last executing test programs: 17.436731513s ago: executing program 2 (id=344): read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020}, 0x2020) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 15.311671373s ago: executing program 2 (id=347): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) 13.007212785s ago: executing program 2 (id=351): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 10.097530233s ago: executing program 0 (id=355): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 9.140029382s ago: executing program 0 (id=356): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 8.885646535s ago: executing program 0 (id=357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013", 0x3}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 8.706263886s ago: executing program 0 (id=358): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 8.634085317s ago: executing program 1 (id=359): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101ac2, 0x33) openat(0xffffffffffffff9c, 0x0, 0x441, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 6.975189453s ago: executing program 0 (id=360): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) 5.314424699s ago: executing program 3 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x18, 0xa01, 0x600, 0x0, {0x4}, [@typed={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) 5.23453451s ago: executing program 1 (id=363): socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c93012000e00050015020a00", @ANYRESDEC, @ANYRES32], 0x17) 4.998338532s ago: executing program 3 (id=364): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r0, &(0x7f0000000100)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x7, {0x6, 0x7, 0x0, 0xf7, 0x7, 0x9}}, 0xc) close(0x3) 4.684197285s ago: executing program 2 (id=365): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 4.582301586s ago: executing program 1 (id=366): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.945394451s ago: executing program 0 (id=367): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013", 0x3}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 2.835532382s ago: executing program 2 (id=368): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) r4 = dup2(r3, r3) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) 2.698106784s ago: executing program 3 (id=369): socket$kcm(0x29, 0x7, 0x0) ioperm(0x2, 0x7ff, 0x8) ioperm(0x9, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x4000280) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 2.644231254s ago: executing program 1 (id=370): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000640)="b3185d7bb56f74f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea9aee6cba1723e81bfa2c3688803c8a124"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000001480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 809.762702ms ago: executing program 2 (id=371): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101ac2, 0x33) openat(0xffffffffffffff9c, 0x0, 0x441, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 671.820303ms ago: executing program 3 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x18, 0xa01, 0x600, 0x0, {0x4}, [@typed={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) 637.157054ms ago: executing program 1 (id=373): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f1", 0x37}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb", 0x49}, {0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 449.521195ms ago: executing program 3 (id=374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 25.618769ms ago: executing program 3 (id=375): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) 0s ago: executing program 1 (id=376): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.206' (ED25519) to the list of known hosts. [ 83.853636][ T5759] cgroup: Unknown subsys name 'net' [ 83.996280][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.718127][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.420428][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.438530][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.446462][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.454964][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.462897][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.477835][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.486036][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.497029][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.512494][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.521623][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.530116][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.538291][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.604698][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.618356][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.626840][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.636477][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.660681][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.671201][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.681554][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.690072][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.699285][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.706756][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.718738][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.735856][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.206185][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 88.375933][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 88.394750][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.403518][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.411237][ T5775] bridge_slave_0: entered allmulticast mode [ 88.419405][ T5775] bridge_slave_0: entered promiscuous mode [ 88.430212][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.437556][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.444923][ T5775] bridge_slave_1: entered allmulticast mode [ 88.452984][ T5775] bridge_slave_1: entered promiscuous mode [ 