last executing test programs: 12.662527538s ago: executing program 3 (id=173): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8040, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r3, 0xb) r4 = epoll_create(0x2) epoll_pwait(r4, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 12.658071668s ago: executing program 0 (id=174): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040000, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 12.374659617s ago: executing program 0 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) 7.377052936s ago: executing program 3 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 7.146372503s ago: executing program 0 (id=188): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 7.070363275s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r6 = semget(0x1, 0x5, 0x6b4) semop(r6, &(0x7f0000000040), 0x0) semop(r6, &(0x7f00000002c0), 0x7) semctl$IPC_RMID(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 6.695750067s ago: executing program 0 (id=184): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) mknod(&(0x7f0000000000)='./file3\x00', 0x8, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x28c0000, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x15) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 5.300234281s ago: executing program 3 (id=187): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 3.209977588s ago: executing program 3 (id=190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xb9, &(0x7f0000000480)=ANY=[@ANYBLOB="1201100100000040410e42424000010203010902a7000301488005080b0101012430800904000000010130000a24010b0a00ab0000000904010000010230000904010101010230000e2402010904e30f97b5c782d8710a2402020400010004090624020101050a24020105020c01fa66092402010c04bb6d3eaecaf05dd2000f40400a25250600000081d6000904020000010230000904020101010230000824020102000fff"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.898213768s ago: executing program 2 (id=194): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000700)="e2", 0x1, 0x40000, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b8", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="02", 0x1}], 0x1}}], 0x2, 0x4000080) 2.872567419s ago: executing program 0 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x45, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ndb(0x0, 0x0, 0x8180) openat$sequencer2(0xffffff9c, 0x0, 0x89980, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x6, &(0x7f0000000a80)=@raw=[@call={0x85, 0x0, 0x0, 0xb3}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, @alu={0x4, 0x0, 0x2, 0x5, 0x2, 0x20, 0xfffffffffffffff0}], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x33f, 0x801) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000440)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@adinicb}, {@adinicb}, {@dmode={'dmode', 0x3d, 0x4}}, {@shortad}, {@shortad}, {@lastblock={'lastblock', 0x3d, 0x4}}, {@gid_forget}, {@gid_forget}]}, 0x2, 0xc6e, &(0x7f0000000f40)="$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") 2.141509882s ago: executing program 1 (id=196): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x40010) 2.062845454s ago: executing program 1 (id=197): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.988233337s ago: executing program 2 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.930663398s ago: executing program 1 (id=199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000100)=0x1fdfffc, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.678338786s ago: executing program 1 (id=200): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.609419618s ago: executing program 0 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) 1.484434582s ago: executing program 1 (id=202): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 456.604035ms ago: executing program 2 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x802, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 391.566947ms ago: executing program 1 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 309.20755ms ago: executing program 2 (id=205): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x40010) 212.247473ms ago: executing program 2 (id=206): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000700)="e2", 0x1, 0x40000, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b8", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="02", 0x1}], 0x1}}], 0x2, 0x4000080) 50.607428ms ago: executing program 2 (id=207): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 0s ago: executing program 3 (id=208): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 72.737106][ T5758] cgroup: Unknown subsys name 'net' [ 72.872087][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.216523][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.697803][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.707781][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.736471][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.746515][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.748603][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.755196][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.761377][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.769173][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.777870][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.785204][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.789697][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.799406][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.811409][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.818774][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.826211][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.834700][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.841979][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.842716][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.849437][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.857654][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.866267][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.871491][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.887651][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.895125][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.281464][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.372345][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.430746][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.462123][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.480694][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.489250][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.497165][ T5773] bridge_slave_0: entered allmulticast mode [ 76.504073][ T5773] bridge_slave_0: entered promiscuous mode [ 76.531979][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.539775][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.547578][ T5773] bridge_slave_1: entered allmulticast mode [ 76.554376][ T5773] bridge_slave_1: entered promiscuous mode [ 76.636865][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.644103][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.652608][ T5771] bridge_slave_0: entered allmulticast mode [ 76.659770][ T5771] bridge_slave_0: entered promiscuous mode [ 76.668920][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.676321][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.683677][ T5771] bridge_slave_1: entered allmulticast mode [ 76.691077][ T5771] bridge_slave_1: entered promiscuous mode [ 76.701807][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.738727][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.767162][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.774421][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.781904][ T5770] bridge_slave_0: entered allmulticast mode [ 76.788895][ T5770] bridge_slave_0: entered promiscuous mode [ 76.796941][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.804300][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.811881][ T5770] bridge_slave_1: entered allmulticast mode [ 76.820171][ T5770] bridge_slave_1: entered promiscuous mode [ 76.853908][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.885180][ T5773] team0: Port device team_slave_0 added [ 76.896288][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.915418][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.922963][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.930251][ T5772] bridge_slave_0: entered allmulticast mode [ 76.937592][ T5772] bridge_slave_0: entered promiscuous mode [ 76.946196][ T5773] team0: Port device team_slave_1 added [ 76.963404][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.972877][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.980554][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.988144][ T5772] bridge_slave_1: entered allmulticast mode [ 76.995152][ T5772] bridge_slave_1: entered promiscuous mode [ 77.023732][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.062398][ T5771] team0: Port device team_slave_0 added [ 77.090987][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.098281][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.124713][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.138072][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.145051][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.171117][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.185167][ T5771] team0: Port device team_slave_1 added [ 77.193158][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.208000][ T5770] team0: Port device team_slave_0 added [ 77.232296][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.252865][ T5770] team0: Port device team_slave_1 added [ 77.297091][ T5772] team0: Port device team_slave_0 added [ 77.311465][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.319781][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.346505][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.359256][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.366661][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.392934][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.428803][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.435823][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.462694][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.477465][ T5772] team0: Port device team_slave_1 added [ 77.511164][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.518529][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.544941][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.557323][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.564311][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.590938][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.608598][ T5773] hsr_slave_0: entered promiscuous mode [ 77.614917][ T5773] hsr_slave_1: entered promiscuous mode [ 77.633288][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.640458][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.669150][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.750409][ T5770] hsr_slave_0: entered promiscuous mode [ 77.756865][ T5770] hsr_slave_1: entered promiscuous mode [ 77.763112][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.771164][ T5770] Cannot create hsr debugfs directory [ 77.781265][ T5771] hsr_slave_0: entered promiscuous mode [ 77.788682][ T5771] hsr_slave_1: entered promiscuous mode [ 77.795401][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.803130][ T5771] Cannot create hsr debugfs directory [ 77.814031][ T5772] hsr_slave_0: entered promiscuous mode [ 77.820375][ T5772] hsr_slave_1: entered promiscuous mode [ 77.827261][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.834944][ T5772] Cannot create hsr debugfs directory [ 77.956673][ T5776] Bluetooth: hci3: command tx timeout [ 77.956686][ T5785] Bluetooth: hci0: command tx timeout [ 77.956885][ T5785] Bluetooth: hci1: command tx timeout [ 77.962380][ T5776] Bluetooth: hci2: command tx timeout [ 78.236316][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.251655][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.261592][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.272112][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.363815][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.373598][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.386720][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.399759][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.458829][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.490326][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.500898][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.522502][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.589575][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.602939][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.614962][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.628708][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