last executing test programs: 8.437635455s ago: executing program 4 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.918945766s ago: executing program 4 (id=224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 6.031096009s ago: executing program 0 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0xff, 0x1}}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 5.977380383s ago: executing program 1 (id=231): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYRES16]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x892, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d1}, {0xfffa, 0x3}, @period={0x58, 0x2, 0x4, 0x44, 0x9ee, {0x2, 0x7, 0xfffb, 0x7}, 0x0, 0x0}}) 4.930339731s ago: executing program 0 (id=234): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x50]}, 0x76) 4.697682866s ago: executing program 0 (id=237): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8293", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300)="97aac7284e", 0x5, 0x20000000, 0x0, 0x0) 4.372190058s ago: executing program 0 (id=240): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {&(0x7f0000000300)=[{0x7ea, 0x700}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 4.111052842s ago: executing program 4 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.768280851s ago: executing program 0 (id=243): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, 0x0, 0x0) 3.590080368s ago: executing program 4 (id=245): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.314136257s ago: executing program 0 (id=246): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) 3.311988003s ago: executing program 2 (id=247): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.218402425s ago: executing program 1 (id=248): syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) syz_open_dev$swradio(&(0x7f0000000640), 0x1, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x37aea8e708e70634) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 3.162250749s ago: executing program 4 (id=249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2.864210777s ago: executing program 1 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d05}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4, 0xfffffffc, 0x0, 0xeffffdff, 0x0, [{0x6, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x0, '\x00', 0x7c}, {0xec, 0x13, 0x4, '\x00', 0xbb}, {0x13, 0xb}, {0x0, 0xfd, 0x0, '\x00', 0xfd}, {0xfe, 0x0, 0x6, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x6f, 0x0, 0x0, '\x00', 0x7}, {0x0, 0x8f, 0xf5, '\x00', 0xfc}, {0xb5, 0x6, 0x0, '\x00', 0x9}, {0xb, 0x0, 0x0, '\x00', 0xd}, {0x0, 0x99, 0x81, '\x00', 0x1}, {0x0, 0x49, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x3}, {0xc3, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x6, 0x0, '\x00', 0xff}, {0x3, 0x0, 0xec}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xfe, 0x0, 0xd}, {0x0, 0x80, 0x0, '\x00', 0x1}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x4a, 0xff, 0x3}]}}) 2.755034233s ago: executing program 4 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 2.745980123s ago: executing program 2 (id=252): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) close(0x3) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(0xffffffffffffffff, 0x1) 2.298985316s ago: executing program 3 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x10001}, 0x0, 0x2, 0x8000}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.292171019s ago: executing program 1 (id=255): unshare(0x60600) r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, 0x0, 0x0) 2.052660515s ago: executing program 3 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x20000001, 0xdbe}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.000515687s ago: executing program 2 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 1.998990806s ago: executing program 1 (id=258): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="ca9bb559252828f7280f1e9d66aa3f61297e27ee1cee598c4a07dafdcd35cbe58dc20ecc4265f005a6daa4921b1ca68dd3f12459d069c4a08044e8b7837af53779ab199063234d5166e7744eb276399d052cd0e760a76bfdf196d4cb207014823352e28af53d187c448895a05938700791c9c90a8ea8cbd85ff179d8e6a799ab4603abe70b87bbc700ff6b728c0f7a658d155d6096cb21a9a7baf8069bab4e318d700960c30be5ca8f90aa1103043552cf8b6a7ab57199aa4c32c463a32e5da2f1f6b342012f64c0286c1f4ddf63d2acbd0c164d7d915ee3e552ee364e1745cc47059b95b5a050daeecf3f09b2b5f779afd0942579f1eff52485cccc1b49b9e8d6a8cfca0eb55dbdc5da133fc3e0c23a9b63bf5d8e0bca947f4dbaa3b5482b690c1e3eee6555767ecacf477927de85e22cabcb7930ba362bbe7d672102ef3ddc776c7593e38c9182af9b814f4ddc40c5fd1c352476c1f85535420443abf6e064f2099e144b1a0ae954a64e1b114ae1f6c0384e36b321209d2a42fc1d71b992e3b5efee65007c58ce4c9943f0b1caae0828d72bebedda6bd57ff2f1128de8a68cbfb8b8ba293848ba4177f468707749d87decbea303cde7bc9592602545e1447281ca94d6d08b6aad60c29809bc25f6bed7c80e6d7a74eea5f2377eed00257aa1969e19160f51dca402a7293397495e7f3df3347f260747ddcd0abbf47226b21cee04db718bf3173660431f85beb2e816d041040dd1de0dddff4942d201b6cd2fda0456aae6da036a31621606e4f7d9945e7c746b02604a54aaa16610308aa2f9e1546bfbdba943c2a52e386851b723d4f96d0ffbe3e065c7d7d672763019a50a61b2755a4c9fb8216553e06bedeb5809e31af7bb03a4a754f12ea41c50dd306fb8ce05909ba426c677ced4183a174665d5da48becec51dd9123450c76ba60228b341678f0f3b2bd1bcf440a488c785acb98f9f196195363951164215d884f97d2a6077b4e01b4a2b442b32b95db5e8d63c4bd5227e9c63ca9ed99a7fb155d13dc283af1af5363ceea55daa0afc7b8a07b6f4ffb0e230fb845ffaadc5dfe57bebf04753f88a0bd2d66d771cbff8a87882a8597e90e3259d636824a6c2b31b54da0c8383053d369f354a1f972136d3638b3bf052d33b44bde9bc2099641e29c32099fa11290b523a3824eaaa18c6270452ca757ae5eccb9f684771fb54b10ba0fa7cc9381eb1409e2aa2ea153556f254416d210f04661734386f1ff795b41955642821085d107a22712338a8ccfbd5bf5c1a8447364bd2cfe544dfefd70777f4bed14a6d2c4b5f47cc7594839da3ac6cff44e965de5007906014c137ec9b692c78b558a4ea336c7f8ae09f315360ba7bb9b578962ad601b8746d4049a373f0999ec52ab0d59fd76aaf64e2ca4c4a5f5ef915ed6e9df4600bbce1967037f2a20849c06fae29e82aeb3cfb54621d3c28bef9d8afea56c571c76868ce9d61a03d1af94c3c2f4f1b4ed2fe26012e63e8aada2ca21bf1fe7a2cdb916cc80c9847b075fa295507612417e9bf90e65330ad7ca90014cd79373152300743dfde1c3e7943f256a5e706d8030100ab66f6b9069a21703b80d70afdbe1e9d74e4bd16ec24222e45c4cbf6de6981669a8525db8d8dadb3e09c8d0bbd5bcecd138a49d8569dcea0b1867f23df8f9575147d48418f2b4bee2ce146510cb0271fa2e70ab4b749b6ceb2ba44b17e0928f5b4f42c25d7f3720f92ad13a88fdbc070b985bc8231902a3488bb0932cffdc73042425883bbb9556e790ee97e9bbcb17de3b4a935f34c87113a7d7c7dd82031c8b0213bf9fe784fc1d95f8810bf1f643c533d693ba236a5e8595064cb710f9d0c949b87fb1789135645215faeeb7f1871d7c180dfb9b9e89caf5235e634b61b80ef17d30814d2b82cee2905e9911f9b48ba3eac331628689a4767c5044303289d7f5f9fd6c4b7fbeb4cd536ca2b766769255229aad45b742ef4be8615409df469bc0c06f3ea4faf5e1f9797063b9c533e8633e9440550ae47aef2c6985ef893f3b7bda30fff5bef98162b6b6cee7ff7dce60fd1f94c2f25c7b76400f792abdbc90ab81d61a70b8a24efc2beaac8b3419714ab8ae03e2c579b319a0a2422b24de4a96151b757f0ec44b8d0f154059ee20c0f321a60fab07827b9e73b34dee388271167524de1604cccfa9f5ccd8468814589e80dd6622af0041a7e4abc7c3ea945dc8591caf61ef05b61f07b3bcc2a830b4ddd3ffaebb127d980f5f7fe86562e7c54a10dcb3f17b2fe8a1def2a463f72fc17604ec6ab1c1c789b9c53ee147c5c979d1c5ce85bd422414a32bd8b760b6c916c1dc14014dfb047287c245218fe748d6b53b51154ae871749e5bd00411b2f6131c9a44da36049d9b326f8bc1e245ce325d96497c0af51c314272af7ea8e00d7d396dae288434d463efe31446fef7fa343ddc8d8946ea061478f6efeb5b14850adc7cf0985c93acfe8bbb89d134a19db1d3a87176eebe03838bea6c87ff180606ff23aa85526909eca38f4d1e39a13f6895773a98b459ea409ff3848e505032b0e1c1b0a96982eff863e51dad6ad5d353ab60de5c9d43a82b12e26da973dae63ca9807c25a205278166a224a38945ac64ea661fbb44120a1e8697493ba38d41231fdd70117c628ec7b079ac84a7807231d52594d3ffadef5d824ac120d79b8b0d40658fe1f01bd7b92aefd2f9a1417002df418d9c92736f569872a10d1316f4c4fec336fca3d4b376a7fcbf1b65c9b1e7805d2b8205c8c3803b90f8adcba6d1621d10d7ac02849982ada2c6dfb132c8036726d9f99832f9a1b74c85dbad759a4f56c879d34099c9420cda4ae9ba91a055cb4bbb9593527596780c1f33966899f0f077e8d671d328e2afe5604c113e4371d1202390344bfa7c936a4e250db77fa065b51c0d9b10c56090af6cbf3c0cf0de32c7ec21620bc1dc145e81a8e174572e1c4974c1121706b1dbc52488ce42158c41c505fb247640b4807bf28e91ba06af969065cab2d69d988239e5276435fe67a844bb9616392238cd7d41f30cbbe910b2a29bb772ffff87423e02950b7be953566d04e1c0f5d1e6b0deaca591e1f64de6cef048af101b6eb6186b16700aec3ee5cb772867d3bd5545aa912312958b37fc6cb7dd53cd428d456a7240738510a337dba694fe26994cbe866a27868a5989df8b2817e4acb571640c6e15b2f64c5f8ab7edc4cbc21e67addcee5caca0a4cce01015f19a20fdb7f5f3de018954aae79739e3e3cb8e047b654f64192c2ebb7cdf8f48b7d518bfda5fb7b14d2d07ebad7ce33e62f791254e57708ac7c3b107cd5b235038b50f0a5d87ae2fc65a7f363ac69db0637f259a829c385d23a0c44914afec4a58543e52f443cd9a3c2fd1229c26d1392a149d172d8c16b83587a6f6e02958ee1528f621962ddb2abcd8e01f847190ff290b1b2b1269afd7766ff1a892d3c292b6e6f8773898e58235eb4e46d0b4068a345aa92e9205ff441e93b12dfc1c65ecf39af69b6ddef22f38a394c7505d8130b78b332ad4c8168b49dc0e826118b7cd96a0c5efb43c91700b69069d28cb6d17ca8b44034df41519812cb7bb4b22b1a481a97f38b6546ce844166e98251a0b921bba6da12948fea199a85ac6b8086ee5f6786510b22e2c2f255bf42212a3a978e0faceba6726e5835eb2c7574265f6c68efcb0e32228926a35697416d31906c8e39b3a957269a6d1c63ee46026a2af642246a8184a780c846e61e4462a34d38c7ea44ebaf66e81f2a7e3af71884142dec43ae9fdb7cce8c5e432787529a8058a4020fad245e4af841c31200e2bcdf652113001cd06d79e38a5c8857dea57d9bdc73d37bd07b48b6413ffe1fddd7119c13d1ae831a0cbfb26b8448218c630d7fbf32ccd2f68eb10f53bf48ca58a02e948b3a77aba6d02caab96b5c551d8de2da99e8c82ac9092d93711fd6f5473f7bba5c6ea96b2b9665f2b898c18e6a11699da1c6556d48e60e5800ae9a1968491d1e8e5e90ceaf693bb4f151ec8fdfe93bef3d41d11a1df388853a5afb58e01addbc16d8da0302e7394fb46550f26d1fa43cb82410b18910f06ef16d60e30f6e32ef8631488e29b7637b86b2ad9dc076096933fb04b237d89dc25b08d1d6125b98d8b619754290abe1fdf2fafdf4cfe7b8fa5c6656038553857b099a54a45c05d084e3f4f3b4859e41475de8b676ac4c97e59d146da94694f34b1d97a119a2dd6a2321205802bf0d55eb793f5128e14aeaa43e5da3215cdc77420be5f3b62422f2efd24f95e535d3415ddce1c0401272b021243ded28d240cea411b885e5825ab60d4809703cb3586250f22604440088a71f000701938c8b8aa6dcf4aba150306f38d6502f0c4b380801e339fb0f1e415d289642903d1a31d1f051b13a13a16b66155a49a0cc5de60b893ccbc3cde597eb5964cb180fe34338d1617fe004a4993aed5650189c17cfde75b05756e335b02854ab2c0c5b22b9a27c150b5e191e466468d0ba4d10d51a9b8f171a4bf3004df226e762041cb4fe0417e81e6f711a2e5320e9287589250e7928d1a0dbc1d5ed725fbe979e4bdb200c5daa4b2fb9e0d743da090895f150c65c3a323cdc04bcef16320d650b0869a72c7f69b3366aadf578d6e8ecfd7e9e2b68d686326c4651a57a96f1e1fcba447fcc8220efe1a3fdf1d7d235255abd964b2358009910648b00f693801c8440b7fc0fa390f045e21b1224bbf0ae8b1c9f4b3ef52b251637045db02f6ba223269bfd475bc02b0353b04dd5e8630eed360e47db8a5cad0657a08345fffe22746ad68b7a7da812c00b0d615148c80e3744a54836f169230e4a150d36dbb3abbe61822528df234a70be2d53ceb7b23bfbbcc45e6d93cd029b3e035936a2aaa1d46a035da0d5e912732c0ddd0909fec2660703ed4eb87c3811dd90bf6a0c45fadafe99167d6b953184ea3008dcf8900725c8023e9b921058e9ef30e94076d50ebacdcaee88b7420312ee5f55c8cc4b82a89cb34aa41f7966a7055165f0d53d3eef82d123a67270dbd6c94c21295e8be496825886c7296bd7658eef94d775e6a2cea0528a9741f0a1b2b342f62317b3d91f434d0ce788e2e119272d05b6621893d0e7f8178e49da1edb3a5af74c827e018858f9dc5a243c816c15c6616ff9255136bf77dcebec43e29389b257918e086e5e28c238dc6ca3ad57c193b580514fc9a1c3cf30ee12e514c45e7b84460d2ce3b709998b270b181f5a8fff8a7b65f9437916ed964ebf4408153ca9696e90eb4a6e32500fe7dda1ade058c3f9376ed417d2494a3cbeb0375d3db576cbadc05c5e97f1cd788b2dc2ec15b99b585c87259d624781a4bab19e6e72073694521030221e8fe8657ea0d28ef7133c527baf2f509f5c9bb7628d3de9d8c234a586d9feb2c815904b4c77134b9dacb6be80e8f52a2f71a365e472749a914666326fe07d7c941f67aec4c97dcca5"}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 1.749353286s ago: executing program 3 (id=259): r0 = landlock_create_ruleset(&(0x7f0000000380)={0xa0, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.523772095s ago: executing program 2 (id=260): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1], &(0x7f0000001680), 0x0) 1.48546297s ago: executing program 3 (id=261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) writev(r0, &(0x7f0000000800)=[{0x0}], 0x1) 1.259558829s ago: executing program 3 (id=262): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x5a) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8000, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0xe}, &(0x7f00000001c0)=0x8) 1.258262209s ago: executing program 2 (id=263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) close_range(r1, 0xffffffffffffffff, 0x0) 862.802737ms ago: executing program 1 (id=264): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 201.550733ms ago: executing program 3 (id=265): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000200000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 0s ago: executing program 2 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900000000040002801400"], 0xcc}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 75.353484][ T5826] cgroup: Unknown subsys name 'net' [ 75.474182][ T5826] cgroup: Unknown subsys name 'cpuset' [ 75.483164][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.135089][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.445964][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.460497][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.473433][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.482637][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.491198][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.501071][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.508697][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.509411][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.526202][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.527472][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.533713][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.549708][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.559361][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.576580][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.585946][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.591438][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.596457][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.602031][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.610136][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.616757][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.623419][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.629534][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.636848][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.644087][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.659671][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.350986][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 80.449199][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 80.584903][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 80.678489][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 80.729148][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.736583][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.744363][ T5838] bridge_slave_0: entered allmulticast mode [ 80.753255][ T5838] bridge_slave_0: entered promiscuous mode [ 80.778110][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 80.807476][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.815031][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.822727][ T5838] bridge_slave_1: entered allmulticast mode [ 80.830589][ T5838] bridge_slave_1: entered promiscuous mode [ 80.964369][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.971974][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.979202][ T5839] bridge_slave_0: entered allmulticast mode [ 80.987349][ T5839] bridge_slave_0: entered promiscuous mode [ 81.009116][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.016551][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.024123][ T5840] bridge_slave_0: entered allmulticast mode [ 81.031979][ T5840] bridge_slave_0: entered promiscuous mode [ 81.046011][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.063006][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.070347][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.077764][ T5839] bridge_slave_1: entered allmulticast mode [ 81.087529][ T5839] bridge_slave_1: entered promiscuous mode [ 81.102991][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.110407][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.117684][ T5840] bridge_slave_1: entered allmulticast mode [ 81.125542][ T5840] bridge_slave_1: entered promiscuous mode [ 81.136160][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.265215][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.272939][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.280346][ T5850] bridge_slave_0: entered allmulticast mode [ 81.287853][ T5850] bridge_slave_0: entered promiscuous mode [ 81.300263][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.328037][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.340559][ T5838] team0: Port device team_slave_0 added [ 81.346776][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.354376][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.361787][ T5850] bridge_slave_1: entered allmulticast mode [ 81.369414][ T5850] bridge_slave_1: entered promiscuous mode [ 81.379769][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.405659][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.417529][ T5838] team0: Port device team_slave_1 added [ 81.447150][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.454750][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.462388][ T5841] bridge_slave_0: entered allmulticast mode [ 81.470079][ T5841] bridge_slave_0: entered promiscuous mode [ 81.524474][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.531878][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.539220][ T5841] bridge_slave_1: entered allmulticast mode [ 81.547589][ T5841] bridge_slave_1: entered promiscuous mode [ 81.586748][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.598874][ T5839] team0: Port device team_slave_0 added [ 81.619757][ T5840] team0: Port device team_slave_0 added [ 