do_iter_write+0x1e6/0x760 [ 515.617902][ T9241] do_pwritev+0x219/0x360 [ 515.622268][ T9241] ? do_preadv+0x350/0x350 [ 515.626702][ T9241] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 515.632691][ T9241] ? vtime_user_exit+0x2d1/0x400 [ 515.637643][ T9241] ? syscall_enter_from_user_mode+0x2e/0x240 [ 515.643623][ T9241] ? lockdep_hardirqs_on+0x94/0x130 [ 515.648834][ T9241] ? __x64_sys_pwritev2+0xb9/0x100 [ 515.653942][ T9241] do_syscall_64+0x3b/0xb0 [ 515.658353][ T9241] ? clear_bhb_loop+0x15/0x70 [ 515.663032][ T9241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.668942][ T9241] RIP: 0033:0x7fa6d9187719 [ 515.673358][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.693825][ T9241] RSP: 002b:00007fa6d75ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 515.702647][ T9241] RAX: ffffffffffffffda RBX: 00007fa6d933ef80 RCX: 00007fa6d9187719 [ 515.710771][ T9241] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000006 [ 515.718752][ T9241] RBP: 00007fa6d91fa75e R08: 0000000000000000 R09: 0000000000000003 [ 515.726727][ T9241] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 515.734693][ T9241] R13: 0000000000000000 R14: 00007fa6d933ef80 R15: 00007ffdfea420d8 [ 515.742685][ T9241] [ 515.745990][ T9241] Kernel Offset: disabled [ 515.750625][ T9241] Rebooting in 86400 seconds..