last executing test programs: 9m17.11165771s ago: executing program 2 (id=35): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x2, 0x24040800) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x80000) 9m13.127720126s ago: executing program 2 (id=40): r0 = socket$inet6(0xa, 0x1, 0x7f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r2, r2}, 0xffffffffffffffff, 0xfe, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500), 0x0, 0xc040) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9m7.23698178s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 9m0.300389048s ago: executing program 2 (id=64): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/165, 0xa5}, {0x0}], 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) shutdown(r2, 0x0) 8m59.397982615s ago: executing program 2 (id=68): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./mysys/file0\x00', &(0x7f00000000c0), 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) open_tree(r1, &(0x7f0000000000)='./bus\x00', 0x80000) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8m54.849325834s ago: executing program 2 (id=75): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = fanotify_init(0x40, 0x80000) read(r0, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r1, 0x0, 0x0) 8m37.283586512s ago: executing program 32 (id=75): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = fanotify_init(0x40, 0x80000) read(r0, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents64(r1, 0x0, 0x0) 7m3.351014949s ago: executing program 0 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m2.161413978s ago: executing program 0 (id=258): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r4, r4, 0x0, 0x1000000201005) 7m1.039473985s ago: executing program 0 (id=259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffc}}) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20008084) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r6, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) 6m58.532179869s ago: executing program 0 (id=275): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x100) tee(r3, r4, 0x8000, 0x0) 6m57.85798237s ago: executing program 0 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r3, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000140)=0x8) 6m54.925607697s ago: executing program 0 (id=268): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) 6m42.766970982s ago: executing program 5 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 6m41.623799865s ago: executing program 5 (id=280): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 6m39.026295706s ago: executing program 33 (id=268): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) 6m38.816399226s ago: executing program 5 (id=284): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0xc800) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') 6m36.78948923s ago: executing program 5 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 6m33.597552398s ago: executing program 5 (id=290): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xbdbd, 0x42401}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}]}]}}}]}, 0x44}}, 0x4000844) socket$inet6_tcp(0xa, 0x1, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x240440c5, &(0x7f00000001c0)={0xa, 0x2, 0xfdfa, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}}, 0x20}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) 6m21.832704845s ago: executing program 5 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x7, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6m3.780425685s ago: executing program 34 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x7, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 17.753831864s ago: executing program 6 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x10, &(0x7f00000003c0)={0x1, 0x6}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000, '\x00', 0x0, r0, 0x0, 0x1ffffffe, 0x4}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x28000081}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, &(0x7f0000000080)='4', 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.34752946s ago: executing program 6 (id=1050): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0xa, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0xa00414, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.554152276s ago: executing program 6 (id=1054): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030300d3030303030303030303430393600793339b64bc8110c00455b6eba7f2c3b2d23c4f85499cb947784fbcb8dad7417b2677432a8618f194a75cfcddc4a043714141c34d20ea14d4975a56bbd4967a092168bea8ed7"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.', 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500000005"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x34, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 14.508198435s ago: executing program 6 (id=1057): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 14.012972238s ago: executing program 1 (id=1058): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0xa, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0xa00414, 0x0) ioctl(0xffffffffffffffff, 0xc138fd07, &(0x7f0000000000)="040000000000000000000400380100"/46) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 12.66748949s ago: executing program 1 (id=1063): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 10.985150989s ago: executing program 1 (id=1065): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x10) 10.95177584s ago: executing program 3 (id=1066): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 10.896861363s ago: executing program 1 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x100) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) prlimit64(r1, 0xf, &(0x7f00000000c0)={0x9, 0x8000}, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, 0xffffffffffffffff, 0x0}]) 10.786748808s ago: executing program 7 (id=1068): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030300d3030303030303030303430393600793339b64bc8110c00455b6eba7f2c3b2d23c4f85499cb947784fbcb8dad7417b2677432a8618f194a75cfcddc4a043714141c34d20ea14d4975a56bbd4967a092168bea8ed7"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.', 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500000005"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x34, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 9.627550482s ago: executing program 1 (id=1069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 9.502731208s ago: executing program 3 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) listen(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 9.257774089s ago: executing program 7 (id=1071): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.94959853s ago: executing program 4 (id=1072): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.859751991s ago: executing program 4 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x10, &(0x7f00000003c0)={0x1, 0x6}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockname$packet(r0, 0x0, &(0x7f0000000540)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000, '\x00', 0x0, r0, 0x0, 0x1ffffffe, 0x4}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x28000081}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, &(0x7f0000000080)='4', 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.739438936s ago: executing program 7 (id=1074): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x8, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xfff3, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$hwrng(0xffffff9c, 0x0, 0x20a582, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="05f300000000000000"], 0x18}}, 0x0) 5.778483681s ago: executing program 4 (id=1075): socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) r1 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 4.604546465s ago: executing program 1 (id=1076): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 4.562852218s ago: executing program 4 (id=1077): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x10) 4.400249545s ago: executing program 3 (id=1078): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0xa00414, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.351456748s ago: executing program 7 (id=1079): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 4.350552117s ago: executing program 6 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x100) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, 0xffffffffffffffff, 0x0}]) 4.167280796s ago: executing program 4 (id=1081): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030300d3030303030303030303430393600793339b64bc8110c00455b6eba7f2c3b2d23c4f85499cb947784fbcb8dad7417b2677432a8618f194a75cfcddc4a043714141c34d20ea14d4975a56bbd4967a092168bea8ed7"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.', 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500000005"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x34, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 4.014463113s ago: executing program 4 (id=1082): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2.638953837s ago: executing program 6 (id=1083): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) 2.539409242s ago: executing program 3 (id=1084): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 1.413084764s ago: executing program 7 (id=1085): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {}, {0xfff3, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x10) 1.410069254s ago: executing program 3 (id=1086): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16, @ANYRESHEX, @ANYRESHEX], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001300)=ANY=[], 0x0, 0x26}, 0x28) clock_gettime(0x17, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x6, 'ip6_vti0\x00'}) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r1, 0xfffffffffffffee6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0xfffffe27, 0x0, 0x0, 0x0, 0x27, 0x8, 0x0, 0x0}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000703000000000000000000010000010c00064000000000000000080900010073797a30000000000800054000000001"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$bt_hci(r2, 0x84, 0x80, 0x0, 0x0) 1.40228ms ago: executing program 3 (id=1087): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 0s ago: executing program 7 (id=1088): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): T4319] usb 2-1: Using ep0 maxpacket: 8 [ 186.378658][ T4319] usb 2-1: config 9 has an invalid interface number: 3 but max is 0 [ 186.402064][ T4319] usb 2-1: config 9 has no interface number 0 [ 186.423832][ T4319] usb 2-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=16.43 [ 186.453573][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.472168][ T4319] usb 2-1: Product: syz [ 186.482282][ T4319] usb 2-1: Manufacturer: syz [ 186.495431][ T4319] usb 2-1: SerialNumber: syz [ 186.967642][ T4319] usb 2-1: NDI device with a latency value of 1 [ 186.996679][ T4319] ftdi_sio 2-1:9.3: FTDI USB Serial Device converter detected [ 187.042134][ T4319] ftdi_sio ttyUSB0: unknown device type: 0x1643 [ 187.116011][ T4319] usb 2-1: USB disconnect, device number 4 [ 187.134711][ T4319] ftdi_sio 2-1:9.3: device disconnected [ 187.203720][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.309837][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.948257][ T5072] device xfrm0 entered promiscuous mode [ 188.095177][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.103089][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.111171][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.167724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.203454][ T26] usb 1-1: USB disconnect, device number 4 [ 188.303012][ T5079] PM: suspend entry (s2idle) [ 188.580577][ T5079] Filesystems sync: 0.265 seconds [ 188.647632][ T5088] loop4: detected capacity change from 0 to 2048 [ 189.703446][ T5088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.112888][ T5079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.130227][ T5079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 190.201255][ T5079] Bluetooth: hci0: Suspend notifier action (3) failed: -4 [ 190.240910][ T5092] device syzkaller0 entered promiscuous mode [ 190.248967][ T5079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.277698][ T5079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.301371][ T5079] Bluetooth: hci1: Suspend notifier action (3) failed: -4 [ 190.315249][ T5079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.341451][ T5079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.375514][ T5079] Bluetooth: hci3: Suspend notifier action (3) failed: -4 [ 190.446622][ T5079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.466299][ T5079] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 190.517202][ T5079] Bluetooth: hci4: Suspend notifier action (3) failed: -4 [ 190.541901][ T5079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.565358][ T4317] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.590541][ T5079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 190.615827][ T5079] Bluetooth: hci2: Suspend notifier action (3) failed: -4 [ 190.637775][ T5079] Freezing user space processes [ 190.673250][ T5079] Freezing user space processes completed (elapsed 0.030 seconds) [ 190.681610][ T5079] OOM killer disabled. [ 190.685957][ T5079] Freezing remaining freezable tasks [ 192.163412][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.316748][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.395019][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.485134][ T49] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.565131][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.235728][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 194.247875][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.254321][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.395097][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 194.475098][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 194.555030][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 194.635060][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 195.835611][ T4317] usb 5-1: device descriptor read/all, error -110 [ 196.025139][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.185124][ T4317] usb 5-1: device descriptor read/64, error -32 [ 196.306773][ T4317] usb usb5-port1: attempt power cycle [ 196.725264][ T4317] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.766037][ T4317] usb 5-1: device descriptor read/8, error -32 [ 197.035124][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 197.065465][ T4317] usb 5-1: device descriptor read/8, error -32 [ 197.192309][ T4317] usb usb5-port1: unable to enumerate USB device [ 197.204532][ T5079] Freezing remaining freezable tasks completed (elapsed 6.513 seconds) [ 197.213237][ T5079] printk: Suspending console(s) (use no_console_suspend to debug) [ 197.328716][ T5079] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 197.368315][ T5079] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 197.406321][ T5079] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 197.447065][ T5079] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 197.486634][ T5079] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 197.527136][ T5079] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 197.577602][ T5079] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 197.617280][ T5079] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 197.656018][ T5079] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 197.696552][ T5079] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 197.736642][ T5079] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 197.776602][ T5079] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 197.816838][ T5079] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 197.856573][ T5079] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 197.897106][ T5079] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 197.968278][ T11] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 198.194774][ T5079] PM: suspend debug: Waiting for 0 second(s). [ 198.511915][ T5079] OOM killer enabled. [ 198.512585][ T5079] Restarting tasks ... done. [ 198.826074][ T5079] random: crng reseeded on system resumption [ 198.830159][ T5079] PM: suspend exit [ 199.086587][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.239151][ T5208] loop1: detected capacity change from 0 to 512 [ 199.263031][ T5210] loop5: detected capacity change from 0 to 1024 [ 199.352104][ T5208] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.161: inode has both inline data and extents flags [ 199.372261][ T5208] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.161: couldn't read orphan inode 15 (err -117) [ 199.376902][ T5208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 199.548941][ T5221] loop0: detected capacity change from 0 to 128 [ 199.594881][ T5221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.607478][ T5221] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.714226][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 199.853472][ T5194] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 199.876692][ T5200] ceph: No mds server is up or the cluster is laggy [ 199.958029][ T5226] loop1: detected capacity change from 0 to 512 [ 200.068322][ T5226] EXT4-fs (loop1): Test dummy encryption mode enabled [ 200.095779][ T5226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.097431][ T5226] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 200.220770][ T5231] FAULT_INJECTION: forcing a failure. [ 200.220770][ T5231] name fail_futex, interval 1, probability 0, space 0, times 1 [ 200.244121][ T5231] CPU: 1 PID: 5231 Comm: syz.5.166 Not tainted syzkaller #0 [ 200.245463][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.247102][ T5231] Call Trace: [ 200.247704][ T5231] [ 200.248202][ T5231] dump_stack_lvl+0x188/0x24e [ 200.249042][ T5231] ? show_regs_print_info+0x12/0x12 [ 200.249949][ T5231] ? load_image+0x410/0x410 [ 200.250886][ T5231] ? get_user_pages_fast_only+0x40/0x40 [ 200.251835][ T5231] should_fail_ex+0x390/0x4c0 [ 200.252658][ T5231] get_futex_key+0x922/0x1000 [ 200.253466][ T5231] ? futex_setup_timer+0xc0/0xc0 [ 200.254327][ T5231] ? verify_lock_unused+0x140/0x140 [ 200.255252][ T5231] futex_wake+0x123/0x4f0 [ 200.255949][ T5231] ? futex_wake_mark+0x150/0x150 [ 200.256802][ T5231] do_futex+0x2e2/0x320 [ 200.257579][ T5231] ? __ia32_sys_get_robust_list+0x100/0x100 [ 200.258631][ T5231] ? __might_fault+0xc2/0x120 [ 200.259464][ T5231] mm_release+0x20a/0x330 [ 200.260207][ T5231] ? exit_robust_list+0x2ce/0x2f0 [ 200.261069][ T5231] ? exit_mm_release+0x30/0x30 [ 200.261916][ T5231] ? lockdep_hardirqs_on+0x94/0x140 [ 200.263539][ T5231] exit_mm+0xa0/0x350 [ 200.264395][ T5231] ? sysctl_delayacct+0x220/0x220 [ 200.265312][ T5231] ? do_exit+0x2570/0x2570 [ 200.266115][ T5231] ? mm_trace_rss_stat+0xa7/0x250 [ 200.266912][ T5231] ? sync_mm_rss+0x211/0x350 [ 200.267706][ T5231] do_exit+0x958/0x2570 [ 200.268423][ T5231] ? put_task_struct+0x80/0x80 [ 200.269389][ T5231] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 200.270424][ T5231] ? lock_chain_count+0x20/0x20 [ 200.271244][ T5231] ? _raw_spin_lock_irq+0xb7/0xf0 [ 200.272135][ T5231] do_group_exit+0x229/0x2e0 [ 200.273007][ T5231] ? lockdep_hardirqs_on+0x94/0x140 [ 200.273936][ T5231] get_signal+0x1259/0x1340 [ 200.274723][ T5231] arch_do_signal_or_restart+0xc4/0x1310 [ 200.275655][ T5231] ? lockdep_hardirqs_on+0x94/0x140 [ 200.276579][ T5231] ? do_futex+0x310/0x320 [ 200.277337][ T5231] ? get_sigframe_size+0x10/0x10 [ 200.278193][ T5231] ? __ia32_sys_get_robust_list+0x100/0x100 [ 200.279197][ T5231] ? putname+0x1e/0x150 [ 200.279969][ T5231] ? exit_to_user_mode_loop+0x3b/0x110 [ 200.280868][ T5231] exit_to_user_mode_loop+0x70/0x110 [ 200.281777][ T5231] exit_to_user_mode_prepare+0xee/0x180 [ 200.282712][ T5231] syscall_exit_to_user_mode+0x16/0x40 [ 200.283657][ T5231] do_syscall_64+0x58/0xa0 [ 200.284408][ T5231] ? clear_bhb_loop+0x60/0xb0 [ 200.285260][ T5231] ? clear_bhb_loop+0x60/0xb0 [ 200.286174][ T5231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.287203][ T5231] RIP: 0033:0x7fbead19e159 [ 200.287979][ T5231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.290950][ T5231] RSP: 002b:00007fbeab3d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 200.292252][ T5231] RAX: fffffffffffffe00 RBX: 00007fbead426098 RCX: 00007fbead19e159 [ 200.293525][ T5231] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbead426098 [ 200.294887][ T5231] RBP: 00007fbead426090 R08: 0000000000000000 R09: 0000000000000000 [ 200.296132][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.297437][ T5231] R13: 00007fbead426128 R14: 00007ffff8380630 R15: 00007ffff8380718 [ 200.298691][ T5231] [ 200.366027][ T5233] loop3: detected capacity change from 0 to 128 [ 200.388689][ T5233] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 200.486393][ T5233] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.525301][ T5233] ext2 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.661164][ T27] audit: type=1800 audit(1789683829.842:7): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.167" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=15 res=0 errno=0 [ 200.698572][ T5244] loop5: detected capacity change from 0 to 512 [ 200.708719][ T5244] EXT4-fs: Ignoring removed oldalloc option [ 200.747736][ T5244] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.805124][ T5244] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.830542][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 201.109045][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 201.234788][ T5237] loop1: detected capacity change from 0 to 32768 [ 201.305569][ T5190] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm kworker/u4:102: Invalid inode table block 2755996965 in block_group 0 [ 201.316669][ T5237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.168 (5237) [ 201.386778][ T4754] EXT4-fs (loop5): unmounting filesystem. [ 201.436667][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 201.438594][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 201.440504][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 202.101188][ T5259] loop0: detected capacity change from 0 to 4096 [ 202.115209][ T5237] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.117584][ T5237] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 202.119063][ T5237] BTRFS info (device loop1): disabling tree log [ 202.120089][ T5237] BTRFS info (device loop1): using free space tree [ 202.196735][ T5259] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 202.198783][ T5259] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 202.199975][ T5259] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 202.201194][ T5259] loop0: [ 202.389300][ T5273] FAULT_INJECTION: forcing a failure. [ 202.389300][ T5273] name failslab, interval 1, probability 0, space 0, times 0 [ 202.391381][ T5273] CPU: 1 PID: 5273 Comm: syz.3.176 Not tainted syzkaller #0 [ 202.392659][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.394318][ T5273] Call Trace: [ 202.394887][ T5273] [ 202.395370][ T5273] dump_stack_lvl+0x188/0x24e [ 202.396129][ T5273] ? show_regs_print_info+0x12/0x12 [ 202.396968][ T5273] ? load_image+0x410/0x410 [ 202.397760][ T5273] ? __might_sleep+0xd0/0xd0 [ 202.398549][ T5273] ? __lock_acquire+0x7c40/0x7c40 [ 202.399423][ T5273] should_fail_ex+0x390/0x4c0 [ 202.400224][ T5273] should_failslab+0x5/0x20 [ 202.400999][ T5273] slab_pre_alloc_hook+0x59/0x300 [ 202.401815][ T5273] ? kobject_uevent_env+0x278/0x890 [ 202.402781][ T5273] __kmem_cache_alloc_node+0x4f/0x270 [ 202.403644][ T5273] ? kobject_uevent_env+0x278/0x890 [ 202.404503][ T5273] kmalloc_trace+0x26/0xe0 [ 202.405227][ T5273] ? dev_uevent_filter+0xb0/0xb0 [ 202.406134][ T5273] kobject_uevent_env+0x278/0x890 [ 202.407023][ T5273] ? dummy_pullup+0x120/0x120 [ 202.407882][ T5273] ? dummy_udc_set_speed+0xd0/0xd0 [ 202.408802][ T5273] gadget_bind_driver+0x5cf/0x760 [ 202.409725][ T5273] ? gadget_match_driver+0x130/0x130 [ 202.410603][ T5273] really_probe+0x24a/0xb40 [ 202.411409][ T5273] ? pm_runtime_barrier+0x147/0x1c0 [ 202.412285][ T5273] __driver_probe_device+0x1f5/0x390 [ 202.413212][ T5273] driver_probe_device+0x4f/0x420 [ 202.414148][ T5273] __driver_attach+0x43d/0x6c0 [ 202.414964][ T5273] ? driver_attach+0x40/0x40 [ 202.415838][ T5273] bus_for_each_dev+0x182/0x1f0 [ 202.416682][ T5273] ? kobject_add+0x230/0x230 [ 202.417449][ T5273] ? bus_remove_file+0xd0/0xd0 [ 202.418334][ T5273] ? do_raw_spin_unlock+0x11d/0x230 [ 202.419221][ T5273] bus_add_driver+0x324/0x5d0 [ 202.420032][ T5273] driver_register+0x32d/0x430 [ 202.420726][ T5273] usb_gadget_register_driver_owner+0xf5/0x260 [ 202.421668][ T5273] raw_ioctl+0x13a0/0x3cd0 [ 202.422365][ T5273] ? __kmem_cache_free+0xb6/0x200 [ 202.423108][ T5273] ? tomoyo_path_number_perm+0x205/0x650 [ 202.423950][ T5273] ? tomoyo_path_number_perm+0x5a4/0x650 [ 202.424840][ T5273] ? tomoyo_path_number_perm+0x205/0x650 [ 202.425745][ T5273] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 202.426643][ T5273] ? make_qualifier+0x3b0/0x3b0 [ 202.427497][ T5273] ? __fget_files+0x28/0x460 [ 202.428323][ T5273] ? bpf_lsm_file_ioctl+0x5/0x10 [ 202.429147][ T5273] ? security_file_ioctl+0x7c/0xa0 [ 202.429984][ T5273] ? make_qualifier+0x3b0/0x3b0 [ 202.430892][ T5273] __se_sys_ioctl+0xfa/0x170 [ 202.431690][ T5273] do_syscall_64+0x4c/0xa0 [ 202.432494][ T5273] ? clear_bhb_loop+0x60/0xb0 [ 202.433341][ T5273] ? clear_bhb_loop+0x60/0xb0 [ 202.434158][ T5273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.435161][ T5273] RIP: 0033:0x7f4ef1b9ddeb [ 202.435899][ T5273] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 202.439081][ T5273] RSP: 002b:00007f4ef2b3af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.440569][ T5273] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4ef1b9ddeb [ 202.441883][ T5273] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 202.443159][ T5273] RBP: 00007f4ef2b3bfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 202.444411][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.445711][ T5273] R13: 00002000000002c0 R14: 0000000000000000 R15: 0000000000000000 [ 202.447010][ T5273] [ 202.569348][ T5237] BTRFS info (device loop1): enabling ssd optimizations [ 202.635194][ T4320] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.825075][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 202.827985][ T4320] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 202.829775][ T4320] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 202.831304][ T4320] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.832866][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.093061][ T5202] usb 4-1: USB disconnect, device number 5 [ 203.192241][ T5312] loop0: detected capacity change from 0 to 16 [ 203.230166][ T5312] erofs: (device loop0): mounted with root inode @ nid 36. [ 203.250917][ T5312] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 203.252951][ T5312] syz.0.179: attempt to access beyond end of device [ 203.252951][ T5312] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 203.296458][ T5312] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 203.298204][ T5312] syz.0.179: attempt to access beyond end of device [ 203.298204][ T5312] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 203.302522][ T5312] syz.0.179: attempt to access beyond end of device [ 203.302522][ T5312] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 203.370986][ T27] audit: type=1800 audit(1789683832.552:8): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.179" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 203.502259][ T5317] loop5: detected capacity change from 0 to 512 [ 203.539664][ T5317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 203.541219][ T5317] System zones: 1-12 [ 203.579751][ T5317] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.180: missing EA_INODE flag [ 203.605049][ T5317] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.180: error while reading EA inode 12 err=-117 [ 203.663746][ T5317] EXT4-fs (loop5): 1 orphan inode deleted [ 203.665226][ T5317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 203.995281][ T5202] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 204.145195][ T5202] usb 1-1: device descriptor read/64, error -71 [ 204.229852][ T5307] BTRFS info (device loop1): balance: start -d -m [ 204.415902][ T5202] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 204.565277][ T5202] usb 1-1: device descriptor read/64, error -71 [ 204.686018][ T5202] usb usb1-port1: attempt power cycle [ 205.095573][ T5202] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 205.099605][ T5307] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 205.126777][ T5202] usb 1-1: device descriptor read/8, error -71 [ 205.202398][ T4754] EXT4-fs (loop5): unmounting filesystem. [ 205.337243][ T5188] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 205.395014][ T5202] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 205.427794][ T5202] usb 1-1: device descriptor read/8, error -71 [ 205.532703][ T5307] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 205.545332][ T5202] usb usb1-port1: unable to enumerate USB device [ 205.836174][ T5307] BTRFS info (device loop1): balance: canceled [ 206.602831][ T4274] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.952338][ T5347] loop0: detected capacity change from 0 to 1024 [ 207.966731][ T5347] EXT4-fs: Ignoring removed orlov option [ 208.081317][ T5347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.168288][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 212.436121][ T5375] loop5: detected capacity change from 0 to 16 [ 212.460494][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ccd800: rx timeout, send abort [ 212.473559][ T5375] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.961428][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055cce800: rx timeout, send abort [ 212.963632][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055ccd800: abort rx timeout. Force session deactivation [ 213.463041][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055cce800: abort rx timeout. Force session deactivation [ 215.977485][ T5408] loop1: detected capacity change from 0 to 8 [ 216.025964][ T5408] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 216.061694][ T4564] udevd[4564]: incorrect cramfs checksum on /dev/loop1 [ 222.100638][ T5446] loop3: detected capacity change from 0 to 40427 [ 222.205437][ T5446] F2FS-fs (loop3): build fault injection attr: rate: 174, type: 0x3ffff [ 222.264157][ T5472] loop0: detected capacity change from 0 to 8 [ 222.425083][ T4314] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 223.413606][ T4314] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.428521][ T4314] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 223.428605][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 223.428682][ T4314] usb 6-1: Product: syz [ 223.428757][ T4314] usb 6-1: Manufacturer: syz [ 223.428845][ T4314] usb 6-1: SerialNumber: syz [ 223.590623][ T5477] tty tty27: ldisc open failed (-12), clearing slot 26 [ 224.269445][ T4314] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 224.680392][ T4320] usb 6-1: USB disconnect, device number 2 [ 224.700944][ T4320] usblp0: removed [ 224.712757][ T5493] FAULT_INJECTION: forcing a failure. [ 224.712757][ T5493] name failslab, interval 1, probability 0, space 0, times 0 [ 224.785895][ T5493] CPU: 1 PID: 5493 Comm: syz.3.220 Not tainted syzkaller #0 [ 224.793284][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.804167][ T5493] Call Trace: [ 224.807496][ T5493] [ 224.810471][ T5493] dump_stack_lvl+0x188/0x24e [ 224.815219][ T5493] ? show_regs_print_info+0x12/0x12 [ 224.820470][ T5493] ? load_image+0x410/0x410 [ 224.825033][ T5493] ? __might_sleep+0xd0/0xd0 [ 224.829672][ T5493] ? __lock_acquire+0x7c40/0x7c40 [ 224.834750][ T5493] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 224.840834][ T5493] should_fail_ex+0x390/0x4c0 [ 224.845579][ T5493] should_failslab+0x5/0x20 [ 224.850126][ T5493] slab_pre_alloc_hook+0x59/0x300 [ 224.855200][ T5493] ? lockdep_hardirqs_on+0x94/0x140 [ 224.860461][ T5493] kmem_cache_alloc+0x56/0x2f0 [ 224.865283][ T5493] ? taskstats_exit+0x149/0xcd0 [ 224.870190][ T5493] taskstats_exit+0x149/0xcd0 [ 224.874926][ T5493] ? sysctl_delayacct+0x220/0x220 [ 224.880027][ T5493] ? rcu_is_watching+0x11/0xa0 [ 224.884845][ T5493] ? mm_trace_rss_stat+0xa7/0x250 [ 224.889946][ T5493] ? sync_mm_rss+0x211/0x350 [ 224.894611][ T5493] do_exit+0x94b/0x2570 [ 224.898837][ T5493] ? put_task_struct+0x80/0x80 [ 224.903663][ T5493] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 224.909703][ T5493] ? lock_chain_count+0x20/0x20 [ 224.914613][ T5493] ? _raw_spin_lock_irq+0xb7/0xf0 [ 224.919698][ T5493] do_group_exit+0x229/0x2e0 [ 224.924347][ T5493] ? lockdep_hardirqs_on+0x94/0x140 [ 224.929609][ T5493] get_signal+0x1259/0x1340 [ 224.934193][ T5493] arch_do_signal_or_restart+0xc4/0x1310 [ 224.939893][ T5493] ? __might_fault+0xa6/0x120 [ 224.944626][ T5493] ? do_futex+0x310/0x320 [ 224.949005][ T5493] ? _copy_to_user+0xea/0x130 [ 224.953735][ T5493] ? get_sigframe_size+0x10/0x10 [ 224.958726][ T5493] ? __ia32_sys_get_robust_list+0x100/0x100 [ 224.964693][ T5493] ? exit_to_user_mode_loop+0x3b/0x110 [ 224.970224][ T5493] exit_to_user_mode_loop+0x70/0x110 [ 224.975615][ T5493] exit_to_user_mode_prepare+0xee/0x180 [ 224.981278][ T5493] syscall_exit_to_user_mode+0x16/0x40 [ 224.986796][ T5493] do_syscall_64+0x58/0xa0 [ 224.991262][ T5493] ? clear_bhb_loop+0x60/0xb0 [ 224.995995][ T5493] ? clear_bhb_loop+0x60/0xb0 [ 225.000720][ T5493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.006678][ T5493] RIP: 0033:0x7f4ef1b9e159 [ 225.011139][ T5493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.030808][ T5493] RSP: 002b:00007f4ef2b3d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.039270][ T5493] RAX: fffffffffffffe00 RBX: 00007f4ef1e25fa8 RCX: 00007f4ef1b9e159 [ 225.047290][ T5493] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4ef1e25fa8 [ 225.055316][ T5493] RBP: 00007f4ef1e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 225.063386][ T5493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.071450][ T5493] R13: 00007f4ef1e26038 R14: 00007ffca55ab490 R15: 00007ffca55ab578 [ 225.079502][ T5493] [ 225.724260][ T5504] loop1: detected capacity change from 0 to 4096 [ 225.840482][ T5504] EXT4-fs: Ignoring removed i_version option [ 226.165651][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055af9400: rx timeout, send abort [ 226.687410][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880788a9c00: rx timeout, send abort [ 226.695720][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055af9400: abort rx timeout. Force session deactivation [ 226.850128][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880788a9c00: connection exists (fe ff). last cmd: 20 [ 226.920800][ T5488] loop0: detected capacity change from 0 to 40427 [ 226.969574][ T5488] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 226.996268][ T5488] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 227.163519][ T5488] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.251773][ T5504] EXT4-fs (loop1): Test dummy encryption mode enabled [ 227.318812][ T5504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.360407][ T5532] loop5: detected capacity change from 0 to 128 [ 227.384570][ T5534] loop4: detected capacity change from 0 to 512 [ 227.501219][ T5534] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 227.562045][ T27] audit: type=1800 audit(1789683856.742:9): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.229" name="file1" dev="loop5" ino=1048602 res=0 errno=0 [ 227.596828][ T5534] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.228: invalid indirect mapped block 256 (level 1) [ 227.665135][ T27] audit: type=1800 audit(1789683856.802:10): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.229" name="file1" dev="loop5" ino=1048602 res=0 errno=0 [ 227.704799][ T5534] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.228: invalid indirect mapped block 2683928664 (level 1) [ 227.768497][ T5534] EXT4-fs (loop4): 1 truncate cleaned up [ 227.774259][ T5534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.789170][ T27] audit: type=1800 audit(1789683856.802:11): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.229" name="file1" dev="loop5" ino=1048602 res=0 errno=0 [ 227.881571][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 228.301589][ T5550] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.228: Invalid block bitmap block 3 in block_group 0 [ 229.670231][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 235.296922][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075a59800: rx timeout, send abort [ 235.797115][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075a5a400: rx timeout, send abort [ 235.805490][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075a59800: abort rx timeout. Force session deactivation [ 235.891086][ T5612] gadgetfs: bound to dummy_udc driver [ 236.175458][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.736809][ T5608] gadgetfs: suspended from state 2 [ 236.765630][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075a5a400: abort rx timeout. Force session deactivation [ 237.155082][ T5620] loop0: detected capacity change from 0 to 128 [ 238.228475][ T27] audit: type=1800 audit(1789683867.412:12): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.244" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 238.495523][ T27] audit: type=1800 audit(1789683867.462:13): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.244" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 238.609171][ T27] audit: type=1800 audit(1789683867.552:14): pid=5628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.244" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 242.312135][ T5649] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 242.319288][ T5649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 242.328793][ T5649] vhci_hcd vhci_hcd.0: Device attached [ 242.338607][ T5650] vhci_hcd: connection closed [ 242.342691][ T5188] vhci_hcd: stop threads [ 242.521378][ T5188] vhci_hcd: release socket [ 242.625417][ T5188] vhci_hcd: disconnect device [ 244.062151][ T5657] loop5: detected capacity change from 0 to 2048 [ 244.098706][ T5664] loop4: detected capacity change from 0 to 1024 [ 244.146418][ T5664] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 244.229176][ T5657] UDF-fs: bad mount option "½|¾ñòÌÙ¹ÉùùɉÆØtûêÌÄä¶p¿õ7;Z€Æ×oN\»6ß8uüô†·o¾?ðäáÁsCÏ{¶[vlxddt½H½·|ížÒq§¢ˆc‘âùïü$µ"¢ˆû?õ½ûÍV8Zublx¤êÈT»5½P¾y©{"ŠˆFO¥f÷m=QëßÓ>ÜY3b±l~Ùà£e÷Fg[s­+S“K­¹…öB{fúRê´¶ìO#Š8›"–"beàƒ‡ë"j‘â[‡VÓ•ˆè랇ÏWƒïÜŽbû¸e;ýK" or missing value [ 244.311678][ T5664] EXT4-fs (loop4): barriers disabled [ 244.394998][ T5664] JBD2: no valid journal superblock found [ 244.400806][ T5664] EXT4-fs (loop4): error loading journal [ 245.714978][ T5683] loop0: detected capacity change from 0 to 4096 [ 246.048424][ T5683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 246.132060][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 251.619036][ T5731] loop3: detected capacity change from 0 to 512 [ 251.742421][ T5738] loop4: detected capacity change from 0 to 128 [ 251.750198][ T5731] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 251.852222][ T5731] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.261: invalid indirect mapped block 256 (level 1) [ 251.949262][ T5731] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.261: invalid indirect mapped block 2683928664 (level 1) [ 252.047902][ T5731] EXT4-fs (loop3): 1 truncate cleaned up [ 252.053673][ T5731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.527777][ T5737] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 253.157179][ T27] audit: type=1800 audit(1789683882.342:15): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=1048604 res=0 errno=0 [ 253.180880][ T27] audit: type=1800 audit(1789683882.342:16): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=1048604 res=0 errno=0 [ 253.239002][ T5746] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.261: Invalid block bitmap block 3 in block_group 0 [ 253.295633][ T27] audit: type=1800 audit(1789683882.472:17): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=1048604 res=0 errno=0 [ 255.166730][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 257.035426][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.041782][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.292771][ T5761] loop1: detected capacity change from 0 to 16 [ 257.376066][ T5761] erofs: (device loop1): mounted with root inode @ nid 36. [ 257.456587][ T5761] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 257.486672][ T5761] syz.1.269: attempt to access beyond end of device [ 257.486672][ T5761] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 257.558604][ T5761] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 257.830382][ T5761] syz.1.269: attempt to access beyond end of device [ 257.830382][ T5761] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 258.436903][ T5761] syz.1.269: attempt to access beyond end of device [ 258.436903][ T5761] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 258.588774][ T27] audit: type=1800 audit(1789683887.772:18): pid=5761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.269" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 258.779477][ T5775] loop5: detected capacity change from 0 to 128 [ 258.975539][ T5775] befs: (loop5): blocksize(8192) cannot be larger than system pagesize(4096) [ 260.175303][ T22] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 260.425205][ T22] usb 2-1: device descriptor read/64, error -71 [ 260.705055][ T22] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 260.895023][ T22] usb 2-1: device descriptor read/64, error -71 [ 260.993960][ T5761] syz.1.269 (5761) used greatest stack depth: 19696 bytes left [ 261.015151][ T22] usb usb2-port1: attempt power cycle [ 263.877681][ T5794] loop0: detected capacity change from 0 to 1024 [ 263.952117][ T5794] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 264.045932][ T5794] EXT4-fs (loop0): barriers disabled [ 264.051339][ T5794] JBD2: no valid journal superblock found [ 264.113248][ T5794] EXT4-fs (loop0): error loading journal [ 268.590756][ T5838] loop5: detected capacity change from 0 to 512 [ 268.680978][ T5838] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 268.701836][ T5838] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.280: invalid indirect mapped block 256 (level 1) [ 268.731655][ T5838] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.280: invalid indirect mapped block 2683928664 (level 1) [ 268.954648][ T5838] EXT4-fs (loop5): 1 truncate cleaned up [ 269.096434][ T5838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 269.236694][ T5836] loop3: detected capacity change from 0 to 4096 [ 269.922956][ T5836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 270.280511][ T5854] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.280: Invalid block bitmap block 3 in block_group 0 [ 271.232324][ T4754] EXT4-fs (loop5): unmounting filesystem. [ 272.656723][ T5867] using random self ethernet address [ 272.662618][ T5867] using random host ethernet address [ 273.199703][ T5873] loop1: detected capacity change from 0 to 32768 [ 273.242874][ T5873] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.287 (5873) [ 273.263700][ T5873] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 273.274053][ T5873] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 273.283182][ T5873] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 273.293303][ T5873] BTRFS info (device loop1): use zstd compression, level 3 [ 273.300623][ T5873] BTRFS info (device loop1): force clearing of disk cache [ 273.307798][ T5873] BTRFS info (device loop1): enabling disk space caching [ 273.315077][ T5873] BTRFS info (device loop1): disk space caching is enabled [ 273.993632][ T5873] BTRFS info (device loop1): enabling ssd optimizations [ 274.007861][ T5873] BTRFS info (device loop1): rebuilding free space tree [ 274.080347][ T5873] BTRFS info (device loop1): disabling free space tree [ 274.088673][ T5873] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.099793][ T5873] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 276.636063][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 276.687071][ T4274] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 276.903630][ T4564] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop1 scanned by udevd (4564) [ 276.997700][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.025193][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.054457][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.085973][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.094070][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.102909][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.241897][ T5904] loop0: detected capacity change from 0 to 32768 [ 277.899025][ T5918] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 277.905640][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 277.913811][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 278.234983][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 278.667158][ T5919] vhci_hcd: connection closed [ 279.038474][ T5190] vhci_hcd: stop threads [ 279.195081][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 279.246603][ T5190] vhci_hcd: release socket [ 279.255231][ T5190] vhci_hcd: disconnect device [ 279.693156][ T5929] loop4: detected capacity change from 0 to 8 [ 279.709708][ T5929] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 280.480901][ T4538] udevd[4538]: incorrect cramfs checksum on /dev/loop4 [ 280.856184][ T4538] udevd[4538]: incorrect cramfs checksum on /dev/loop4 [ 281.275742][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 281.966791][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 283.355046][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 285.435629][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 287.646404][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.739116][ T5938] syz.3.293 (5938) used greatest stack depth: 19632 bytes left [ 288.641737][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.386696][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.634227][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.328033][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.342937][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.391540][ T5899] device bridge_slave_0 entered promiscuous mode [ 291.469614][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.508060][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.535187][ T5899] device bridge_slave_1 entered promiscuous mode [ 292.002974][ T5990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 292.009590][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 292.020108][ T5990] vhci_hcd vhci_hcd.0: Device attached [ 292.315888][ T127] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 293.620851][ T5991] vhci_hcd: connection reset by peer [ 293.626717][ T5188] vhci_hcd: stop threads [ 293.631029][ T5188] vhci_hcd: release socket [ 293.768249][ T5188] vhci_hcd: disconnect device [ 297.483628][ T6019] netlink: 296 bytes leftover after parsing attributes in process `syz.1.309'. [ 297.525443][ T127] vhci_hcd: vhci_device speed not set [ 300.521553][ T6030] sctp: failed to load transform for md5: -2 [ 303.954594][ T6045] gadgetfs: bound to dummy_udc driver [ 304.515099][ T127] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 305.920261][ C0] gadgetfs: connected [ 305.951097][ T127] gadgetfs: disconnected [ 307.835496][ T6052] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 307.842129][ T6052] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 307.850074][ T6052] vhci_hcd vhci_hcd.0: Device attached [ 307.858647][ T6053] vhci_hcd: connection closed [ 307.860809][ T5127] vhci_hcd: stop threads [ 307.968225][ T5127] vhci_hcd: release socket [ 307.972870][ T5127] vhci_hcd: disconnect device [ 309.424978][ T6069] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 309.874126][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.892350][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.904049][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.938356][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.953916][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.967256][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.076703][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 313.479861][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.705893][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.002172][ T5899] team0: Port device team_slave_0 added [ 314.079774][ T5899] team0: Port device team_slave_1 added [ 314.155217][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 314.263372][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.325408][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.435040][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.662093][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.686610][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.805116][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.127964][ T5899] device hsr_slave_0 entered promiscuous mode [ 315.179582][ T5899] device hsr_slave_1 entered promiscuous mode [ 315.203557][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.245363][ T5899] Cannot create hsr debugfs directory [ 315.290042][ T6067] chnl_net:caif_netlink_parms(): no params data found [ 315.973160][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.980915][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.989770][ T6067] device bridge_slave_0 entered promiscuous mode [ 316.008521][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.025226][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.033451][ T6067] device bridge_slave_1 entered promiscuous mode [ 316.161426][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.206629][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.242042][ T5899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.245143][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 316.450078][ T5899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.494028][ T5899] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.535910][ T6067] team0: Port device team_slave_0 added [ 316.551854][ T5899] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.597238][ T6067] team0: Port device team_slave_1 added [ 316.925797][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.932828][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.961598][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.101646][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.120535][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.127431][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.021415][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.070214][ T6143] gadgetfs: bound to dummy_udc driver [ 318.157302][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.258765][ T31] device hsr_slave_0 left promiscuous mode [ 318.278699][ T31] device hsr_slave_1 left promiscuous mode [ 318.292825][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.312903][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.320642][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 318.434428][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.555754][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.590531][ T31] device bridge_slave_1 left promiscuous mode [ 318.618670][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.715650][ T31] device bridge_slave_0 left promiscuous mode [ 318.841721][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.018491][ T31] device veth1_macvtap left promiscuous mode [ 319.047729][ T31] device veth0_macvtap left promiscuous mode [ 319.072315][ T31] device veth1_vlan left promiscuous mode [ 319.103084][ T31] device veth0_vlan left promiscuous mode [ 319.256433][ T6155] device-mapper: ioctl: device has been removed from the dev hash table. [ 320.837033][ T6179] loop4: detected capacity change from 0 to 32768 [ 320.867284][ T6179] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 321.017634][ T4564] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.392962][ T6186] zram0: detected capacity change from 0 to 8 [ 322.814750][ T27] audit: type=1400 audit(1789683951.992:19): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=6189 comm="syz.4.336" [ 323.446832][ T6196] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 324.221924][ T6200] hub 8-0:1.0: USB hub found [ 324.229987][ T6200] hub 8-0:1.0: 1 port detected [ 324.447668][ T31] team0 (unregistering): Port device team_slave_1 removed [ 324.925752][ T31] team0 (unregistering): Port device team_slave_0 removed [ 325.059195][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.163929][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.050075][ T31] bond0 (unregistering): Released all slaves [ 326.213220][ T6153] batman_adv: batadv0: Adding interface: dummy0 [ 326.220335][ T6153] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.247601][ T6153] batman_adv: batadv0: Interface activated: dummy0 [ 326.317150][ T6157] batadv0: mtu less than device minimum [ 326.327697][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.343604][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.357668][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.371134][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.383924][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.398817][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.412798][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.426403][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.441610][ T6157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.805997][ T6067] device hsr_slave_0 entered promiscuous mode [ 326.857208][ T6067] device hsr_slave_1 entered promiscuous mode [ 326.865955][ T6067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.873578][ T6067] Cannot create hsr debugfs directory [ 327.808365][ T6215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.467285][ T6215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.546358][ T6215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.565467][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.654991][ T6215] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 328.683097][ T6215] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 328.725562][ T6215] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 328.753009][ T6215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.769521][ T6215] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 328.865952][ T6215] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 328.981336][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.015231][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.668986][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.212846][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.218995][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.225146][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.231184][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 331.235329][ T49] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.410150][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.437432][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.571993][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.579250][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.657195][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.428850][ T6253] loop1: detected capacity change from 0 to 128 [ 332.456271][ T6253] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.515039][ T6253] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.737640][ T6067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 332.744539][ T6259] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 332.881483][ T6067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.127161][ T6262] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 333.136439][ T6262] FAT-fs (loop1): Filesystem has been set read-only [ 333.395404][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 333.395455][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 333.828443][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.839380][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.847479][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.857365][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.865055][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.872400][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.962795][ T5184] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.300578][ T6067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.346148][ T6267] batman_adv: batadv0: Interface deactivated: dummy0 [ 334.405429][ T6067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.599446][ T5184] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.872551][ T6279] loop1: detected capacity change from 0 to 512 [ 334.979742][ T6279] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 334.988999][ T6279] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.355: invalid indirect mapped block 256 (level 1) [ 335.005489][ T6279] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.355: invalid indirect mapped block 2683928664 (level 1) [ 335.021223][ T6279] EXT4-fs (loop1): 1 truncate cleaned up [ 335.027611][ T6279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 335.073074][ T5184] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.373094][ T6286] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.355: Invalid block bitmap block 3 in block_group 0 [ 335.639337][ T5184] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.783942][ T6287] loop3: detected capacity change from 0 to 512 [ 335.892776][ T6287] ext4: Bad value for 'data' [ 335.915170][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 335.947780][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 336.231035][ T6293] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 337.178324][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.085465][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 338.145113][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 338.153173][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.193429][ T6067] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.378472][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.420171][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.518557][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.525809][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.570575][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.639964][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.649127][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.656318][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.680337][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.505906][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.553615][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 339.596933][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.633002][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.156217][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 340.471061][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.552310][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.948576][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.971794][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.107026][ T6344] loop1: detected capacity change from 0 to 128 [ 343.272511][ T6344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 343.294128][ T6344] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.425169][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 343.642503][ T6067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.708882][ T6067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.402851][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.432027][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.472811][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.544112][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 344.554095][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.668867][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.779430][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.788231][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.796646][ T6264] device bridge_slave_0 entered promiscuous mode [ 344.807543][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.814945][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.823343][ T6264] device bridge_slave_1 entered promiscuous mode [ 344.871185][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.974582][ T6364] loop1: detected capacity change from 0 to 16 [ 345.047372][ T6364] erofs: (device loop1): mounted with root inode @ nid 36. [ 345.146095][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.256363][ T4564] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 346.630402][ T6353] virtio-fs: tag not found [ 346.854131][ T6373] loop4: detected capacity change from 0 to 128 [ 347.955465][ T6373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 347.975979][ T6373] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.246851][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 348.252858][ T6264] team0: Port device team_slave_0 added [ 348.412650][ T6264] team0: Port device team_slave_1 added [ 348.520329][ T6379] loop4: detected capacity change from 0 to 2048 [ 348.584505][ T6379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.624789][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.665258][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.757685][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.475585][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.482621][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.592974][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.656999][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.664595][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.094749][ T6390] loop4: detected capacity change from 0 to 1024 [ 350.217654][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.747530][ T6264] device hsr_slave_0 entered promiscuous mode [ 350.867168][ T6264] device hsr_slave_1 entered promiscuous mode [ 350.885124][ T6264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.892778][ T6264] Cannot create hsr debugfs directory [ 352.016956][ T6403] loop1: detected capacity change from 0 to 1024 [ 354.101487][ T6427] loop1: detected capacity change from 0 to 256 [ 354.225620][ T6423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.237632][ T6423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.243873][ T6423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.250523][ T6423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.256946][ T6423] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 354.450282][ T5184] device hsr_slave_0 left promiscuous mode [ 355.087771][ T5184] device hsr_slave_1 left promiscuous mode [ 355.148319][ T5184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.162419][ T6423] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 355.177256][ T5184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.235813][ T5184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.243271][ T5184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.259408][ T6423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.276354][ T5184] device bridge_slave_1 left promiscuous mode [ 355.289260][ T6423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 355.295398][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.313959][ T6433] loop0: detected capacity change from 0 to 32768 [ 355.352267][ T6423] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 355.360474][ T5184] device bridge_slave_0 left promiscuous mode [ 355.381032][ T6433] loop1: detected capacity change from 0 to 65536 [ 355.388710][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.273274][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.314989][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 356.321092][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 356.327252][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 357.415264][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.103188][ T5184] device veth1_macvtap left promiscuous mode [ 358.123044][ T5184] device veth0_macvtap left promiscuous mode [ 358.136565][ T6444] slcan: can't register candev [ 358.142068][ T6444] Falling back ldisc for ttyS3. [ 358.225981][ T5184] device veth1_vlan left promiscuous mode [ 358.233723][ T5184] device veth0_vlan left promiscuous mode [ 358.343128][ T6433] device-mapper: table: 248:0: thin-pool: Error creating pool's workqueue (-ENOMEM) [ 358.378283][ T6433] device-mapper: ioctl: error adding