81.627582][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.634812][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.660920][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.676388][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.688462][ T5839] team0: Port device team_slave_1 added [ 81.708459][ T5840] team0: Port device team_slave_1 added [ 81.715707][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.723628][ T5854] Bluetooth: hci2: command tx timeout [ 81.723930][ T5861] Bluetooth: hci4: command tx timeout [ 81.729118][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.729465][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.735325][ T5854] Bluetooth: hci0: command tx timeout [ 81.761264][ T5852] Bluetooth: hci1: command tx timeout [ 81.761419][ T5852] Bluetooth: hci3: command tx timeout [ 81.828425][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.897352][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.908420][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.915496][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.941684][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.960619][ T5838] hsr_slave_0: entered promiscuous mode [ 81.967719][ T5838] hsr_slave_1: entered promiscuous mode [ 81.977858][ T5850] team0: Port device team_slave_0 added [ 81.985470][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.992857][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.018929][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.042380][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.049347][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.075559][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.091317][ T5850] team0: Port device team_slave_1 added [ 82.098477][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.105658][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.132037][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.188730][ T5841] team0: Port device team_slave_0 added [ 82.222589][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.229576][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.255767][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.269625][ T5841] team0: Port device team_slave_1 added [ 82.315489][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.322769][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.349019][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.430559][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.437675][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.464151][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.504017][ T5840] hsr_slave_0: entered promiscuous mode [ 82.511274][ T5840] hsr_slave_1: entered promiscuous mode [ 82.517918][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 82.524563][ T5840] Cannot create hsr debugfs directory [ 82.532042][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.538992][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.565099][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.583704][ T5839] hsr_slave_0: entered promiscuous mode [ 82.590963][ T5839] hsr_slave_1: entered promiscuous mode [ 82.597614][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 82.604109][ T5839] Cannot create hsr debugfs directory [ 82.753700][ T5850] hsr_slave_0: entered promiscuous mode [ 82.760763][ T5850] hsr_slave_1: entered promiscuous mode [ 82.767263][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 82.773195][ T5850] Cannot create hsr debugfs directory [ 82.828190][ T5841] hsr_slave_0: entered promiscuous mode [ 82.836010][ T5841] hsr_slave_1: entered promiscuous mode [ 82.845973][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 82.852326][ T5841] Cannot create hsr debugfs directory [ 83.390807][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.405793][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.439995][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.481827][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.576746][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.595879][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.618772][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.634153][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.733768][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.755030][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.772821][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.786036][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.800937][ T5161] Bluetooth: hci4: command tx timeout [ 83.801192][ T5861] Bluetooth: hci2: command tx timeout [ 83.806654][ T5161] Bluetooth: hci3: command tx timeout [ 83.806903][ T5852] Bluetooth: hci0: command tx timeout [ 83.813290][ T5854] Bluetooth: hci1: command tx timeout [ 83.950795][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.964662][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.978010][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.000930][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.038782][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.147914][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.161486][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.173847][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.197835][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.209189][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.226699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.234475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.267681][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.298864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.306141][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.397742][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.444430][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.451965][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.508124][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.515518][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.572490][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.668491][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.724368][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.734161][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.741511][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.793510][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.800868][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.853814][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.889042][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.936069][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.943319][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.004883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.012216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.064267][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.123884][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.131251][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.157683][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.183364][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.190680][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.422310][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.832630][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.847134][ T5839] veth0_vlan: entered promiscuous mode [ 85.880637][ T5854] Bluetooth: hci1: command tx timeout [ 85.882237][ T5852] Bluetooth: hci2: command tx timeout [ 85.886212][ T5861] Bluetooth: hci0: command tx timeout [ 85.886249][ T5861] Bluetooth: hci3: command tx timeout [ 85.886276][ T5861] Bluetooth: hci4: command tx timeout [ 85.989083][ T5838] veth0_vlan: entered promiscuous mode [ 86.002579][ T5839] veth1_vlan: entered promiscuous mode [ 86.057893][ T5838] veth1_vlan: entered promiscuous mode [ 86.164223][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.177645][ T5839] veth0_macvtap: entered promiscuous mode [ 86.192833][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.229714][ T5839] veth1_macvtap: entered promiscuous mode [ 86.249495][ T5840] veth0_vlan: entered promiscuous mode [ 86.309729][ T5838] veth0_macvtap: entered promiscuous mode [ 86.343976][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.366986][ T5838] veth1_macvtap: entered promiscuous mode [ 86.381979][ T5840] veth1_vlan: entered promiscuous mode [ 86.395601][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.459780][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.473903][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.512708][ T1016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.524691][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.548673][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.565001][ T5850] veth0_vlan: entered promiscuous mode [ 86.587429][ T5841] veth0_vlan: entered promiscuous mode [ 86.622889][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.635370][ T5850] veth1_vlan: entered promiscuous mode [ 86.670433][ T5840] veth0_macvtap: entered promiscuous mode [ 