88.514008][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.543950][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.562998][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.590618][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.692540][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.699944][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.708424][ T5771] bridge_slave_0: entered allmulticast mode [ 88.716047][ T5771] bridge_slave_0: entered promiscuous mode [ 88.726813][ T5775] team0: Port device team_slave_0 added [ 88.754515][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.762065][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.769523][ T5771] bridge_slave_1: entered allmulticast mode [ 88.776994][ T5771] bridge_slave_1: entered promiscuous mode [ 88.785596][ T5775] team0: Port device team_slave_1 added [ 88.886419][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.909106][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.916176][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.942917][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.955823][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.964084][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.973742][ T5782] bridge_slave_0: entered allmulticast mode [ 88.980975][ T5782] bridge_slave_0: entered promiscuous mode [ 88.994219][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.015253][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.022424][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.048870][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.061985][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.069468][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.076747][ T5782] bridge_slave_1: entered allmulticast mode [ 89.084105][ T5782] bridge_slave_1: entered promiscuous mode [ 89.103132][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.110776][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.118446][ T5778] bridge_slave_0: entered allmulticast mode [ 89.125458][ T5778] bridge_slave_0: entered promiscuous mode [ 89.166665][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.174432][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.182014][ T5778] bridge_slave_1: entered allmulticast mode [ 89.189813][ T5778] bridge_slave_1: entered promiscuous mode [ 89.216724][ T5771] team0: Port device team_slave_0 added [ 89.235571][ T5771] team0: Port device team_slave_1 added [ 89.255909][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.268585][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.324302][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.358812][ T5782] team0: Port device team_slave_0 added [ 89.366408][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.373885][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.400114][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.414557][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.427591][ T5782] team0: Port device team_slave_1 added [ 89.454377][ T5775] hsr_slave_0: entered promiscuous mode [ 89.463898][ T5775] hsr_slave_1: entered promiscuous mode [ 89.485708][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.493212][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.519556][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.588795][ T5778] team0: Port device team_slave_0 added [ 89.609548][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.616548][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.643491][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.651539][ T5781] Bluetooth: hci1: command tx timeout [ 89.654666][ T51] Bluetooth: hci0: command tx timeout [ 89.667985][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.674994][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.700991][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.713993][ T5778] team0: Port device team_slave_1 added [ 89.777988][ T51] Bluetooth: hci2: command tx timeout [ 89.795199][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.802672][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.829409][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.855541][ T5771] hsr_slave_0: entered promiscuous mode [ 89.862955][ T5771] hsr_slave_1: entered promiscuous mode [ 89.869326][ T51] Bluetooth: hci3: command tx timeout [ 89.875380][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.884424][ T5771] Cannot create hsr debugfs directory [ 89.893736][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.901130][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.927498][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.010225][ T5782] hsr_slave_0: entered promiscuous mode [ 90.017006][ T5782] hsr_slave_1: entered promiscuous mode [ 90.023602][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.032492][ T5782] Cannot create hsr debugfs directory [ 90.189088][ T5778] hsr_slave_0: entered promiscuous mode [ 90.196160][ T5778] hsr_slave_1: entered promiscuous mode [ 90.203905][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.211798][ T5778] Cannot create hsr debugfs directory [ 90.432362][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.485422][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.525044][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.535993][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.632540][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.645362][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.677769][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.691534][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.775432][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.793332][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.805720][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.824765][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.936025][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.955936][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.966556][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.993662][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.