target to table [ 358.445898][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 359.478918][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 360.037596][ T6459] fuse: Unknown parameter 'u00000000000000000000' [ 360.252538][ T6461] loop4: detected capacity change from 0 to 1024 [ 360.284506][ T6461] hfsplus: unable to parse mount options [ 361.095301][ T6467] loop1: detected capacity change from 0 to 512 [ 361.158216][ T6467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.383: missing EA_INODE flag [ 361.192587][ T6467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.383: error while reading EA inode 2 err=-117 [ 361.214514][ T6467] EXT4-fs (loop1): 1 orphan inode deleted [ 361.233737][ T6467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 361.567257][ T6474] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 362.675471][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 362.844517][ T6481] loop1: detected capacity change from 0 to 512 [ 362.877804][ T6484] loop4: detected capacity change from 0 to 16 [ 362.902075][ T6484] erofs: (device loop4): mounted with root inode @ nid 36. [ 362.921511][ T6484] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 362.932863][ T6484] syz.4.387: attempt to access beyond end of device [ 362.932863][ T6484] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 363.023515][ T6484] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 363.025677][ T6481] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.386: missing EA_INODE flag [ 363.033735][ T6484] syz.4.387: attempt to access beyond end of device [ 363.033735][ T6484] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 363.060127][ T6484] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 363.071738][ T27] audit: type=1800 audit(1789683992.252:20): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.387" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 363.105688][ T6481] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.386: error while reading EA inode 2 err=-117 [ 363.177909][ T6481] EXT4-fs (loop1): 1 orphan inode deleted [ 363.214155][ T6481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 364.254557][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 364.402974][ T5184] team0 (unregistering): Port device team_slave_1 removed [ 364.469383][ T5184] team0 (unregistering): Port device team_slave_0 removed [ 364.532382][ T5184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.639863][ T5184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.273908][ T5184] bond0 (unregistering): Released all slaves [ 365.430244][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 365.447003][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.463121][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.473778][ T6490] device bridge_slave_0 left promiscuous mode [ 365.490777][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.520890][ T6490] device bridge_slave_1 left promiscuous mode [ 365.535584][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.557047][ T6490] bond0: (slave bond_slave_0): Releasing backup interface [ 365.587450][ T6490] bond0: (slave bond_slave_1): Releasing backup interface [ 365.623759][ T6490] team0: Port device team_slave_0 removed [ 365.663420][ T6490] team0: Port device team_slave_1 removed [ 365.670122][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.678621][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.690082][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.698587][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.716499][ T6493] team0: Mode changed to "activebackup" [ 365.724777][ T6495] device vlan0 entered promiscuous mode [ 365.755724][ T6492] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.771962][ T6495] team0: Port device vlan0 added [ 365.779403][ T6492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.790069][ T6492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 365.796480][ T6492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.806008][ T6492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.813403][ T6492] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 365.842195][ T6492] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 365.891521][ T6496] tipc: Started in network mode [ 365.897613][ T6496] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 365.913215][ T6496] tipc: Enabled bearer , priority 0 [ 366.216929][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.226238][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.259092][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.416022][ T6506] loop1: detected capacity change from 0 to 512 [ 366.428169][ T6506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.642853][ T6506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 366.652514][ T6506] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.809073][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.053713][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.120844][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.166336][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 367.304674][ T5909] tipc: Node number set to 11578026 [ 367.664124][ T6264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 367.735879][ T6264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 367.835099][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.843525][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 367.849883][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.856144][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.889129][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.908573][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.919017][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.928856][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.940162][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 367.947613][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.965348][ T6264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 367.982302][ T6264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 368.242324][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.280849][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.296492][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.329706][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.386403][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.403016][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.420945][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.428182][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.499128][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.519698][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.532691][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.541350][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.548527][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.558816][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.568619][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.583134][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.600036][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.610052][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.620836][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.633344][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 368.666464][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.692582][ T6264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.704126][ T6264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.729003][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.738811][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.748375][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.757446][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.848704][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 368.893954][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.904360][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.922961][ T6516] device bridge_slave_0 entered promiscuous mode [ 368.962570][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.987220][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.004127][ T6516] device bridge_slave_1 entered promiscuous mode [ 369.099553][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.138044][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.223435][ T6516] team0: Port device team_slave_0 added [ 369.246239][ T6516] team0: Port device team_slave_1 added [ 369.458305][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.472737][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.506981][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.529181][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.563697][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.594058][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.654268][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.661638][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.696395][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.901617][ T6516] device hsr_slave_0 entered promiscuous mode [ 369.909160][ T6516] device hsr_slave_1 entered promiscuous mode [ 369.915986][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 369.927942][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.935819][ T6516] Cannot create hsr debugfs directory [ 369.996323][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 370.601622][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.619918][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.698508][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.712599][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.740492][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.756972][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.778196][ T5184] device hsr_slave_0 left promiscuous mode [ 370.792468][ T5184] device hsr_slave_1 left promiscuous mode [ 370.802099][ T5184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.817642][ T5184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.833693][ T5184] device bridge_slave_1 left promiscuous mode [ 370.842245][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.866681][ T5184] device bridge_slave_0 left promiscuous mode [ 370.873000][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.903276][ T5184] device hsr_slave_0 left promiscuous mode [ 370.914577][ T5184] device hsr_slave_1 left promiscuous mode [ 370.925247][ T5184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.933112][ T5184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.956368][ T5184] device bridge_slave_1 left promiscuous mode [ 370.962631][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.983805][ T5184] device bridge_slave_0 left promiscuous mode [ 370.990437][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.463148][ T5184] team0 (unregistering): Port device team_slave_1 removed [ 371.514603][ T5184] team0 (unregistering): Port device team_slave_0 removed [ 371.562231][ T5184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.613873][ T5184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.941484][ T5184] bond0 (unregistering): Released all slaves [ 372.085031][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 372.203156][ T5184] team0 (unregistering): Port device team_slave_1 removed [ 372.241440][ T5184] team0 (unregistering): Port device team_slave_0 removed [ 372.275986][ T5184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.311479][ T5184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.502728][ T5184] bond0 (unregistering): Released all slaves [ 372.623526][ T6264] device veth0_vlan entered promiscuous mode [ 372.672063][ T6264] device veth1_vlan entered promiscuous mode [ 372.751907][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.767220][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.779647][ T6264] device veth0_macvtap entered promiscuous mode [ 372.810216][ T6264] device veth1_macvtap entered promiscuous mode [ 372.870137][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.882076][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.892966][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.903896][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.918060][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.937757][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.950820][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.959839][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.969039][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.980707][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.999855][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.012655][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.033000][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.054455][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.067744][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.082353][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.098486][ T6264] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.108837][ T6264] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.118741][ T6264] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.127956][ T6264] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.335310][ T5113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.343210][ T5113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.389249][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 373.405758][ T6516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 373.428756][ T5185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.439176][ T6516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 373.446641][ T5185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.466207][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.505651][ T6516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 373.530284][ T6516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 374.470680][ T6589] loop3: detected capacity change from 0 to 1024 [ 374.505847][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 375.369434][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.475789][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.542117][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.644226][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.653300][ T6602] loop1: detected capacity change from 0 to 65536 [ 375.795606][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.248830][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 377.375677][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.463163][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.470391][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.695172][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.703324][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.783512][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.805740][ T6615] loop6: detected capacity change from 0 to 128 [ 377.841425][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.848650][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.869409][ T6615] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 377.902749][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.956771][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.039184][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.522092][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.591867][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.598385][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.282392][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.424223][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.433431][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.442238][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.451063][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.599892][ T6516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.619251][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.629520][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.658632][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.574567][ T6637] loop6: detected capacity change from 0 to 1024 [ 380.896356][ T6639] loop1: detected capacity change from 0 to 512 [ 381.018772][ T6639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 381.103523][ T5184] hfsplus: b-tree write err: -5, ino 25 [ 381.152669][ T5184] hfsplus: b-tree write err: -5, ino 4 [ 381.159088][ T6639] EXT4-fs (loop1): 1 truncate cleaned up [ 381.167706][ T6639] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 381.180096][ T5184] hfsplus: b-tree write err: -5, ino 2 [ 382.101094][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 384.185779][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.193370][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.259135][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.325084][ T6673] device syzkaller0 entered promiscuous mode [ 384.352717][ T6675] loop1: detected capacity change from 0 to 2048 [ 384.484507][ T6675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.103665][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 387.123339][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 387.149596][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.158866][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.172973][ T6516] device veth0_vlan entered promiscuous mode [ 387.183760][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.197490][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.214246][ T6516] device veth1_vlan entered promiscuous mode [ 387.258193][ T6516] device veth0_macvtap entered promiscuous mode [ 387.271446][ T6516] device veth1_macvtap entered promiscuous mode [ 387.279687][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 387.292134][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 387.300707][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.309805][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.319212][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.327926][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.362925][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.383648][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.394060][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.404604][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.414510][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.425250][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.441413][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.457617][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.470028][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.486980][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.509409][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.534474][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.551140][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.564027][ T6516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.580769][ T6516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.593316][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.618837][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.628746][ T5184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.646932][ T6516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.661336][ T6516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.672083][ T6516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.685066][ T6516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.792131][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.800605][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.826647][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.849726][ T5187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.864214][ T5187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.873764][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.474440][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.717666][ T6712] batman_adv: batadv0: Removing interface: dummy0 [ 390.778375][ T6712] device bridge_slave_0 left promiscuous mode [ 390.810967][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.995279][ T6712] device bridge_slave_1 left promiscuous mode [ 391.001584][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.166403][ T6712] bond0: (slave bond_slave_0): Releasing backup interface [ 391.180180][ T6734] loop1: detected capacity change from 0 to 256 [ 391.340977][ T6738] "syz.4.410" (6738) uses obsolete ecb(arc4) skcipher [ 392.133633][ T6712] bond0: (slave bond_slave_1): Releasing backup interface [ 392.254960][ T5364] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 392.319013][ T6712] team0: Port device team_slave_0 removed [ 392.416893][ T6712] team0: Port device team_slave_1 removed [ 392.545864][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.553495][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.578218][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.680168][ T6750] loop4: detected capacity change from 0 to 512 [ 392.687572][ T6750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.271469][ T5364] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 393.359089][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.396647][ T5364] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.414390][ T6750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 393.423582][ T6750] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.454401][ T5364] usb 8-1: Product: syz [ 393.529987][ T5364] usb 8-1: Manufacturer: syz [ 393.568666][ T6721] team0: Mode changed to "activebackup" [ 393.584992][ T5364] usb 8-1: SerialNumber: syz [ 393.617486][ T6725] device vlan0 entered promiscuous mode [ 393.757410][ T6727] tipc: Started in network mode [ 393.762374][ T6727] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 393.776709][ T6727] tipc: Enabled bearer , priority 0 [ 393.973737][ T6734] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 393.984599][ T6734] FAT-fs (loop1): Filesystem has been set read-only [ 393.993543][ T6734] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 394.020206][ T6734] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 394.301457][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 394.914222][ T6768] Console: switching to colour VGA+ 80x25 [ 394.950763][ T3042] tipc: Node number set to 11578026 [ 395.190688][ T6780] loop4: detected capacity change from 0 to 256 [ 396.432091][ T5364] usb 8-1: MIDIStreaming interface descriptor not found [ 398.265068][ T5364] usb 8-1: USB disconnect, device number 2 [ 399.707901][ T4490] udevd[4490]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.254896][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 400.939453][ T6806] loop7: detected capacity change from 0 to 16 [ 400.960738][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.972524][ T6806] erofs: (device loop7): mounted with root inode @ nid 36. [ 400.985357][ T6806] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 400.994730][ T6806] syz.7.428: attempt to access beyond end of device [ 400.994730][ T6806] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 401.010375][ T6806] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 401.019716][ T6806] syz.7.428: attempt to access beyond end of device [ 401.019716][ T6806] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 401.033910][ T6806] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 401.051075][ T27] audit: type=1800 audit(1789684030.232:21): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.428" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 401.080552][ T22] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 401.195289][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.246115][ T22] usb 5-1: Product: syz [ 401.250346][ T22] usb 5-1: Manufacturer: syz [ 401.296463][ T22] usb 5-1: SerialNumber: syz [ 401.517922][ T22] usb 5-1: Cannot retrieve CPort count: -71 [ 401.523919][ T22] usb 5-1: Cannot retrieve CPort count: -71 [ 401.578944][ T22] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 401.786235][ T22] usb 5-1: USB disconnect, device number 7 [ 401.938225][ T6815] loop6: detected capacity change from 0 to 1764 [ 402.680654][ T4538] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.761077][ T6817] loop7: detected capacity change from 0 to 512 [ 403.024961][ T6817] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.431: missing EA_INODE flag [ 403.118477][ T6817] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.431: error while reading EA inode 2 err=-117 [ 403.166019][ T6817] EXT4-fs (loop7): 1 orphan inode deleted [ 403.171871][ T6817] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 405.215937][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 405.334418][ T6844] loop3: detected capacity change from 0 to 256 [ 405.594563][ T6846] loop6: detected capacity change from 0 to 512 [ 406.054778][ T6849] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 406.065172][ T6849] FAT-fs (loop3): Filesystem has been set read-only [ 406.071858][ T6849] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 406.083453][ T6849] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 406.140736][ T6850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 406.312763][ T6846] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 406.445016][ T6853] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 406.673375][ T6860] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 406.834100][ T6865] loop3: detected capacity change from 0 to 512 [ 406.841530][ T6865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.438836][ T6865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 408.439489][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 408.447903][ T6865] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.600272][ T6874] using random self ethernet address [ 408.686578][ T6874] using random host ethernet address [ 408.761569][ T6878] UDC core: g1: couldn't find an available UDC or it's busy [ 408.852638][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 408.997325][ T6877] loop4: detected capacity change from 0 to 4096 [ 409.047277][ T6877] EXT4-fs: inline encryption not supported [ 409.077189][ T6883] loop1: detected capacity change from 0 to 2048 [ 409.114283][ T6877] EXT4-fs: inline encryption not supported [ 409.176630][ T6880] loop6: detected capacity change from 0 to 40427 [ 409.180305][ T6877] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 409.209093][ T6880] F2FS-fs (loop6): invalid crc_offset: 4177530876 [ 409.286608][ T6883] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 409.305520][ T6885] loop7: detected capacity change from 0 to 512 [ 409.329786][ T6880] F2FS-fs (loop6): Wrong journal entry on segno 65538 [ 409.338211][ T6880] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 409.844885][ T6899] xt_connbytes: Forcing CT accounting to be enabled [ 409.851819][ T6899] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 410.634524][ T6896] device syzkaller0 entered promiscuous mode [ 410.698286][ T6882] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 410.714650][ T6882] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 410.727528][ T6882] EXT4-fs (loop1): This should not happen!! Data will be lost [ 410.727528][ T6882] [ 410.737413][ T6882] EXT4-fs (loop1): Total free blocks count 0 [ 410.743447][ T6882] EXT4-fs (loop1): Free/Dirty block details [ 410.749631][ T6882] EXT4-fs (loop1): free_blocks=4096 [ 410.755092][ T6882] EXT4-fs (loop1): dirty_blocks=64 [ 410.760252][ T6882] EXT4-fs (loop1): Block reservation details [ 410.766754][ T6882] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 410.817609][ T6885] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 410.846772][ T5125] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 411.941631][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 412.019202][ T6919] loop6: detected capacity change from 0 to 512 [ 412.074631][ T6919] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 412.654909][ T6871] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 413.088389][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 413.207937][ T6935] device syzkaller0 entered promiscuous mode [ 413.285526][ T6937] loop3: detected capacity change from 0 to 512 [ 413.380353][ T6937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 413.475590][ T6946] loop6: detected capacity change from 0 to 512 [ 413.542510][ T6946] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 414.157013][ T6965] loop7: detected capacity change from 0 to 1024 [ 415.518167][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 416.149358][ T6967] device syzkaller0 entered promiscuous mode [ 416.231829][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 416.306241][ T6970] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 416.752469][ T6979] loop3: detected capacity change from 0 to 40427 [ 416.903809][ T6979] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 417.095885][ T6979] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 417.102752][ T6979] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 417.877801][ T6982] tipc: Started in network mode [ 417.882759][ T6982] tipc: Node identity 2000004, cluster identity 4711 [ 417.948619][ T6999] xt_connbytes: Forcing CT accounting to be enabled [ 418.253870][ T6997] loop4: detected capacity change from 0 to 512 [ 418.289341][ T6982] tipc: Node number set to 33554436 [ 418.432589][ T6997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 418.623687][ T7006] device syzkaller0 entered promiscuous mode [ 420.021600][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 420.703380][ T7030] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 421.157345][ T7050] loop1: detected capacity change from 0 to 128 [ 421.387384][ T7050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 421.404944][ T7050] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 421.824525][ T7052] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 422.054152][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 422.150326][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.188654][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.205136][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.222893][ T7058] device bridge_slave_0 left promiscuous mode [ 422.356932][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.393692][ T7058] device bridge_slave_1 left promiscuous mode [ 422.424610][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.461328][ T7058] bond0: (slave bond_slave_0): Releasing backup interface [ 422.524000][ T7058] bond0: (slave bond_slave_1): Releasing backup interface [ 422.543744][ T7066] loop1: detected capacity change from 0 to 40427 [ 422.553360][ T7066] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 422.652866][ T7066] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 422.659874][ T7066] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 422.711402][ T7058] team0: Port device team_slave_0 removed [ 422.796618][ T7058] team0: Port device team_slave_1 removed [ 422.837980][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.861758][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.905255][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.912763][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.997018][ T7068] device vlan0 entered promiscuous mode [ 423.010940][ T7083] xt_connbytes: Forcing CT accounting to be enabled [ 423.398585][ T7068] team0: Port device vlan0 added [ 423.672144][ T7063] team0: No ports can be present during mode change [ 423.793707][ T7073] tipc: Enabled bearer , priority 0 [ 424.857024][ T7099] loop4: detected capacity change from 0 to 512 [ 424.906977][ T7105] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 425.027555][ T7106] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 425.037682][ T7099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 426.075163][ T7110] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 426.237019][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 426.282563][ T7126] loop7: detected capacity change from 0 to 128 [ 426.313694][ T7125] loop1: detected capacity change from 0 to 512 [ 426.348556][ T7126] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 426.430570][ T7126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.502938][ T7125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 427.501691][ T7142] loop6: detected capacity change from 0 to 128 [ 427.764694][ T7142] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 427.778799][ T7142] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 