86.681511][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.691026][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.724802][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.734994][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.755296][ T5841] veth1_vlan: entered promiscuous mode [ 86.766923][ T5840] veth1_macvtap: entered promiscuous mode [ 86.870626][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.888649][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.946377][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.975828][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.984402][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.987706][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.116438][ T5850] veth0_macvtap: entered promiscuous mode [ 87.143946][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.165527][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.195065][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.205419][ T5841] veth0_macvtap: entered promiscuous mode [ 87.247620][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.276475][ T5850] veth1_macvtap: entered promiscuous mode [ 87.319230][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.320748][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.339788][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.349961][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.394126][ T5841] veth1_macvtap: entered promiscuous mode [ 87.407466][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.587213][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.648849][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.681749][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.734438][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.785345][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.819638][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.836978][ T5966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.849300][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.871819][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889318][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.900017][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.953752][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.964447][ T5852] Bluetooth: hci1: command tx timeout [ 87.964587][ T51] Bluetooth: hci3: command tx timeout [ 87.969924][ T5852] Bluetooth: hci0: command tx timeout [ 87.969953][ T5852] Bluetooth: hci2: command tx timeout [ 87.987421][ T5854] Bluetooth: hci4: command tx timeout [ 88.065180][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.194640][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.247775][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.331797][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7'. [ 88.385585][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.409902][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.198765][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.281167][ T29] audit: type=1326 audit(1773915063.387:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.432538][ T29] audit: type=1326 audit(1773915063.397:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.497411][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 89.519630][ T29] audit: type=1326 audit(1773915063.397:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.546553][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 89.569279][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.612915][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.632360][ T29] audit: type=1326 audit(1773915063.397:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.694108][ T29] audit: type=1326 audit(1773915063.397:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.717624][ T29] audit: type=1326 audit(1773915063.397:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.724737][ T5982] gretap0: entered promiscuous mode [ 89.742229][ T29] audit: type=1326 audit(1773915063.397:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.769522][ T29] audit: type=1326 audit(1773915063.397:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.796134][ T29] audit: type=1326 audit(1773915063.397:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.821701][ T29] audit: type=1326 audit(1773915063.397:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1119c799 code=0x7ff00000 [ 89.840667][ T5982] gretap0: left promiscuous mode [ 90.056233][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.140457][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.726984][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.816431][ T47] cfg80211: failed to load regulatory.db [ 92.861056][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.096363][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.125716][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.438509][ T6012] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 95.453814][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.640579][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 95.685230][ T5900] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 95.725174][ T5900] usb 2-1: config 0 has no interface number 0 [ 95.744063][ T5900] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.763266][ T5900] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 95.776180][ T5900] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.787822][ T5900] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.836822][ T5900] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.861423][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.978982][ T6051] loop4: detected capacity change from 0 to 512 [ 95.992872][ T6051] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.999658][ T5900] usb 2-1: config 0 descriptor?? [ 96.008631][ T6051] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.058621][ T6039] usb 3-1: new high-speed USB device number 2 using dummy_hcd syzkaller syzkaller login: [ 96.546868][ T5900] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 96.720486][ T6039] usb 3-1: Using ep0 maxpacket: 32 [ 96.757671][ T6039] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.820597][ T6039] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.846496][ T6051] EXT4-fs (loop4): 1 truncate cleaned up [ 96.867375][ T5900] usb 2-1: USB disconnect, device number 2 [ 96.884901][ T6039] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.907489][ T6051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.917892][ T6039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.933598][ T5900] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 96.973506][ T6039] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.974898][ T6056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 97.037641][ T6039] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.095196][ T6039] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.132157][ T6039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.155840][ T6039] usb 3-1: config 0 descriptor?? [ 97.248314][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 97.256999][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 97.267188][ T51] Bluetooth: hci2: hardware error 0x00 [ 97.387384][ T6039] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.370038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.628147][ T6067] loop0: detected capacity change from 0 to 512 [ 98.716537][ T6067] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.088106][ T808] usb 3-1: USB disconnect, device number 2 [ 99.096042][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.104320][ T6067] EXT4-fs (loop0): 1 truncate cleaned up [ 99.166635][ T808] usblp0: removed [ 99.173326][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.323820][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 99.400850][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.422193][ T6078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.548107][ T6082] netlink: 180 bytes leftover after parsing attributes in process `syz.4.33'. [ 99.683726][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 100.296843][ T6083] nbd: socks must be embedded in a SOCK_ITEM attr [ 101.640347][ T5854] Bluetooth: hci0: command 0x2016 tx timeout [ 103.427106][ T6001] udevd[6001]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 103.583568][ T5893] udevd[5893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 103.720465][ T5854] Bluetooth: hci0: command 0x2016 tx timeout [ 104.043204][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.117357][ T6122] loop3: detected capacity change from 0 to 2048 [ 104.578183][ T6126] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.398341][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 105.444738][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.492221][ T9] usb 2-1: Product: syz [ 105.521610][ T9] usb 2-1: Manufacturer: syz [ 105.547862][ T9] usb 2-1: SerialNumber: syz [ 105.595680][ T9] usb 2-1: config 0 descriptor?? [ 106.098641][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 106.556985][ T6148] nbd: socks must be embedded in a SOCK_ITEM attr [ 