030514][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.095557][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.116526][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.154400][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.161837][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.177165][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.184431][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.235493][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.261754][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.302825][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.310063][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.362382][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.400234][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.407489][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.439454][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.446757][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.490902][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.498684][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.536657][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.586933][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.641392][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.648625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.694876][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.699641][ T51] Bluetooth: hci0: command tx timeout [ 91.702586][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.715659][ T51] Bluetooth: hci1: command tx timeout [ 91.805558][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.816436][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.857397][ T51] Bluetooth: hci2: command tx timeout [ 91.937665][ T51] Bluetooth: hci3: command tx timeout [ 92.106101][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.182030][ T27] cfg80211: failed to load regulatory.db [ 92.272314][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.292084][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.311105][ T5775] veth0_vlan: entered promiscuous mode [ 92.340480][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.379018][ T5775] veth1_vlan: entered promiscuous mode [ 92.465005][ T5771] veth0_vlan: entered promiscuous mode [ 92.492122][ T5778] veth0_vlan: entered promiscuous mode [ 92.517995][ T5782] veth0_vlan: entered promiscuous mode [ 92.524665][ T5771] veth1_vlan: entered promiscuous mode [ 92.551105][ T5775] veth0_macvtap: entered promiscuous mode [ 92.561320][ T5778] veth1_vlan: entered promiscuous mode [ 92.575727][ T5775] veth1_macvtap: entered promiscuous mode [ 92.596794][ T5782] veth1_vlan: entered promiscuous mode [ 92.642135][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.653748][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.680780][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.690917][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699944][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.710002][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.744084][ T5771] veth0_macvtap: entered promiscuous mode [ 92.761926][ T5771] veth1_macvtap: entered promiscuous mode [ 92.795635][ T5778] veth0_macvtap: entered promiscuous mode [ 92.824020][ T5782] veth0_macvtap: entered promiscuous mode [ 92.839725][ T5782] veth1_macvtap: entered promiscuous mode [ 92.847015][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.859615][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.871131][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.879414][ T5778] veth1_macvtap: entered promiscuous mode [ 92.914066][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.924677][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.936655][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.966328][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.980666][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.989835][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.999456][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063197][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.078815][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.091675][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.104016][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.116793][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.133027][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.145518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.168887][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.179549][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.192098][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.203622][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.215082][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.226938][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.238136][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.249115][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.260485][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.271455][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.282850][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.294644][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.318084][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.326956][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.340222][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.349382][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.366958][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.381525][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.393283][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.404180][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.414981][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.425920][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.439416][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.458461][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.475154][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484182][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.496114][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.530201][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.538871][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.695432][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.729649][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.739530][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.765785][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.777400][ T51] Bluetooth: hci1: command tx timeout [ 93.778412][ T5781] Bluetooth: hci0: command tx timeout [ 93.859078][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.866998][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.937786][ T5781] Bluetooth: hci2: command tx timeout [ 93.966050][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.003465][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.019274][ T5781] Bluetooth: hci3: command tx timeout [ 94.089880][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.099731][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.283621][ T5840] syz.2.3[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.344107][ T5840] loop2: detected capacity change from 0 to 512 [ 94.473163][ T5840] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 94.934945][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.979091][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.303313][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.857399][ T5781] Bluetooth: hci1: command tx timeout [ 96.008099][ T51] Bluetooth: hci0: command tx timeout [ 96.020316][ T51] Bluetooth: hci2: command tx timeout [ 96.097469][ T5781] Bluetooth: hci3: command tx timeout [ 96.680608][ T5855] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5856] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5855] [ 97.398001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 97.807582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 99.958029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 100.271431][ T5867] ======================================================= [ 100.271431][ T5867] WARNING: The mand mount option has been deprecated and [ 100.271431][ T5867] and is ignored by this kernel. Remove the mand [ 100.271431][ T5867] option from the mount to silence this warning. [ 100.271431][ T5867] ======================================================= [ 101.721354][ T5871] loop0: detected capacity change from 0 to 128 [ 101.940382][ T5875] loop1: detected capacity change from 0 to 512 [ 101.956102][ T5875] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.975122][ T5875] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.125457][ T5875] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.212792][ T5875] EXT4-fs (loop1): 1 truncate cleaned up [ 102.327846][ T28] audit: type=1800 audit(1778142772.310:2): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 102.598982][ T5875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.149542][ T5887] Zero length message leads to an empty skb [ 103.942701][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.518770][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.607419][ T5761] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.737418][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 105.753485][ T787] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 105.775023][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.787841][ T787] usb 3-1: config 0 has no interface number 0 [ 105.795267][ T787] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.805200][ T5761] usb 4-1: Using ep0 maxpacket: 8 [ 105.810385][ T787] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.830077][ T787] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 105.843819][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.852073][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.863769][ T5761] usb 4-1: config 4 interface 0 has no altsetting 0 [ 105.870538][ T787] usb 3-1: Product: syz [ 105.877913][ T787] usb 3-1: Manufacturer: syz [ 105.883556][ T787] usb 3-1: SerialNumber: syz [ 105.889055][ T5761] usb 4-1: string descriptor 0 read error: -22 [ 105.895672][ T5761] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 105.917433][ T5761] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 105.937537][ T787] usb 3-1: config 0 descriptor?? [ 105.969982][ T787] smsc95xx v2.0.0 [ 105.973857][ T787] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 105.990872][ T5761] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 106.022873][ T787] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 106.032787][ T5761] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.055875][ T5761] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 106.097361][ T5761] usb 4-1: media controller created [ 106.148870][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.221396][ T5761] zl10353_read_register: readreg error (reg=127, ret==0) [ 107.444856][ T5818] usb 3-1: USB disconnect, device number 2 [ 107.833913][ T27] IPVS: starting estimator thread 0... [ 107.968670][ T5939] IPVS: using max 15 ests per chain, 36000 per kthread [ 108.122193][ T5927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.424587][ T5761] usb 4-1: USB disconnect, device number 2 [ 111.697829][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.907342][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 111.921001][ T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 111.940594][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.961107][ T8] usb 3-1: config 0 has no interface number 0 [ 111.977491][ T8] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.997522][ T8] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.037393][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 112.087258][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.157375][ T8] usb 3-1: Product: syz [ 112.161640][ T8] usb 3-1: Manufacturer: syz [ 112.166315][ T8] usb 3-1: SerialNumber: syz [ 112.192975][ T8] usb 3-1: config 0 descriptor?? [ 112.210020][ T8] smsc95xx v2.0.0 [ 112.213746][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 