428.059070][ T7132] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 428.189301][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 428.387983][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 428.425142][ T7152] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 428.745742][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.874060][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.889741][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.456935][ T7171] loop3: detected capacity change from 0 to 512 [ 429.464228][ T7171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.030149][ T7159] device bridge_slave_0 left promiscuous mode [ 430.354431][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.394307][ T7159] device bridge_slave_1 left promiscuous mode [ 430.415277][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.439328][ T7171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 430.450641][ T7171] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.451831][ T7159] bond0: (slave bond_slave_0): Releasing backup interface [ 430.551917][ T7159] bond0: (slave bond_slave_1): Releasing backup interface [ 430.733899][ T7159] team0: Port device team_slave_0 removed [ 430.750998][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 430.788387][ T7159] team0: Port device team_slave_1 removed [ 430.803608][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.819081][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.852499][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.861324][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.908636][ T7187] loop6: detected capacity change from 0 to 128 [ 430.921717][ T7172] team0: Mode changed to "activebackup" [ 430.980236][ T7187] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 430.996627][ T7173] device vlan0 entered promiscuous mode [ 431.065387][ T7173] team0: Port device vlan0 added [ 431.128251][ T7187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.161519][ T7178] tipc: Started in network mode [ 431.172062][ T7178] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 431.220323][ T7178] tipc: Enabled bearer , priority 0 [ 432.214915][ T22] tipc: Node number set to 11578026 [ 433.852340][ T7206] loop3: detected capacity change from 0 to 512 [ 433.910829][ T7210] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 433.942004][ T7206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 434.085141][ T4317] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 434.156734][ T7218] loop7: detected capacity change from 0 to 128 [ 434.242771][ T7218] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 434.255280][ T7218] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 434.299141][ T4317] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 434.331956][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.427632][ T7132] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 435.098201][ T4317] usb 5-1: Product: syz [ 435.102469][ T4317] usb 5-1: Manufacturer: syz [ 435.107201][ T4317] usb 5-1: SerialNumber: syz [ 435.118772][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 435.338489][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 439.334814][ T4317] usb 5-1: MIDIStreaming interface descriptor not found [ 439.443417][ T4317] usb 5-1: USB disconnect, device number 8 [ 439.761464][ T7265] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 439.845381][ T7268] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 439.856410][ T7270] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 439.998336][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.004768][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.178080][ T4490] udevd[4490]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.477197][ T7284] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 440.546936][ T7287] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 442.037850][ T7301] loop7: detected capacity change from 0 to 256 [ 442.789745][ T7308] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 443.883459][ T7323] loop7: detected capacity change from 0 to 512 [ 444.136550][ T7323] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 446.022671][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 446.258749][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 446.292453][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.305609][ T7353] loop6: detected capacity change from 0 to 512 [ 446.327405][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.356564][ T7350] device bridge_slave_0 left promiscuous mode [ 446.363122][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.376042][ T7357] loop3: detected capacity change from 0 to 512 [ 446.422882][ T7357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 446.445498][ T7350] device bridge_slave_1 left promiscuous mode [ 446.451745][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.487030][ T7353] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 446.491650][ T7350] bond0: (slave bond_slave_0): Releasing backup interface [ 446.519931][ T7350] bond0: (slave bond_slave_1): Releasing backup interface [ 446.535517][ T7357] EXT4-fs (loop3): 1 truncate cleaned up [ 446.652814][ T7357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 447.241540][ T7350] team0: Port device team_slave_0 removed [ 447.332195][ T7350] team0: Port device team_slave_1 removed [ 447.367180][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.378271][ T7350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.388721][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.396831][ T7350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.425750][ T7358] team0: Mode changed to "activebackup" [ 447.473791][ T7359] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 448.011557][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 448.020267][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 448.030884][ T7361] device vlan0 entered promiscuous mode [ 448.061046][ T7365] tipc: Started in network mode [ 448.076745][ T7365] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 448.084041][ T7365] tipc: Enabled bearer , priority 0 [ 448.488220][ T7386] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 448.638099][ T7390] loop7: detected capacity change from 0 to 16384 [ 449.338096][ T5901] tipc: Node number set to 11578026 [ 449.957803][ T7404] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 450.067619][ T7390] loop7: detected capacity change from 16384 to 0 [ 453.425918][ T7423] device syzkaller0 entered promiscuous mode [ 453.583779][ T7427] loop7: detected capacity change from 0 to 512 [ 453.649192][ T7427] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 453.707787][ T7427] EXT4-fs (loop7): 1 truncate cleaned up [ 453.723809][ T7427] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 453.934485][ T7432] loop6: detected capacity change from 0 to 128 [ 454.036255][ T7432] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 454.568603][ T7432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.692604][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 455.401387][ T7461] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 456.190227][ T7481] device syzkaller0 entered promiscuous mode [ 456.947721][ T7495] loop6: detected capacity change from 0 to 512 [ 457.050243][ T7495] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 457.088453][ T7500] loop7: detected capacity change from 0 to 512 [ 457.112990][ T7495] EXT4-fs (loop6): 1 truncate cleaned up [ 457.162554][ T7495] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 457.251464][ T7500] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 458.068165][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 458.285730][ T7516] loop7: detected capacity change from 0 to 512 [ 458.488745][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 458.612755][ T7516] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 459.190094][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 461.456786][ T7552] device syzkaller0 entered promiscuous mode [ 461.715586][ T7558] loop7: detected capacity change from 0 to 16384 [ 462.374997][ T7558] loop7: detected capacity change from 16384 to 0 [ 463.211350][ T7578] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 463.303405][ T7580] loop4: detected capacity change from 0 to 512 [ 463.407469][ T7580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 464.335529][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 464.354624][ T7602] device syzkaller0 entered promiscuous mode [ 464.871117][ T7615] device syzkaller0 entered promiscuous mode [ 465.601434][ T7627] loop7: detected capacity change from 0 to 16384 [ 465.725123][ T7628] loop7: detected capacity change from 16384 to 0 [ 466.146589][ T7637] device syzkaller0 entered promiscuous mode [ 467.151082][ T7647] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 468.091928][ T7658] loop6: detected capacity change from 0 to 512 [ 468.740878][ T7658] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 469.957710][ T7663] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 470.125410][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 470.509904][ T7698] device syzkaller0 entered promiscuous mode [ 472.246782][ T7707] loop4: detected capacity change from 0 to 512 [ 472.436593][ T7707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 473.176632][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 475.716683][ T7759] device syzkaller0 entered promiscuous mode [ 476.052497][ T7764] UDC core: g1: couldn't find an available UDC or it's busy [ 478.918047][ T7805] loop7: detected capacity change from 0 to 16384 [ 479.197093][ T7805] loop7: detected capacity change from 16384 to 0 [ 479.470317][ T7814] UDC core: g1: couldn't find an available UDC or it's busy [ 479.818629][ T7827] loop3: detected capacity change from 0 to 512 [ 479.908125][ T7827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 481.704221][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 482.100086][ T7861] tipc: Enabled bearer , priority 0 [ 482.198761][ T7867] tipc: Enabled bearer , priority 0 [ 482.500364][ T7873] tipc: Enabling of bearer rejected, already enabled [ 482.519586][ T7873] tipc: Resetting bearer [ 482.612478][ T7873] tipc: Disabling bearer [ 483.051570][ T7884] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 488.798526][ T7966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 491.482915][ T8006] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 491.913404][ T8019] tipc: Enabled bearer , priority 0 [ 491.937617][ T8026] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 491.969301][ T8019] tipc: Resetting bearer [ 492.122854][ T8019] tipc: Disabling bearer [ 492.188884][ T8030] tipc: Enabling of bearer rejected, already enabled [ 492.255804][ T8030] tipc: Resetting bearer [ 492.402468][ T8030] tipc: Disabling bearer [ 493.274923][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 493.550441][ T8058] loop6: detected capacity change from 0 to 512 [ 493.711325][ T8061] tipc: Enabling of bearer rejected, failed to enable media [ 493.740708][ T8058] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 494.554948][ T8067] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 494.613798][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 494.773085][ T8091] tipc: Enabling of bearer rejected, failed to enable media [ 496.631252][ T8109] tipc: Enabled bearer , priority 0 [ 496.657097][ T8109] tipc: Resetting bearer [ 498.220868][ T8109] tipc: Disabling bearer [ 498.274854][ T8120] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 499.912922][ T8138] loop6: detected capacity change from 0 to 512 [ 500.799317][ T8138] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 500.813668][ T8141] tipc: Enabling of bearer rejected, failed to enable media [ 501.675410][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.682472][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.085825][ T6264] EXT4-fs (loop6): unmounting filesystem. [ 503.189575][ T8165] tipc: Enabling of bearer rejected, failed to enable media [ 503.319677][ T8175] tipc: Enabled bearer , priority 0 [ 503.330569][ T8175] tipc: Resetting bearer [ 503.388817][ T8175] tipc: Disabling bearer [ 503.410613][ T8176] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 503.439078][ T8181] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 503.656097][ T8184] tipc: Enabling of bearer rejected, failed to enable media [ 507.128869][ T8220] tipc: Enabling of bearer rejected, failed to enable media [ 513.310747][ T8264] device syzkaller0 entered promiscuous mode [ 514.713870][ T8276] loop7: detected capacity change from 0 to 512 [ 514.806911][ T8276] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 515.626176][ T8279] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 517.530342][ T6516] EXT4-fs (loop7): unmounting filesystem. [ 517.602486][ T8298] tipc: Enabling of bearer rejected, failed to enable media [ 518.742154][ T8315] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 522.696828][ T8337] tipc: Enabling of bearer rejected, failed to enable media [ 531.345741][ T8405] tipc: Enabling of bearer rejected, failed to enable media [ 531.405107][ T8411] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 531.595375][ T8419] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 534.156891][ T8442] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 536.929918][ T8462] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 538.198574][ T8475] tipc: Enabling of bearer rejected, failed to enable media [ 539.413030][ T8481] tipc: Enabling of bearer rejected, failed to enable media [ 543.297213][ T8534] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 548.839003][ T8585] tipc: Enabling of bearer rejected, failed to enable media [ 555.537000][ T8630] tipc: Enabling of bearer rejected, failed to enable media [ 556.537534][ T8649] loop7: detected capacity change from 0 to 16384 [ 556.676463][ T8657] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 556.721354][ T8652] loop7: detected capacity change from 16384 to 0 [ 563.198436][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.206865][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.406441][ T8711] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 565.472869][ T8732] tipc: Enabling of bearer rejected, failed to enable media [ 565.804592][ T8737] tipc: Enabling of bearer rejected, failed to enable media [ 566.195291][ T8766] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 569.405379][ T8788] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 570.461821][ T8779] tipc: Enabling of bearer rejected, failed to enable media [ 570.653298][ T8800] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 578.005345][ T8868] device syzkaller0 entered promiscuous mode [ 578.196399][ T8875] tipc: Enabling of bearer rejected, failed to enable media [ 579.336817][ T8891] syz.6.874: attempt to access beyond end of device [ 579.336817][ T8891] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 579.350659][ T8891] gfs2: error 10 reading superblock [ 580.301070][ T8892] tipc: Enabling of bearer rejected, failed to enable media [ 580.338005][ T8896] tipc: Enabling of bearer rejected, failed to enable media [ 580.385427][ T8906] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 580.479503][ T8912] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 582.683491][ T8936] syz.7.884: attempt to access beyond end of device [ 582.683491][ T8936] nbd7: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 582.696787][ T8936] gfs2: error 10 reading superblock [ 582.782016][ T8939] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 583.578297][ T8944] syz.4.886: attempt to access beyond end of device [ 583.578297][ T8944] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 583.591466][ T8944] gfs2: error 10 reading superblock [ 585.287598][ T8971] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 587.152091][ T8986] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 587.261573][ T8987] syz.7.896: attempt to access beyond end of device [ 587.261573][ T8987] nbd7: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 587.275060][ T8987] gfs2: error 10 reading superblock [ 588.232811][ T8992] tipc: Enabling of bearer rejected, failed to enable media [ 592.895027][ T9028] syz.3.902: attempt to access beyond end of device [ 592.895027][ T9028] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 592.908247][ T9028] gfs2: error 10 reading superblock [ 594.254128][ T9033] device syzkaller0 entered promiscuous mode [ 594.478934][ T9041] syz.3.912: attempt to access beyond end of device [ 594.478934][ T9041] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 594.492262][ T9041] gfs2: error 10 reading superblock [ 595.608979][ T9045] tipc: Enabling of bearer rejected, failed to enable media [ 595.731012][ T9052] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 597.094947][ T9065] UDC core: g1: couldn't find an available UDC or it's busy [ 599.575647][ T9081] syz.3.920: attempt to access beyond end of device [ 599.575647][ T9081] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 599.588942][ T9081] gfs2: error 10 reading superblock [ 604.477773][ T9125] syz.4.929: attempt to access beyond end of device [ 604.477773][ T9125] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 604.491242][ T9125] gfs2: error 10 reading superblock [ 605.672059][ T9136] UDC core: g1: couldn't find an available UDC or it's busy [ 605.994992][ T9138] tipc: Enabling of bearer rejected, failed to enable media [ 606.316184][ T9152] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 607.337734][ T9157] device syzkaller0 entered promiscuous mode [ 612.510579][ T9214] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 612.705378][ T9197] tipc: Enabling of bearer rejected, failed to enable media [ 613.667585][ T9221] tipc: Enabling of bearer rejected, failed to enable media [ 618.035065][ T9251] tipc: Enabling of bearer rejected, failed to enable media [ 618.116712][ T9258] tipc: Enabling of bearer rejected, failed to enable media [ 621.679788][ T9286] tipc: Enabling of bearer rejected, failed to enable media [ 623.659148][ T9293] tipc: Enabling of bearer rejected, failed to enable media [ 624.365288][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.371742][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.444890][ T9334] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 626.476345][ T9332] device syzkaller0 entered promiscuous mode [ 626.892860][ T9343] syz.6.983: attempt to access beyond end of device [ 626.892860][ T9343] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 626.906231][ T9343] gfs2: error 10 reading superblock [ 630.487377][ T9363] tipc: Enabling of bearer rejected, failed to enable media [ 630.564175][ T9367] UDC core: g1: couldn't find an available UDC or it's busy [ 633.182426][ T4314] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 633.506212][ T4314] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.523204][ T4314] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.984493][ T9397] tipc: Enabling of bearer rejected, failed to enable media [ 634.171285][ T4314] usb 7-1: config 0 interface 0 has no altsetting 0 [ 634.178393][ T4314] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 634.198268][ T4314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.228307][ T9410] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 634.257109][ T4314] usb 7-1: config 0 descriptor?? [ 634.384660][ T9414] UDC core: g1: couldn't find an available UDC or it's busy [ 635.362992][ T4314] usbhid 7-1:0.0: can't add hid device: -71 [ 635.399373][ T4314] usbhid: probe of 7-1:0.0 failed with error -71 [ 635.482023][ T4314] usb 7-1: USB disconnect, device number 2 [ 637.119353][ T9446] syz.4.1010: attempt to access beyond end of device [ 637.119353][ T9446] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 637.132889][ T9446] gfs2: error 10 reading superblock [ 638.035562][ T9449] syz.3.1012: attempt to access beyond end of device [ 638.035562][ T9449] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 638.049131][ T9449] gfs2: error 10 reading superblock [ 638.852116][ T9453] UDC core: g1: couldn't find an available UDC or it's busy [ 640.686066][ T9470] tipc: Enabling of bearer rejected, failed to enable media [ 640.728555][ T9473] device syzkaller0 entered promiscuous mode [ 644.148062][ T9499] UDC core: g1: couldn't find an available UDC or it's busy [ 644.447299][ T9504] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 645.486863][ T9515] tipc: Enabling of bearer rejected, failed to enable media [ 645.617851][ T9521] syz.7.1034: attempt to access beyond end of device [ 645.617851][ T9521] nbd7: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 645.631211][ T9521] gfs2: error 10 reading superblock [ 648.823156][ T9539] UDC core: g1: couldn't find an available UDC or it's busy [ 649.599749][ T9552] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 649.758338][ T9555] syz.7.1044: attempt to access beyond end of device [ 649.758338][ T9555] nbd7: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 649.771731][ T9555] gfs2: error 10 reading superblock [ 650.984128][ T9565] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 651.659765][ T9570] syz.7.1047: attempt to access beyond end of device [ 651.659765][ T9570] nbd7: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 651.673192][ T9570] gfs2: error 10 reading superblock [ 652.683475][ T9572] tipc: Enabling of bearer rejected, failed to enable media [ 655.056154][ T9591] UDC core: g1: couldn't find an available UDC or it's busy [ 655.074214][ T9588] syz.7.1052: attempt to access beyond end of device [ 655.074214][ T9588] nbd7: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 655.087764][ T9588] gfs2: error 10 reading superblock [ 657.519690][ T9614] tipc: Enabling of bearer rejected, failed to enable media [ 660.500258][ T9641] UDC core: g1: couldn't find an available UDC or it's busy [ 664.484105][ T9683] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 664.527352][ T9684] syz.4.1075: attempt to access beyond end of device [ 664.527352][ T9684] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 664.540676][ T9684] gfs2: error 10 reading superblock [ 665.840641][ T9697] UDC core: g1: couldn't find an available UDC or it's busy [ 775.194677][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 775.202145][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9649/1:b..l [ 775.211696][ C1] (detected by 1, t=10502 jiffies, g=48125, q=30 ncpus=2) [ 775.218922][ C1] task:syz.1.1069 state:R running task stack:23920 pid:9649 ppid:4274 flags:0x00004006 [ 775.231631][ C1] Call Trace: [ 775.234993][ C1] [ 775.238097][ C1] __schedule+0x107f/0x4030 [ 775.242792][ C1] ? release_firmware_map_entry+0x187/0x187 [ 775.248727][ C1] ? lock_chain_count+0x20/0x20 [ 775.253695][ C1] ? __lock_acquire+0x1465/0x7c40 [ 775.258765][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 775.264104][ C1] preempt_schedule_irq+0xbb/0x160 [ 775.269273][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 775.275057][ C1] ? rcu_is_watching+0x11/0xa0 [ 775.279973][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 775.285829][ C1] irqentry_exit+0x63/0x70 [ 775.290317][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 775.296385][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x270 [ 775.302720][ C1] Code: 00 00 42 c7 44 33 08 00 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 51 ae c1 08 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc [ 775.322365][ C1] RSP: 0018:ffffc9001c99ee40 EFLAGS: 00000282 [ 775.328477][ C1] RAX: ffffffff8170d9b6 RBX: ffffc9001c99ef00 RCX: dffffc0000000000 [ 775.336522][ C1] RDX: ffffc9001c99ee01 RSI: ffffffff8170d9b6 RDI: ffffc9001c99ef00 [ 775.344529][ C1] RBP: ffffc9001c99eed0 R08: ffffc9001c99eed0 R09: ffffc9001c99ee98 [ 775.352543][ C1] R10: dffffc0000000000 R11: fffff52003933dd5 R12: ffff888055569e00 [ 775.360549][ C1] R13: 1ffff1100aaad46e R14: ffffffff8170da00 R15: ffffc9001c99ee48 [ 775.368580][ C1] ? stack_trace_save+0xf0/0xf0 [ 775.373488][ C1] ? stack_trace_save+0xa6/0xf0 [ 775.378391][ C1] ? stack_trace_save+0xa6/0xf0 [ 775.383294][ C1] arch_stack_walk+0x100/0x140 [ 775.388139][ C1] ? stack_trace_save+0xa6/0xf0 [ 775.393061][ C1] stack_trace_save+0xa6/0xf0 [ 775.397778][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 775.402950][ C1] save_stack+0x121/0x230 [ 775.407394][ C1] ? __reset_page_owner+0x190/0x190 [ 775.412655][ C1] ? page_ext_get+0x1de/0x2a0 [ 775.417446][ C1] __reset_page_owner+0x51/0x190 [ 775.422447][ C1] free_unref_page_prepare+0x8e5/0x9e0 [ 775.428052][ C1] free_unref_page_list+0xbb/0x8e0 [ 775.433243][ C1] release_pages+0x20d1/0x2340 [ 775.438149][ C1] ? filemap_remove_folio+0x1aa/0x2c0 [ 775.443618][ C1] ? lru_cache_disable+0x30/0x30 [ 775.448613][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 775.453863][ C1] __pagevec_release+0x6d/0xe0 [ 775.458720][ C1] shmem_undo_range+0x808/0x21d0 [ 775.463777][ C1] ? verify_lock_unused+0x140/0x140 [ 775.469060][ C1] ? shmem_truncate_range+0xb0/0xb0 [ 775.474320][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 775.479395][ C1] ? __rwlock_init+0x140/0x140 [ 775.484218][ C1] shmem_evict_inode+0x225/0x9f0 [ 775.489201][ C1] ? _raw_spin_unlock+0x24/0x40 [ 775.494101][ C1] ? inode_wait_for_writeback+0x1df/0x220 [ 775.499963][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 775.505558][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 775.510621][ C1] ? bit_waitqueue+0x30/0x30 [ 775.515294][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 775.520540][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 775.526157][ C1] evict+0x4b6/0x8b0 [ 775.530141][ C1] ? proc_nr_inodes+0x2f0/0x2f0 [ 775.535025][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 775.540297][ C1] ? _raw_spin_unlock+0x24/0x40 [ 775.545196][ C1] ? iput+0x79f/0x9c0 [ 775.549250][ C1] __dentry_kill+0x412/0x630 [ 775.553878][ C1] dentry_kill+0xb8/0x290 [ 775.558243][ C1] ? dput+0x37/0x1d0 [ 775.562195][ C1] dput+0xfa/0x1d0 [ 775.565966][ C1] __fput+0x597/0x8b0 [ 775.570060][ C1] task_work_run+0x1d0/0x260 [ 775.574794][ C1] ? task_work_cancel+0x220/0x220 [ 775.579868][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 775.585117][ C1] do_exit+0x9d5/0x2570 [ 775.589355][ C1] ? nfs_stat_to_errno+0x170/0x170 [ 775.594631][ C1] ? put_task_struct+0x80/0x80 [ 775.599458][ C1] ? lock_chain_count+0x20/0x20 [ 775.604357][ C1] do_group_exit+0x229/0x2e0 [ 775.608999][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 775.614253][ C1] get_signal+0x1259/0x1340 [ 775.618909][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 775.624969][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 775.630687][ C1] ? do_user_addr_fault+0x8a6/0xb20 [ 775.636016][ C1] ? get_sigframe_size+0x10/0x10 [ 775.641011][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 775.647053][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 775.652557][ C1] exit_to_user_mode_loop+0x70/0x110 [ 775.657880][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 775.663467][ C1] irqentry_exit_to_user_mode+0x5/0x30 [ 775.668970][ C1] exc_page_fault+0x88/0x100 [ 775.673614][ C1] asm_exc_page_fault+0x22/0x30 [ 775.678504][ C1] RIP: 0033:0x7f1900f9e161 [ 775.682967][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 775.689068][ C1] RAX: 0000000000000000 RBX: 00007f1901226090 RCX: 00007f1900f9e159 [ 775.697157][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 775.705163][ C1] RBP: 00007f190103506b R08: 0000000000000000 R09: 0000000000000000 [ 775.713175][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 775.721175][ C1] R13: 00007f1901226128 R14: 00007f1901226090 R15: 00007ffe90d9be78 [ 775.729200][ C1] [ 775.732246][ C1] rcu: rcu_preempt kthread starved for 10281 jiffies! g48125 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 775.743470][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 775.753475][ C1] rcu: RCU grace-period kthread stack dump: [ 775.759393][ C1] task:rcu_preempt state:R running task stack:26928 pid:16 ppid:2 flags:0x00004000 [ 775.770211][ C1] Call Trace: [ 775.773530][ C1] [ 775.776499][ C1] __schedule+0x107f/0x4030 [ 775.781067][ C1] ? release_firmware_map_entry+0x187/0x187 [ 775.787018][ C1] schedule+0xb9/0x180 [ 775.791123][ C1] schedule_timeout+0x184/0x2d0 [ 775.796012][ C1] ? console_conditional_schedule+0x40/0x40 [ 775.801957][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 775.807890][ C1] ? update_process_times+0x1b0/0x1b0 [ 775.813304][ C1] ? prepare_to_swait_event+0x340/0x360 [ 775.818903][ C1] rcu_gp_fqs_loop+0x303/0x1350 [ 775.823805][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 775.828705][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 775.834905][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 775.840962][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 775.846026][ C1] ? rcu_gp_init+0x14f0/0x14f0 [ 775.850821][ C1] ? rcu_gp_cleanup+0xade/0xc30 [ 775.855754][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 775.860998][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 775.866233][ C1] rcu_gp_kthread+0x99/0x3b0 [ 775.870865][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 775.876036][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 775.881968][ C1] ? __kthread_parkme+0x71/0x1c0 [ 775.886942][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 775.892013][ C1] kthread+0x29d/0x330 [ 775.896133][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 775.901280][ C1] ? kthread_blkcg+0xd0/0xd0 [ 775.905912][ C1] ret_from_fork+0x1f/0x30 [ 775.910455][ C1] [ 775.913502][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 775.919849][ C1] CPU: 1 PID: 9732 Comm: syz.7.1088 Not tainted syzkaller #0 [ 775.927248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.937340][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 775.943195][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7e d6 27 f7 48 89 df e8 06 9e 28 f7 e8 11 f6 4b f7 fb bf 01 00 00 00 b6 19 1c f7 65 8b 05 87 c9 c5 75 85 c0 74 02 5b c3 e8 94 dd c3 [ 775.962832][ C1] RSP: 0018:ffffc9001c817b98 EFLAGS: 00000282 [ 775.968960][ C1] RAX: 4259b869aed45c00 RBX: ffff8880733cc0c0 RCX: 4259b869aed45c00 [ 775.976965][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: 0000000000000001 [ 775.984969][ C1] RBP: 0000000000000000 R08: ffff8880733cc0c3 R09: 1ffff1100e679818 [ 775.992985][ C1] R10: dffffc0000000000 R11: ffffed100e679819 R12: 0000000000000021 [ 776.001338][ C1] R13: ffff8880733cc558 R14: dffffc0000000000 R15: 000000001c000004 [ 776.009442][ C1] FS: 00007f830649a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 776.018405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.025028][ C1] CR2: 0000001b33f17ff8 CR3: 0000000064c0d000 CR4: 00000000003506e0 [ 776.033037][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.041075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 776.049079][ C1] Call Trace: [ 776.052398][ C1] [ 776.055360][ C1] get_signal+0x114a/0x1340 [ 776.059935][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 776.065606][ C1] ? common_file_perm+0x171/0x1c0 [ 776.070789][ C1] ? fput+0x150/0x1a0 [ 776.074815][ C1] ? do_sendfile+0x9e1/0xe20 [ 776.079458][ C1] ? get_sigframe_size+0x10/0x10 [ 776.084447][ C1] ? do_pwritev+0x3a0/0x3a0 [ 776.089010][ C1] ? __se_sys_sendfile64+0x141/0x1a0 [ 776.094347][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 776.099855][ C1] exit_to_user_mode_loop+0x70/0x110 [ 776.105201][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 776.110814][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 776.116316][ C1] do_syscall_64+0x58/0xa0 [ 776.120768][ C1] ? clear_bhb_loop+0x60/0xb0 [ 776.125496][ C1] ? clear_bhb_loop+0x60/0xb0 [ 776.130207][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.136143][ C1] RIP: 0033:0x7f830559e159 [ 776.138015][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 776.140589][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.147096][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 776.166462][ C1] RSP: 002b:00007f830649a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 776.166492][ C1] RAX: fffffffffffffe00 RBX: 00007f8305826090 RCX: 00007f830559e159 [ 776.166505][ C1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 776.166515][ C1] RBP: 00007f830563506b R08: 0000000000000000 R09: 0000000000000000 [ 776.166525][ C1] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000000 [ 776.166537][ C1] R13: 00007f8305826128 R14: 00007f8305826090 R15: 00007ffe1dd850e8 [ 776.166563][ C1]