106.799018][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 108.588198][ T9] usb 2-1: Please update to version 0.2 or newer [ 108.671185][ T5893] udevd[5893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 108.685249][ T9] usb 2-1: USB disconnect, device number 3 [ 108.781083][ T5892] udevd[5892]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 109.277525][ T6178] loop4: detected capacity change from 0 to 4096 [ 109.647609][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 109.647630][ T29] audit: type=1800 audit(1773915083.777:41): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.61" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 109.942960][ T6196] loop0: detected capacity change from 0 to 64 [ 110.187331][ T6200] loop4: detected capacity change from 0 to 1764 [ 110.530715][ T808] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.883967][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.097400][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.261119][ T808] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 111.319139][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.370023][ T808] usb 3-1: config 0 descriptor?? [ 111.541988][ T5838] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 111.564260][ T5838] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 111.731434][ T6217] Bluetooth: MGMT ver 1.23 [ 112.237607][ T808] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 112.328736][ T808] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 112.418258][ T5927] usb 3-1: USB disconnect, device number 3 [ 112.547861][ T6231] netlink: 180 bytes leftover after parsing attributes in process `syz.3.77'. [ 112.592499][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 112.606307][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 112.606338][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.606350][ T51] Workqueue: hci1 hci_rx_work [ 112.606382][ T51] Call Trace: [ 112.606391][ T51] [ 112.606400][ T51] dump_stack_lvl+0xe8/0x150 [ 112.606436][ T51] sysfs_create_dir_ns+0x271/0x2a0 [ 112.606498][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.606529][ T51] ? do_raw_spin_unlock+0xf5/0x210 [ 112.606564][ T51] kobject_add_internal+0x62b/0xd00 [ 112.606605][ T51] kobject_add+0x163/0x240 [ 112.606641][ T51] ? __pfx_kobject_add+0x10/0x10 [ 112.606671][ T51] ? _raw_spin_unlock+0x3f/0x50 [ 112.606699][ T51] ? get_device_parent+0x366/0x3a0 [ 112.606732][ T51] device_add+0x408/0xb70 [ 112.606764][ T51] hci_conn_add_sysfs+0xd5/0x210 [ 112.606792][ T51] le_conn_complete_evt+0xf1d/0x1430 [ 112.606833][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 112.606861][ T51] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 112.606891][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 112.606917][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.606941][ T51] ? skb_pull_data+0xfb/0x200 [ 112.606977][ T51] hci_le_conn_complete_evt+0x187/0x470 [ 112.607015][ T51] hci_event_packet+0x7af/0x12c0 [ 112.607046][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 112.607071][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 112.607107][ T51] ? hci_send_to_monitor+0xe2/0x590 [ 112.607142][ T51] hci_rx_work+0x3ee/0x1040 [ 112.607166][ T51] ? preempt_schedule_thunk+0x16/0x30 [ 112.607197][ T51] ? process_one_work+0x8bb/0x1780 [ 112.607224][ T51] process_one_work+0x9ab/0x1780 [ 112.607266][ T51] ? __pfx_process_one_work+0x10/0x10 [ 112.607286][ T51] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.607323][ T51] worker_thread+0xba8/0x11e0 [ 112.607372][ T51] kthread+0x388/0x470 [ 112.607398][ T51] ? __pfx_worker_thread+0x10/0x10 [ 112.607416][ T51] ? __pfx_kthread+0x10/0x10 [ 112.607442][ T51] ret_from_fork+0x51e/0xb90 [ 112.607485][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 112.607512][ T51] ? __switch_to+0xc7d/0x1450 [ 112.607550][ T51] ? __pfx_kthread+0x10/0x10 [ 112.607579][ T51] ret_from_fork_asm+0x1a/0x30 [ 112.607619][ T51] [ 112.607903][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.891072][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 112.902698][ T51] Bluetooth: hci1: failed to register connection device [ 113.447182][ T6232] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.000274][ T5854] Bluetooth: hci1: command 0x2016 tx timeout [ 115.149681][ T5976] kworker/u8:10: attempt to access beyond end of device [ 115.149681][ T5976] loop0: rw=1, sector=159, nr_sectors = 1 limit=64 [ 115.508466][ T5976] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 115.610506][ T5976] kworker/u8:10: attempt to access beyond end of device [ 115.610506][ T5976] loop0: rw=1, sector=160, nr_sectors = 1 limit=64 [ 115.772542][ T5976] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 115.938941][ T5976] kworker/u8:10: attempt to access beyond end of device [ 115.938941][ T5976] loop0: rw=1, sector=161, nr_sectors = 1 limit=64 [ 116.167895][ T5976] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 116.225485][ T5976] kworker/u8:10: attempt to access beyond end of device [ 116.225485][ T5976] loop0: rw=1, sector=162, nr_sectors = 1 limit=64 [ 117.100374][ T5976] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 117.111652][ T5976] kworker/u8:10: attempt to access beyond end of device [ 117.111652][ T5976] loop0: rw=1, sector=163, nr_sectors = 1 limit=64 [ 117.125118][ T5976] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 117.134006][ T5976] kworker/u8:10: attempt to access beyond end of device [ 117.134006][ T5976] loop0: rw=1, sector=167, nr_sectors = 1 limit=64 [ 117.148282][ T5976] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 117.157027][ T5976] kworker/u8:10: attempt to access beyond end of device [ 117.157027][ T5976] loop0: rw=1, sector=169, nr_sectors = 1 limit=64 [ 117.171227][ T5976] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 117.180012][ T5976] kworker/u8:10: attempt to access beyond end of device [ 117.180012][ T5976] loop0: rw=1, sector=171, nr_sectors = 1 limit=64 [ 117.193361][ T5976] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 117.202254][ T5976] kworker/u8:10: attempt to access beyond end of device [ 117.202254][ T5976] loop0: rw=1, sector=172, nr_sectors = 1 limit=64 [ 117.218734][ T5976] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 117.221426][ T5892] udevd[5892]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.227745][ T5976] kworker/u8:10: attempt to access beyond end of device [ 117.227745][ T5976] loop0: rw=1, sector=173, nr_sectors = 1 limit=64 [ 117.387562][ T5893] udevd[5893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.509698][ T5976] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 117.570504][ T5854] Bluetooth: hci1: command 0x2016 tx timeout [ 120.286177][ T6288] loop2: detected capacity change from 0 to 16 [ 120.386341][ T6288] erofs (device loop2): mounted with root inode @ nid 36. [ 120.423217][ T6288] bio_check_eod: 116 callbacks suppressed [ 120.423280][ T6288] syz.2.94: attempt to access beyond end of device [ 120.423280][ T6288] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 121.010145][ T29] audit: type=1800 audit(1773915095.117:42): pid=6288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.94" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 121.150306][ T6295] Zero length message leads to an empty skb [ 121.216281][ T6297] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 121.224139][ T6297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 121.234781][ T6297] batadv0: entered promiscuous mode [ 121.240506][ T6297] batadv0: entered allmulticast mode [ 121.247078][ T6297] bridge0: port 3(batadv0) entered blocking state [ 121.253978][ T6297] bridge0: port 3(batadv0) entered disabled state [ 121.970318][ T6295] loop5: detected capacity change from 0 to 7 [ 121.974415][ T6297] bridge0: port 3(batadv0) entered blocking state [ 121.981400][ T6295] Dev loop5: unable to read RDB block 7 [ 121.983800][ T6297] bridge0: port 3(batadv0) entered forwarding state [ 121.988741][ T6295] loop5: AHDI p1 [ 121.988781][ T6295] loop5: partition table partially beyond EOD, truncated [ 122.490682][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 122.500304][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 123.646962][ T6329] loop3: detected capacity change from 0 to 1024 [ 123.654764][ T6329] ======================================================= [ 123.654764][ T6329] WARNING: The mand mount option has been deprecated and [ 123.654764][ T6329] and is ignored by this kernel. Remove the mand [ 123.654764][ T6329] option from the mount to silence this warning. [ 123.654764][ T6329] ======================================================= [ 123.755850][ T6329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.854132][ T6329] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.028900][ T6329] EXT4-fs error (device loop3): ext4_map_blocks:821: inode #15: comm syz.3.104: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.058598][ T6329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 124.075105][ T6329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.075105][ T6329] [ 