.701703][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.740993][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.768219][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.775638][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.809169][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.816381][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.869146][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.903996][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.952382][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.959975][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.980264][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.999247][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.006529][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.039297][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.083006][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.093588][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.100826][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.138300][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.145453][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.218162][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.261690][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.268879][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.333516][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.358935][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.366140][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.570438][ T5773] veth0_vlan: entered promiscuous mode [ 79.629611][ T5773] veth1_vlan: entered promiscuous mode [ 79.682088][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.703364][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.763467][ T5773] veth0_macvtap: entered promiscuous mode [ 79.788412][ T5773] veth1_macvtap: entered promiscuous mode [ 79.867738][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.875594][ T5772] veth0_vlan: entered promiscuous mode [ 79.892205][ T5771] veth0_vlan: entered promiscuous mode [ 79.902497][ T5772] veth1_vlan: entered promiscuous mode [ 79.917731][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.929303][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.962271][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.972976][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.981748][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.990624][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.010836][ T5771] veth1_vlan: entered promiscuous mode [ 80.035893][ T5776] Bluetooth: hci2: command tx timeout [ 80.041645][ T5783] Bluetooth: hci1: command tx timeout [ 80.042155][ T51] Bluetooth: hci0: command tx timeout [ 80.054991][ T5785] Bluetooth: hci3: command tx timeout [ 80.113337][ T5772] veth0_macvtap: entered promiscuous mode [ 80.125075][ T5772] veth1_macvtap: entered promiscuous mode [ 80.163691][ T5770] veth0_vlan: entered promiscuous mode [ 80.194569][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.210149][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.222917][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.242368][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.258809][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.289168][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.313058][ T5770] veth1_vlan: entered promiscuous mode [ 80.335898][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.344736][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.357079][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.366379][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.383180][ T5771] veth0_macvtap: entered promiscuous mode [ 80.406890][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.414948][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.435646][ T5771] veth1_macvtap: entered promiscuous mode [ 80.493879][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.497679][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.504056][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.513150][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.532641][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.543617][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.555650][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.574586][ T5770] veth0_macvtap: entered promiscuous mode [ 80.613983][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.624688][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.634825][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.645614][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.658178][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.678212][ T5770] veth1_macvtap: entered promiscuous mode [ 80.694705][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.708986][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.718617][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.728278][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.756845][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.766554][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.845527][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.875932][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.886411][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.897688][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.909760][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.920378][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.932459][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.948496][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.960295][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.974551][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.986985][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.000816][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.014344][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.031225][ T5837] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.064983][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.120882][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.193445][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.413099][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.530726][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.610784][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.677878][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.179017][ T5785] Bluetooth: hci1: command