112.247896][ T8] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 112.492369][ T5982] binder: 5979:5982 ioctl c0306201 0 returned -14 [ 114.248347][ T787] usb 3-1: USB disconnect, device number 3 [ 118.057444][ T6018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.435440][ T6035] binder: 6030:6035 ioctl c0306201 0 returned -14 [ 122.997953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 123.817240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.519007][ T6078] binder: BINDER_SET_CONTEXT_MGR already set [ 124.525433][ T6078] binder: 6074:6078 ioctl 4018620d 200000000040 returned -16 [ 124.535222][ T6078] binder: 6074:6078 ioctl c0306201 0 returned -14 [ 125.168906][ T6071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.441418][ T6080] loop1: detected capacity change from 0 to 128 [ 125.533314][ T6080] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.612174][ T6080] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.989312][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.527532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 130.126375][ T6118] binder: BINDER_SET_CONTEXT_MGR already set [ 130.132750][ T6118] binder: 6108:6118 ioctl 4018620d 200000000040 returned -16 [ 130.143658][ T6118] binder: 6108:6118 ioctl c0306201 0 returned -14 [ 132.718916][ T6153] binder: 6151:6153 ioctl c0306201 0 returned -14 [ 133.498462][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.505271][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.422922][ T6180] binder: 6177:6180 ioctl c0306201 0 returned -14 [ 138.357934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 138.767648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 143.233003][ T6244] syz.1.115 uses obsolete (PF_INET,SOCK_PACKET) [ 145.076204][ T5818] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.332283][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 145.373924][ T5818] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 145.404243][ T5818] usb 3-1: config 0 has no interface number 0 [ 145.447318][ T5818] usb 3-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 145.470703][ T5818] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.488409][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.509671][ T5818] usb 3-1: Product: syz [ 145.520835][ T5818] usb 3-1: Manufacturer: syz [ 145.526790][ T5818] usb 3-1: SerialNumber: syz [ 145.584181][ T5818] usb 3-1: config 0 descriptor?? [ 145.608292][ T5818] smsc95xx v2.0.0 [ 145.611988][ T5818] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 145.691708][ T5818] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 147.989750][ T5818] usb 3-1: USB disconnect, device number 4 [ 150.841432][ T6294] loop0: detected capacity change from 0 to 128 [ 150.919214][ T6294] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.987755][ T6294] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.432263][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.305800][ T6308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.289034][ T6344] loop3: detected capacity change from 0 to 128 [ 153.329203][ T6344] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.355217][ T6344] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.533180][ T6331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.385802][ T6351] process 'syz.2.147' launched './file0' with NULL argv: empty string added [ 154.523370][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.623471][ T5781] Bluetooth: hci3: link tx timeout [ 154.630058][ T5781] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.277918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.687480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.703205][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 156.720203][ T6363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.730925][ T6405] loop0: detected capacity change from 0 to 128 [ 157.762103][ T6405] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.775611][ T6405] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.812345][ T6386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.035334][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.462661][ T6417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.287355][ T787] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 161.357299][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 161.523915][ T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.534235][ T787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.552726][ T787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.561938][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 161.572555][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.577847][ T5869] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 161.607486][ T5869] usb 1-1: config 0 has no interface number 0 [ 161.625583][ T5869] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.638104][ T5869] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.655649][ T5869] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 161.666439][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.678834][ T5869] usb 1-1: Product: syz [ 161.683284][ T5869] usb 1-1: Manufacturer: syz [ 161.691105][ T5869] usb 1-1: SerialNumber: syz [ 161.710734][ T5869] usb 1-1: config 0 descriptor?? [ 161.732544][ T5869] smsc95xx v2.0.0 [ 161.737089][ T5869] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 161.747808][ T5869] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 161.817795][ T787] usb 2-1: usb_control_msg returned -32 [ 161.833742][ T787] usbtmc 2-1:16.0: can't read capabilities [ 162.436039][ T5869] usb 2-1: USB disconnect, device number 2 [ 163.156474][ T6465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.230077][ T5869] usb 1-1: USB disconnect, device number 2 [ 168.173361][ T6553] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 168.180076][ T6553] ALSA: mixer_oss: invalid OSS volume '' [ 168.185722][ T6553] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 168.192772][ T6553] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 168.746942][ T6547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.992765][ T6568] loop2: detected capacity change from 0 to 131072 [ 170.010341][ T6562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.076506][ T6568] F2FS-fs (loop2): invalid crc value [ 170.137567][ T6568] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.183323][ T6568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 173.091058][ T59] nci: nci_rx_work: unknown MT 0x7 [ 173.767460][ T6595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.247057][ T6615] loop1: detected capacity change from 0 to 128 [ 174.563740][ T6619] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 174.572728][ T6619] ALSA: mixer_oss: invalid OSS volume '' [ 174.579770][ T6619] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 174.607530][ T6619] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 174.958911][ T6615] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.984813][ T6615] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.346437][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.745370][ T6651] loop3: detected capacity change from 0 to 128 [ 177.772169][ T6651] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.799436][ T6651] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.321431][ T6654] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 178.335733][ T6654] ALSA: mixer_oss: invalid OSS volume '' [ 178.342671][ T6654] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 178.353325][ T6654] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 178.979859][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.171166][ T49] nci: nci_rx_work: unknown MT 0x7 [ 181.807438][ T6679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.894217][ T6696] loop0: detected capacity change from 0 to 128 [ 181.978661][ T6696] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.023228][ T6696] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.386116][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.766281][ T6712] binder: BINDER_SET_CONTEXT_MGR already set [ 182.798196][ T6712] binder: 6711:6712 ioctl 4018620d 200000004a80 returned -16 [ 183.757964][ T6720] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 183.775991][ T6720] ALSA: mixer_oss: invalid OSS volume '' [ 183.787217][ T6720] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 183.831294][ T6720] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 184.349333][ T6723] 9pnet_fd: Insufficient options for proto=fd [ 184.460573][ T6730] loop2: detected capacity change from 0 to 128 [ 184.480519][ T59] nci: nci_rx_work: unknown MT 0x7 [ 184.511425][ T6730] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.528794][ T6730] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.194880][ T6725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.332669][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.014196][ T6758] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 187.024122][ T6758] ALSA: mixer_oss: invalid OSS volume '' [ 187.036829][ T6758] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 187.100305][ T6758] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 188.292481][ T6784] 9pnet_fd: Insufficient options for proto=fd [ 188.548427][ T6788] loop2: detected capacity change from 0 to 128 [ 188.657957][ T6788] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.609612][ T6788] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.272590][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.211450][ T5781] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 191.520893][ T6819] 9pnet_fd: Insufficient options for proto=fd [ 193.756876][ T6831] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 193.764042][ T6831] ALSA: mixer_oss: invalid OSS volume '' [ 193.770013][ T6831] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 193.780572][ T6831] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 196.067828][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.074225][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.393081][ T6860] loop2: detected capacity change from 0 to 128 [ 198.479069][ T6860] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.521859][ T6860] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.746781][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.965196][ T6854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.203263][ T6873] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 199.209896][ T6873] ALSA: mixer_oss: invalid OSS volume '' [ 199.215592][ T6873] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 199.222595][ T6873] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 201.968687][ T6893] Failed to get privilege flags for destination (handle=0x2:0x5) [ 204.268332][ T6917] ALSA: mixer_oss: invalid OSS volume 'ðÿøÿÿÿy¤ðÿ' [ 204.274941][ T6917] ALSA: mixer_oss: invalid OSS volume '' [ 204.280711][ T6917] ALSA: mixer_oss: invalid OSS volume 'ù©Î¯Ð~Ð ' [ 204.287761][ T6917] ALSA: mixer_oss: invalid OSS volume 'ƒ7„ï8n"Ì"îGms‰R"–‚âK’S:©õ¦™Y' [ 206.387814][ T6930] 9pnet_fd: Insufficient options for proto=fd [ 207.907545][ T6939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.017291][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 212.023506][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 212.029833][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 216.332286][ T7011] 9pnet_fd: Insufficient options for proto=fd [ 218.734507][ T5816] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 219.017351][ T5816] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 219.088420][ T5816] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 219.117049][ T5816] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 219.177400][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.207269][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 219.237791][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.279747][ T5816] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 219.317236][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.349724][ T5816] usb 1-1: config 0 descriptor?? [ 219.365689][ T7017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.935119][ T5816] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 220.170100][ C1] usblp0: nonzero read bulk status received: -71 [ 220.227981][ T7017] loop0: detected capacity change from 0 to 256 [ 220.313321][ T7017] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 220.526689][ T23] kernel write not supported for file /usb/lp0 (pid: 23 comm: kworker/1:0) [ 220.547750][ T23] usb 1-1: USB disconnect, device number 3 [ 220.578488][ T23] usblp0: removed [ 223.473293][ T7042] 9pnet_fd: Insufficient options for proto=fd [ 225.919487][ T7053] loop1: detected capacity change from 0 to 128 [ 226.073338][ T7053] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.303947][ T7053] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.541315][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.867349][ T7072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.932346][ T7084] 9pnet_fd: Insufficient options for proto=fd [ 232.312063][ T7099] loop2: detected capacity change from 0 to 128 [ 232.478035][ T7099] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.529379][ T7099] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.746161][ T7106] BUG: unable to handle page fault for address: ffffffffffffffec [ 232.753978][ T7106] #PF: supervisor read access in kernel mode [ 232.759991][ T7106] #PF: error_code(0x0000) - not-present page [ 232.766013][ T7106] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 232.772080][ T7106] Oops: 0000 [#1] PREEMPT SMP KASAN [ 232.777341][ T7106] CPU: 0 PID: 7106 Comm: syz.2.371 Not tainted syzkaller #0 [ 232.784675][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.794781][ T7106] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 232.800597][ T7106] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 232.820289][ T7106] RSP: 0018:ffffc9000c7476f8 EFLAGS: 00010246 [ 232.826408][ T7106] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 232.834412][ T7106] RDX: ffffc9000e2ee000 RSI: 00000000000033e9 RDI: ffffffffffffffec [ 232.842414][ T7106] RBP: ffffc9000c747810 R08: ffff88805d44201f R09: 1ffff1100ba88403 [ 232.850411][ T7106] R10: dffffc0000000000 R11: ffffed100ba88404 R12: ffff88805d4420b0 [ 232.858431][ T7106] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 232.866531][ T7106] FS: 00007f8db2cbd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 232.875509][ T7106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.882133][ T7106] CR2: ffffffffffffffec CR3: 000000002db71000 CR4: 00000000003506f0 [ 232.890141][ T7106] Call Trace: [ 232.893456][ T7106] [ 232.896415][ T7106] finish_range+0x234/0x340 [ 232.900964][ T7106] ? update_tind_extent_range+0x3f0/0x3f0 [ 232.906722][ T7106] ext4_ext_migrate+0xa3f/0x1080 [ 232.911696][ T7106] ? mb_regenerate_buddy+0x510/0x510 [ 232.917010][ T7106] ? down_read_killable+0x340/0x340 [ 232.922277][ T7106] ? sb_start_write+0x110/0x1c0 [ 232.927160][ T7106] ? mnt_want_write_file+0x16a/0x200 [ 232.932492][ T7106] ext4_ioctl+0x1ee3/0x3b80 [ 232.937023][ T7106] ? ext4_fileattr_set+0x16d0/0x16d0 [ 232.942334][ T7106] ? mark_lock+0x94/0x320 [ 232.946689][ T7106] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 232.952703][ T7106] ? do_vfs_ioctl+0x1573/0x1cc0 [ 232.957585][ T7106] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 232.963254][ T7106] ? tomoyo_path_number_perm+0x217/0x620 [ 232.968927][ T7106] ? __lock_acquire+0x7d40/0x7d40 [ 232.973975][ T7106] ? slab_free_freelist_hook+0x130/0x1a0 [ 232.979640][ T7106] ? tomoyo_path_number_perm+0x500/0x620 [ 232.985308][ T7106] ? __kmem_cache_free+0xba/0x1e0 [ 232.990370][ T7106] ? tomoyo_path_number_perm+0x5b4/0x620 [ 232.996039][ T7106] ? tomoyo_path_number_perm+0x217/0x620 [ 233.001706][ T7106] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 233.007237][ T7106] ? __fget_files+0x28/0x4b0 [ 233.011863][ T7106] ? __fget_files+0x28/0x4b0 [ 233.016488][ T7106] ? bpf_lsm_file_ioctl+0x9/0x10 [ 233.021469][ T7106] ? security_file_ioctl+0x80/0xa0 [ 233.026609][ T7106] ? ext4_fileattr_set+0x16d0/0x16d0 [ 233.031915][ T7106] __se_sys_ioctl+0xfd/0x170 [ 233.036533][ T7106] do_syscall_64+0x55/0xa0 [ 233.040970][ T7106] ? clear_bhb_loop+0x40/0x90 [ 233.045677][ T7106] ? clear_bhb_loop+0x40/0x90 [ 233.050387][ T7106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.056319][ T7106] RIP: 0033:0x7f8db1d9cdd9 [ 233.060774][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.080411][ T7106] RSP: 002b:00007f8db2cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.088862][ T7106] RAX: ffffffffffffffda RBX: 00007f8db2016090 RCX: 00007f8db1d9cdd9 [ 233.096866][ T7106] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 233.104942][ T7106] RBP: 00007f8db1e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 233.113027][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.121204][ T7106] R13: 00007f8db2016128 R14: 00007f8db2016090 R15: 00007ffebfd1e0b8 [ 233.129294][ T7106] [ 233.132339][ T7106] Modules linked in: [ 233.136269][ T7106] CR2: ffffffffffffffec [ 233.140459][ T7106] ---[ end trace 0000000000000000 ]--- [ 233.145934][ T7106] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 233.151704][ T7106] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 233.171424][ T7106] RSP: 0018:ffffc9000c7476f8 EFLAGS: 00010246 [ 233.177519][ T7106] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 233.185536][ T7106] RDX: ffffc9000e2ee000 RSI: 00000000000033e9 RDI: ffffffffffffffec [ 233.193533][ T7106] RBP: ffffc9000c747810 R08: ffff88805d44201f R09: 1ffff1100ba88403 [ 233.201530][ T7106] R10: dffffc0000000000 R11: ffffed100ba88404 R12: ffff88805d4420b0 [ 233.209535][ T7106] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 233.217527][ T7106] FS: 00007f8db2cbd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 233.226483][ T7106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.233089][ T7106] CR2: ffffffffffffffec CR3: 000000002db71000 CR4: 00000000003506f0 [ 233.241098][ T7106] Kernel panic - not syncing: Fatal exception [ 233.247746][ T7106] Kernel Offset: disabled [ 233.252099][ T7106] Rebooting in 86400 seconds..