124.138493][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.240153][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 124.521386][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.679468][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 124.960158][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 128, setting to 64 [ 125.149309][ T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 125.398233][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.724189][ T6355] loop5: detected capacity change from 0 to 7 [ 125.777272][ T6355] Dev loop5: unable to read RDB block 7 [ 126.445861][ T9] usb 1-1: Product: syz [ 126.938003][ T6355] loop5: AHDI p1 [ 126.943778][ T6355] loop5: partition table partially beyond EOD, truncated [ 126.952239][ T6356] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 126.960057][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.109'. [ 127.409938][ T9] usb 1-1: Manufacturer: syz [ 127.414644][ T9] usb 1-1: SerialNumber: syz [ 127.432877][ T9] usb 1-1: config 0 descriptor?? [ 127.450513][ T9] usb 1-1: can't set config #0, error -71 [ 127.474745][ T9] usb 1-1: USB disconnect, device number 2 [ 127.718212][ T6367] loop1: detected capacity change from 0 to 128 [ 127.730911][ T6367] adfs: Bad value for 'gid' [ 127.735512][ T6367] adfs: Bad value for 'gid' [ 128.414917][ T6370] loop6: detected capacity change from 0 to 2640 [ 128.681964][ T6370] buffer_io_error: 102 callbacks suppressed [ 128.681980][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.874155][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.041168][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.291470][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.737835][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.817324][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.920728][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.017533][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.040321][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.050148][ T6370] ldm_validate_partition_table(): Disk read failed. [ 130.091795][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.249364][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.379432][ T6370] Dev loop6: unable to read RDB block 0 [ 130.507421][ T6370] loop6: unable to read partition table [ 130.579728][ T6370] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 130.899923][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 130.912332][ T47] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 130.927163][ T47] usb 3-1: config 0 has no interface number 0 [ 130.949941][ T47] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 130.977094][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.994348][ T47] usb 3-1: Product: syz [ 130.999016][ T47] usb 3-1: Manufacturer: syz [ 131.004728][ T47] usb 3-1: SerialNumber: syz [ 131.041474][ T47] usb 3-1: config 0 descriptor?? [ 131.051162][ T47] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 131.259977][ T808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.284176][ T47] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.322326][ T47] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.600094][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 131.607570][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 131.618522][ T808] usb 1-1: config 0 has no interfaces? [ 131.630540][ T808] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.659884][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.672880][ T808] usb 1-1: Product: syz [ 131.685259][ T808] usb 1-1: Manufacturer: syz [ 131.696532][ T808] usb 1-1: SerialNumber: syz [ 131.744369][ T808] usb 1-1: config 0 descriptor?? [ 131.820171][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.820656][ T5927] usb 3-1: USB disconnect, device number 4 [ 131.910606][ T5927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.940832][ T5927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.001904][ T5927] quatech2 3-1:0.51: device disconnected [ 132.108564][ T9] usb 1-1: USB disconnect, device number 3 [ 133.298287][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.470084][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.662822][ T6430] loop4: detected capacity change from 0 to 4096 [ 135.228564][ T6456] loop0: detected capacity change from 0 to 512 [ 135.324546][ T6456] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 135.627293][ T6465] loop3: detected capacity change from 0 to 32768 [ 135.706406][ T6465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.145 (6465) [ 135.775790][ T6465] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.786313][ T6465] BTRFS info (device loop3): using sha256 checksum algorithm [ 135.861298][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.129172][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.223529][ T5927] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.310509][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.333659][ T6465] BTRFS info (device loop3): enabling ssd optimizations [ 136.340719][ T6465] BTRFS info (device loop3): turning on async discard [ 136.347496][ T6465] BTRFS info (device loop3): enabling free space tree [ 136.398406][ T5927] usb 2-1: config 0 descriptor?? [ 137.343189][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 137.394389][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 137.422081][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.426476][ T5927] usb 2-1: USB disconnect, device number 4 [ 137.641433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.860498][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.173852][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.303559][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.196608][ T5927] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.207102][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.493934][ T5927] usb 2-1: config 0 descriptor?? [ 139.503735][ T5927] usb 2-1: can't set config #0, error -71 [ 139.537483][ T5927] usb 2-1: USB disconnect, device number 5 [ 141.596606][ T6523] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 141.723257][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 141.741914][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 142.143230][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 142.155820][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 142.978057][ T6563] loop5: detected capacity change from 0 to 7 [ 143.035464][ T6564] netlink: 'syz.2.170': attribute type 10 has an invalid length. [ 143.043370][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.170'. [ 143.052458][ T6564] batadv0: entered promiscuous mode [ 143.057757][ T6564] batadv0: entered allmulticast mode [ 143.066989][ T6564] bridge0: port 3(batadv0) entered blocking state [ 143.074954][ T6564] bridge0: port 3(batadv0) entered disabled state [ 143.098938][ T6564] bridge0: port 3(batadv0) entered blocking state [ 143.106827][ T6564] bridge0: port 3(batadv0) entered forwarding state [ 143.210122][ T6563] Dev loop5: unable to read RDB block 7 [ 143.215920][ T6563] loop5: AHDI p1 [ 143.219887][ T6563] loop5: partition table partially beyond EOD, truncated [ 143.314282][ T5975] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 143.326773][ T5975] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 144.861777][ T5939] IPVS: starting estimator thread 0... [ 144.951898][ T6580] IPVS: using max 26 ests per chain, 62400 per kthread [ 145.911296][ T6586] loop4: detected capacity change from 0 to 2048 [ 145.963949][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 145.979521][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 146.137322][ T6586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.480424][ T29] audit: type=1800 audit(1773915120.617:43): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.177" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 146.565017][ T6606] loop0: detected capacity change from 0 to 512 [ 146.841463][ T6606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.854852][ T6606] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.645556][ T5939] IPVS: starting estimator thread 0... [ 147.760562][ T6620] IPVS: using max 23 ests per chain, 55200 per kthread [ 148.144137][ T6628] loop1: detected capacity change from 0 to 40427 [ 148.221240][ T6628] F2FS-fs (loop1): invalid crc value [ 148.327840][ T6628] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 148.345751][ T6628] F2FS-fs (loop1): Start checkpoint disabled! [ 148.373741][ T6628] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 148.381945][ T6628] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 148.773763][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.062057][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 149.119532][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 149.141486][ T5977] kworker/u8:11: attempt to access beyond end of device [ 149.141486][ T5977] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 149.241705][ T6646] loop5: detected capacity change from 0 to 7 [ 149.252237][ T6646] Dev loop5: unable to read RDB block 7 [ 149.258070][ T6646] loop5: AHDI p1 [ 149.261948][ T6646] loop5: partition table partially beyond EOD, truncated [ 149.277124][ T6646] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 149.285048][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.194'. [ 149.294105][ T6646] batadv0: entered promiscuous mode [ 149.299493][ T6646] batadv0: entered allmulticast mode [ 149.308851][ T6646] bridge0: port 3(batadv0) entered blocking state [ 149.316621][ T6646] bridge0: port 3(batadv0) entered disabled state [ 149.339470][ T6646] bridge0: port 3(batadv0) entered blocking state [ 149.346229][ T6646] bridge0: port 3(batadv0) entered forwarding state [ 149.711575][ T77] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 149.724476][ T77] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 149.991462][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 149.991496][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.991509][ T5977] Workqueue: writeback wb_workfn (flush-7:1) [ 149.991543][ T5977] Call Trace: [ 149.991551][ T5977] [ 149.991560][ T5977] dump_stack_lvl+0xe8/0x150 [ 149.991594][ T5977] f2fs_handle_critical_error+0x37c/0x540 [ 149.991630][ T5977] f2fs_write_end_io+0x1274/0x1740 [ 149.991672][ T5977] __submit_merged_bio+0x256/0x700 [ 149.991708][ T5977] f2fs_submit_page_write+0xed0/0x2540 [ 149.991768][ T5977] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 149.991816][ T5977] do_write_page+0x40f/0xab0 [ 149.991841][ T5977] ? uplift_priority+0xdb/0x730 [ 149.991871][ T5977] f2fs_do_write_node_page+0x3b/0x60 [ 149.991895][ T5977] __write_node_folio+0x11bb/0x1a50 [ 149.991948][ T5977] ? __pfx___write_node_folio+0x10/0x10 [ 149.991984][ T5977] ? f2fs_inode_chksum_set+0x13e/0x640 [ 149.992018][ T5977] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 149.992043][ T5977] ? folio_clear_dirty_for_io+0x570/0x710 [ 149.992067][ T5977] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 149.992095][ T5977] f2fs_sync_node_pages+0xeb4/0x1680 [ 149.992143][ T5977] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 149.992164][ T5977] ? __percpu_counter_sum+0x1c2/0x1e0 [ 149.992235][ T5977] ? blk_start_plug+0x51/0x1b0 [ 149.992262][ T5977] f2fs_write_node_pages+0x312/0x700 [ 149.992294][ T5977] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 149.992334][ T5977] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 149.992358][ T5977] do_writepages+0x32e/0x550 [ 149.992390][ T5977] ? reacquire_held_locks+0x104/0x190 [ 149.992412][ T5977] ? writeback_sb_inodes+0x477/0x1a20 [ 149.992443][ T5977] __writeback_single_inode+0x133/0x11a0 [ 149.992469][ T5977] ? do_raw_spin_unlock+0xf5/0x210 [ 149.992498][ T5977] writeback_sb_inodes+0x992/0x1a20 [ 149.992558][ T5977] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 149.992581][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.992651][ T5977] ? rcu_is_watching+0x15/0xb0 [ 149.992682][ T5977] wb_writeback+0x456/0xb70 [ 149.992711][ T5977] ? queue_io+0x1d1/0x4a0 [ 149.992745][ T5977] ? __pfx_wb_writeback+0x10/0x10 [ 149.992766][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.992809][ T5977] wb_workfn+0x414/0xf50 [ 149.992839][ T5977] ? look_up_lock_class+0x57/0x110 [ 149.992879][ T5977] ? __pfx_wb_workfn+0x10/0x10 [ 149.992904][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.992938][ T5977] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 149.992988][ T5977] ? process_one_work+0x8bb/0x1780 [ 149.993016][ T5977] process_one_work+0x9ab/0x1780 [ 149.993070][ T5977] ? __pfx_process_one_work+0x10/0x10 [ 149.993095][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.993139][ T5977] worker_thread+0xba8/0x11e0 [ 149.993166][ T5977] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 149.993190][ T5977] ? __kthread_parkme+0x7a/0x1f0 [ 149.993211][ T5977] ? __kthread_parkme+0x19c/0x1f0 [ 149.993238][ T5977] kthread+0x388/0x470 [ 149.993262][ T5977] ? __pfx_worker_thread+0x10/0x10 [ 149.993279][ T5977] ? __pfx_kthread+0x10/0x10 [ 149.993304][ T5977] ret_from_fork+0x51e/0xb90 [ 149.993336][ T5977] ? __pfx_ret_from_fork+0x10/0x10 [ 149.993360][ T5977] ? __switch_to+0xc7d/0x1450 [ 149.993390][ T5977] ? __pfx_kthread+0x10/0x10 [ 149.993414][ T5977] ret_from_fork_asm+0x1a/0x30 [ 149.993454][ T5977] [ 149.994229][ T5977] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 150.436813][ T5977] kworker/u8:11: attempt to access beyond end of device [ 150.436813][ T5977] loop1: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 150.536843][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 150.536876][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.536900][ T5977] Workqueue: writeback wb_workfn (flush-7:1) [ 150.536936][ T5977] Call Trace: [ 150.536944][ T5977] [ 150.536952][ T5977] dump_stack_lvl+0xe8/0x150 [ 150.536986][ T5977] f2fs_handle_critical_error+0x37c/0x540 [ 150.537019][ T5977] f2fs_write_end_io+0x1274/0x1740 [ 150.537063][ T5977] __submit_merged_bio+0x256/0x700 [ 150.537096][ T5977] f2fs_submit_merged_write+0x284/0x390 [ 150.537128][ T5977] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 150.537157][ T5977] ? trace_lock_elapsed_time_end+0xf3/0xbf0 [ 150.537182][ T5977] ? f2fs_up_read_trace+0x1b/0x40 [ 150.537209][ T5977] ? folio_unlock+0x101/0x160 [ 150.537239][ T5977] __write_node_folio+0x14ce/0x1a50 [ 150.537281][ T5977] ? __pfx___write_node_folio+0x10/0x10 [ 150.537317][ T5977] ? f2fs_inode_chksum_set+0x13e/0x640 [ 150.537350][ T5977] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 150.537373][ T5977] ? folio_clear_dirty_for_io+0x570/0x710 [ 150.537396][ T5977] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 150.537423][ T5977] f2fs_sync_node_pages+0xeb4/0x1680 [ 150.537470][ T5977] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 150.537494][ T5977] ? __percpu_counter_sum+0x1c2/0x1e0 [ 150.537553][ T5977] ? blk_start_plug+0x51/0x1b0 [ 150.537579][ T5977] f2fs_write_node_pages+0x312/0x700 [ 150.537610][ T5977] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 150.537649][ T5977] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 150.537675][ T5977] do_writepages+0x32e/0x550 [ 150.537705][ T5977] ? reacquire_held_locks+0x104/0x190 [ 150.537726][ T5977] ? writeback_sb_inodes+0x477/0x1a20 [ 150.537754][ T5977] __writeback_single_inode+0x133/0x11a0 [ 150.537780][ T5977] ? do_raw_spin_unlock+0xf5/0x210 [ 150.537808][ T5977] writeback_sb_inodes+0x992/0x1a20 [ 150.537864][ T5977] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 150.537895][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.537963][ T5977] ? rcu_is_watching+0x15/0xb0 [ 150.537995][ T5977] wb_writeback+0x456/0xb70 [ 150.538022][ T5977] ? queue_io+0x1d1/0x4a0 [ 150.538062][ T5977] ? __pfx_wb_writeback+0x10/0x10 [ 150.538082][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.538122][ T5977] wb_workfn+0x414/0xf50 [ 150.538144][ T5977] ? look_up_lock_class+0x57/0x110 [ 150.538177][ T5977] ? __pfx_wb_workfn+0x10/0x10 [ 150.538198][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.538222][ T5977] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 150.538271][ T5977] ? process_one_work+0x8bb/0x1780 [ 150.538297][ T5977] process_one_work+0x9ab/0x1780 [ 150.538349][ T5977] ? __pfx_process_one_work+0x10/0x10 [ 150.538374][ T5977] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.538418][ T5977] worker_thread+0xba8/0x11e0 [ 150.538449][ T5977] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 150.538473][ T5977] ? __kthread_parkme+0x7a/0x1f0 [ 150.538494][ T5977] ? __kthread_parkme+0x19c/0x1f0 [ 150.538522][ T5977] kthread+0x388/0x470 [ 150.538546][ T5977] ? __pfx_worker_thread+0x10/0x10 [ 150.538562][ T5977] ? __pfx_kthread+0x10/0x10 [ 150.538587][ T5977] ret_from_fork+0x51e/0xb90 [ 150.538620][ T5977] ? __pfx_ret_from_fork+0x10/0x10 [ 150.538645][ T5977] ? __switch_to+0xc7d/0x1450 [ 150.538675][ T5977] ? __pfx_kthread+0x10/0x10 [ 150.538700][ T5977] ret_from_fork_asm+0x1a/0x30 [ 150.538740][ T5977] [ 150.883274][ T5977] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.015606][ T6661] warning: `syz.0.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.333087][ T6671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.513161][ T6740] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 156.521441][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.830075][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 156.989287][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.074720][ T24] usb 2-1: config 179 has no interface number 0 [ 157.112308][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 157.185126][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 157.203365][ T6738] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.239438][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.267300][ T6738] block device autoloading is deprecated and will be removed. [ 157.288835][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 157.314715][ T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.345031][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.367673][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.564316][ T6736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.896136][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 157.986442][ T6757] loop5: detected capacity change from 0 to 7 [ 157.997175][ T6757] Dev loop5: unable to read RDB block 7 [ 158.002989][ T6757] loop5: AHDI p1 [ 158.006793][ T6757] loop5: partition table partially beyond EOD, truncated [ 158.016024][ T6757] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 158.024626][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.239'. [ 158.104183][ T5927] usb 2-1: USB disconnect, device number 6 [ 158.104243][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.118824][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.152745][ T6756] loop0: detected capacity change from 0 to 4096 [ 158.225657][ T6761] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.921397][ T6771] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 159.209782][ T6777] loop2: detected capacity change from 0 to 1764 [ 159.351296][ T5927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.408237][ T5850] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 159.441611][ T5850] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 159.680658][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 159.704675][ T5927] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 159.723766][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.737950][ T5927] usb 1-1: Product: syz [ 159.747617][ T5927] usb 1-1: Manufacturer: syz [ 159.769654][ T5927] usb 1-1: SerialNumber: syz [ 159.827259][ T5927] usb 1-1: config 0 descriptor?? [ 160.097071][ T5927] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.348735][ T6802] loop5: detected capacity change from 0 to 7 [ 160.356034][ T6802] Dev loop5: unable to read RDB block 7 [ 160.361773][ T6802] loop5: AHDI p1 [ 160.365459][ T6802] loop5: partition table partially beyond EOD, truncated [ 160.374098][ T6802] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 160.381925][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.258'. [ 160.390994][ T6802] batadv0: entered promiscuous mode [ 160.396677][ T6802] batadv0: entered allmulticast mode [ 160.403369][ T6802] bridge0: port 3(batadv0) entered blocking state [ 160.410262][ T6802] bridge0: port 3(batadv0) entered disabled state [ 160.420476][ T6802] bridge0: port 3(batadv0) entered blocking state [ 160.427190][ T6802] bridge0: port 3(batadv0) entered forwarding state [ 160.751167][ T5976] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.760765][ T5976] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 161.209832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 161.339483][ T6815] sctp: [Deprecated]: syz.3.262 (pid 6815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.339483][ T6815] Use struct sctp_sack_info instead [ 161.358418][ T6815] sctp: [Deprecated]: syz.3.262 (pid 6815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.358418][ T6815] Use struct sctp_sack_info instead [ 162.224734][ T6818] node ffff8880588d82c0 offset 0 parent ffff8880588d8000 shift 0 count 1 values 0 array ffff888049d615c0 list ffff8880588d82d8 ffff8880588d82d8 marks 0 0 0 [ 162.244571][ T6818] ------------[ cut here ]------------ [ 162.250214][ T6818] kernel BUG at ./include/linux/xarray.h:1441! [ 162.257429][ T6818] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 162.263706][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.1.264 Not tainted syzkaller #0 PREEMPT(full) [ 162.272978][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.283061][ T6818] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 162.289068][ T6818] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 162.308771][ T6818] RSP: 0018:ffffc9001bb4ee20 EFLAGS: 00010246 [ 162.314843][ T6818] RAX: 0000000000000000 RBX: ffff8880588d82c0 RCX: 36310d0a67af9200 [ 162.322990][ T6818] RDX: ffffc900041aa000 RSI: 000000000000510b RDI: 000000000000510c [ 162.330965][ T6818] RBP: ffffc9001bb4f130 R08: 0000000000000003 R09: 0000000000000004 [ 162.338936][ T6818] R10: dffffc0000000000 R11: fffffbfff1cbd3cc R12: ffffea0001aeeeb0 [ 162.346940][ T6818] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9001bb4f010 [ 162.355034][ T6818] FS: 00007fbaf66946c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 162.363960][ T6818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.370556][ T6818] CR2: 00007f3ed604eddd CR3: 000000007ad88000 CR4: 00000000003526f0 [ 162.378578][ T6818] Call Trace: [ 162.381877][ T6818] [ 162.384847][ T6818] ? __schedule+0x167b/0x5590 [ 162.389531][ T6818] ? collapse_scan_file+0x1c1/0x5230 [ 162.394838][ T6818] ? __pfx_collapse_scan_file+0x10/0x10 [ 162.400401][ T6818] ? __up_read+0x291/0x6b0 [ 162.404830][ T6818] ? __pfx___up_read+0x10/0x10 [ 162.409687][ T6818] collapse_single_pmd+0x22b/0x4510 [ 162.414888][ T6818] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 162.420702][ T6818] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.425734][ T6818] ? __flush_work+0x100/0xc50 [ 162.430419][ T6818] ? __flush_work+0x100/0xc50 [ 162.435187][ T6818] ? __flush_work+0x100/0xc50 [ 162.439866][ T6818] ? __flush_work+0xab9/0xc50 [ 162.444542][ T6818] ? __pfx_collapse_single_pmd+0x10/0x10 [ 162.450180][ T6818] ? __flush_work+0x100/0xc50 [ 162.455138][ T6818] ? madvise_collapse+0x18c/0x820 [ 162.460165][ T6818] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 162.465827][ T6818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 162.471818][ T6818] madvise_collapse+0x34c/0x820 [ 162.476681][ T6818] madvise_vma_behavior+0x1094/0x4460 [ 162.482063][ T6818] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 162.487794][ T6818] ? __lock_acquire+0x6b5/0x2cf0 [ 162.492745][ T6818] ? __lock_acquire+0x6b5/0x2cf0 [ 162.497699][ T6818] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.502820][ T6818] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.507862][ T6818] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 162.513235][ T6818] ? debug_object_assert_init+0x209/0x370 [ 162.518973][ T6818] ? rcu_is_watching+0x15/0xb0 [ 162.523740][ T6818] ? trace_hrtimer_start+0x82/0x230 [ 162.529138][ T6818] ? mas_prev_slot+0xb7b/0xbf0 [ 162.533910][ T6818] ? find_vma_prev+0x123/0x1b0 [ 162.538685][ T6818] ? __pfx_find_vma_prev+0x10/0x10 [ 162.543825][ T6818] madvise_walk_vmas+0x573/0xae0 [ 162.548779][ T6818] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 162.554414][ T6818] ? blk_start_plug+0x6e/0x1b0 [ 162.559274][ T6818] madvise_do_behavior+0x386/0x540 [ 162.564736][ T6818] ? __pfx_madvise_do_behavior+0x10/0x10 [ 162.570372][ T6818] ? down_read+0x270/0x2e0 [ 162.574880][ T6818] ? madvise_lock+0x146/0x2e0 [ 162.579644][ T6818] do_madvise+0x1fa/0x2e0 [ 162.583971][ T6818] ? call_rcu+0x644/0x890 [ 162.588313][ T6818] ? __pfx_do_madvise+0x10/0x10 [ 162.593172][ T6818] ? __se_sys_futex+0x3a8/0x450 [ 162.598038][ T6818] ? rcu_is_watching+0x15/0xb0 [ 162.602807][ T6818] __x64_sys_madvise+0xa6/0xc0 [ 162.607711][ T6818] do_syscall_64+0x14d/0xf80 [ 162.612314][ T6818] ? trace_irq_disable+0x3b/0x150 [ 162.617440][ T6818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.623506][ T6818] ? clear_bhb_loop+0x40/0x90 [ 162.628273][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.634277][ T6818] RIP: 0033:0x7fbaf579c799 [ 162.638698][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.658303][ T6818] RSP: 002b:00007fbaf6694028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 162.666722][ T6818] RAX: ffffffffffffffda RBX: 00007fbaf5a15fa0 RCX: 00007fbaf579c799 [ 162.674961][ T6818] RDX: 0000000000000019 RSI: 0000000000600722 RDI: 0000200000000000 [ 162.683034][ T6818] RBP: 00007fbaf5832c99 R08: 0000000000000000 R09: 0000000000000000 [ 162.691275][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.699250][ T6818] R13: 00007fbaf5a16038 R14: 00007fbaf5a15fa0 R15: 00007ffe239a9828 [ 162.707234][ T6818] [ 162.710251][ T6818] Modules linked in: [ 162.716002][ T6818] ---[ end trace 0000000000000000 ]--- [ 162.731479][ T6818] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 162.734312][ T5927] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 162.760086][ T5927] usb 1-1: USB disconnect, device number 4 [ 162.771025][ T6818] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 162.794688][ T6818] RSP: 0018:ffffc9001bb4ee20 EFLAGS: 00010246 [ 162.801100][ T6818] RAX: 0000000000000000 RBX: ffff8880588d82c0 RCX: 36310d0a67af9200 [ 162.809140][ T6818] RDX: ffffc900041aa000 RSI: 000000000000510b RDI: 000000000000510c [ 162.817536][ T6818] RBP: ffffc9001bb4f130 R08: 0000000000000003 R09: 0000000000000004 [ 162.826030][ T6818] R10: dffffc0000000000 R11: fffffbfff1cbd3cc R12: ffffea0001aeeeb0 [ 162.839031][ T6818] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9001bb4f010 [ 162.847953][ T6818] FS: 00007fbaf66946c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 162.857863][ T6818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.867816][ T6818] CR2: 000000110c4366f3 CR3: 000000007ad88000 CR4: 00000000003526f0 [ 162.876339][ T6818] Kernel panic - not syncing: Fatal exception [ 162.882817][ T6818] Kernel Offset: disabled [ 162.887146][ T6818] Rebooting in 86400 seconds..