tx timeout [ 82.185242][ T5785] Bluetooth: hci2: command tx timeout [ 82.194971][ T5785] Bluetooth: hci3: command tx timeout [ 82.210335][ T51] Bluetooth: hci0: command tx timeout [ 83.289749][ T5845] syz.2.3[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.991607][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.063933][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.224034][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.251923][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.261359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.282099][ T5785] Bluetooth: hci2: command tx timeout [ 84.282119][ T5783] Bluetooth: hci3: command tx timeout [ 84.288828][ T5785] Bluetooth: hci0: command tx timeout [ 84.293180][ T51] Bluetooth: hci1: command tx timeout [ 84.304959][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.350335][ T5849] vlan0: entered promiscuous mode [ 84.421441][ T5849] team0: Port device vlan0 added [ 84.518267][ T5848] team0: No ports can be present during mode change [ 84.556141][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.605806][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.793826][ T5845] loop2: detected capacity change from 0 to 32768 [ 84.818510][ T5853] loop0: detected capacity change from 0 to 16 [ 84.849906][ T5853] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 84.948516][ T5845] syz.2.3: attempt to access beyond end of device [ 84.948516][ T5845] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 84.966562][ T5845] lbmIODone: I/O error in JFS log [ 84.977087][ T5845] *** Log Format Error ! *** [ 84.982782][ T5845] lmLogInit: exit(-22) [ 85.016916][ T5845] lmLogOpen: exit(-22) [ 85.095191][ T5855] loop3: detected capacity change from 0 to 4096 [ 85.287543][ T5855] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 85.349737][ T5859] loop0: detected capacity change from 0 to 1024 [ 85.418227][ T5859] EXT4-fs: Ignoring removed orlov option [ 86.510041][ T5859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.094745][ T5851] loop1: detected capacity change from 0 to 32768 [ 87.170572][ T5851] ======================================================= [ 87.170572][ T5851] WARNING: The mand mount option has been deprecated and [ 87.170572][ T5851] and is ignored by this kernel. Remove the mand [ 87.170572][ T5851] option from the mount to silence this warning. [ 87.170572][ T5851] ======================================================= [ 87.245745][ C0] sched: RT throttling activated [ 87.248226][ T8] cfg80211: failed to load regulatory.db [ 87.261808][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.700736][ T5851] JBD2: Ignoring recovery information on journal [ 89.313238][ T5851] JBD2: journal reset failed [ 89.383104][ T5851] (syz.1.2,5851,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 89.420913][ T5851] (syz.1.2,5851,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 89.479171][ T5882] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 89.539558][ T5882] netlink: 'syz.0.12': attribute type 4 has an invalid length. [ 91.369965][ T5892] loop2: detected capacity change from 0 to 1024 [ 92.477344][ T5890] loop3: detected capacity change from 0 to 32768 [ 93.852033][ T5763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5763) [ 95.020267][ T5919] team0: No ports can be present during mode change [ 95.053024][ T5919] vlan0: entered promiscuous mode [ 95.119237][ T5919] team0: Port device vlan0 added [ 95.249344][ T5910] loop0: detected capacity change from 0 to 32768 [ 95.335155][ T5910] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.365146][ T5912] loop1: detected capacity change from 0 to 32768 [ 95.367151][ T5910] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.426470][ T5910] BTRFS info (device loop0): turning on sync discard [ 95.447267][ T5910] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.468497][ T5912] JBD2: Ignoring recovery information on journal [ 95.469628][ T5910] BTRFS info (device loop0): use zstd compression, level 3 [ 95.482404][ T5910] BTRFS info (device loop0): turning on async discard [ 95.489549][ T5910] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 95.500496][ T5910] BTRFS info (device loop0): trying to use backup root at mount time [ 95.508685][ T5910] BTRFS info (device loop0): enabling auto defrag [ 95.516152][ T5910] BTRFS info (device loop0): using free space tree [ 95.558401][ T3485] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 95.577769][ T5924] loop2: detected capacity change from 0 to 4096 [ 95.645115][ T5910] BTRFS error (device loop0): failed to load root extent [ 95.655881][ T5910] BTRFS warning (device loop0): try to load backup roots slot 1 [ 95.675649][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 95.713640][ T5912] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.740710][ T5910] BTRFS warning (device loop0): couldn't read tree root [ 95.763583][ T5924] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 95.768302][ T5910] BTRFS warning (device loop0): try to load backup roots slot 2 [ 95.828948][ T42] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 95.866239][ T5910] BTRFS warning (device loop0): couldn't read tree root [ 95.890529][ T5910] BTRFS warning (device loop0): try to load backup roots slot 3 [ 95.969554][ T5910] BTRFS info (device loop0): enabling ssd optimizations [ 95.992878][ T5910] BTRFS info (device loop0): rebuilding free space tree [ 96.034394][ T5912] syz.1.21 (5912) used greatest stack depth: 17712 bytes left [ 96.138752][ T5910] BTRFS info (device loop0): checking UUID tree [ 96.219814][ T5922] loop3: detected capacity change from 0 to 32768 [ 96.498941][ T5922] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 96.684787][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 96.782420][ T5922] JBD2: Ignoring recovery information on journal [ 97.204197][ T5922] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.339078][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.382581][ T28] audit: type=1800 audit(1781403612.149:2): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 97.391624][ T5951] loop2: detected capacity change from 0 to 1024 [ 97.460881][ T5951] EXT4-fs: Ignoring removed orlov option [ 97.517725][ T5951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.660655][ T5957] loop1: detected capacity change from 0 to 1024 [ 98.334932][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.260475][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 102.405271][ T5984] loop3: detected capacity change from 0 to 2048 [ 104.606408][ T5983] loop0: detected capacity change from 0 to 4096 [ 104.669235][ T5984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.775970][ T5983] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 105.957334][ T5998] loop3: detected capacity change from 0 to 1024 [ 106.245103][ T5991] loop1: detected capacity change from 0 to 32768 [ 106.261437][ T6001] loop2: detected capacity change from 0 to 2048 [ 106.853332][ T5991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.38 (5991) [ 107.189333][ T6001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.326934][ T5991] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.415403][ T5991] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 107.469455][ T5991] BTRFS info (device loop1): turning on sync discard [ 107.566636][ T5991] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 107.756400][ T5991] BTRFS info (device loop1): use zstd compression, level 3 [ 107.857206][ T5991] BTRFS info (device loop1): turning on async discard [ 107.947313][ T5991] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 108.093288][ T5991] BTRFS info (device loop1): trying to use backup root at mount time [ 108.190789][ T5991] BTRFS info (device loop1): enabling auto defrag [ 108.254880][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 108.277160][ T5991] BTRFS info (device loop1): using free space tree [ 108.284662][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 108.286747][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 108.296724][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 108.313071][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 108.323835][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 108.334347][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 108.344880][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 108.355025][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 108.365564][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 108.375485][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 108.385800][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 108.397507][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 108.416367][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 108.466101][ T5991] BTRFS error (device loop1): open_ctree failed: -12 [ 108.727249][ T6036] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 108.763554][ T6036] netlink: 'syz.1.46': attribute type 4 has an invalid length. [ 110.746429][ T6051] loop1: detected capacity change from 0 to 4096 [ 110.921766][ T6051] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 111.994736][ T6070] loop2: detected capacity change from 0 to 128 [ 112.191858][ T6070] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.261650][ T6070] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.278191][ T6076] loop1: detected capacity change from 0 to 2048 [ 112.355047][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.442594][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.460845][ T6076] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 112.479208][ T6076] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 112.486803][ T6076] overlayfs: failed to verify upper root origin [ 112.537156][ T6076] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 112.623384][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 112.648144][ T6072] loop3: detected capacity change from 0 to 32768 [ 112.650113][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.667614][ T6072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.55 (6072) [ 112.676786][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 112.750985][ T6072] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.808039][ T6072] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 112.852877][ T6072] BTRFS info (device loop3): turning on sync discard [ 112.884533][ T6072] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 112.914861][ T6072] BTRFS info (device loop3): use zstd compression, level 3 [ 112.942784][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.955933][ T6072] BTRFS info (device loop3): turning on async discard [ 112.981083][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 113.002687][ T6072] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 113.023596][ T6088] syzkaller0: entered promiscuous mode [ 113.044319][ T6088] syzkaller0: entered allmulticast mode [ 113.055014][ T6072] BTRFS info (device loop3): trying to use backup root at mount time [ 113.071869][ T8] usb 1-1: string descriptor 0 read error: -22 [ 113.088925][ T8] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 113.112951][ T6072] BTRFS info (device loop3): enabling auto defrag [ 113.117695][ T6086] loop1: detected capacity change from 0 to 40427 [ 113.136951][ T6086] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 113.145852][ T6086] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 113.153476][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.165891][ T6072] BTRFS info (device loop3): using free space tree [ 113.180829][ T6086] F2FS-fs (loop1): invalid crc value [ 113.205996][ T6086] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.280180][ T6086] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 113.287696][ T6086] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.311769][ T8] usb 1-1: unit 13 not found! [ 113.342884][ T6086] syz.1.58: attempt to access beyond end of device [ 113.342884][ T6086] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 113.345636][ T603] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 113.425996][ T6072] BTRFS error (device loop3): failed to load root extent [ 113.467092][ T6072] BTRFS warning (device loop3): try to load backup roots slot 1 [ 113.495103][ T3437] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 113.533137][ T8] usb 1-1: USB disconnect, device number 2 [ 113.548951][ T6072] BTRFS warning (device loop3): couldn't read tree root [ 113.574494][ T6072] BTRFS warning (device loop3): try to load backup roots slot 2 [ 113.593013][ T11] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 113.618058][ T6072] BTRFS warning (device loop3): couldn't read tree root [ 113.625178][ T6072] BTRFS warning (device loop3): try to load backup roots slot 3 [ 113.669327][ T6072] BTRFS info (device loop3): enabling ssd optimizations [ 113.680610][ T6072] BTRFS info (device loop3): rebuilding free space tree [ 113.707357][ T6072] BTRFS info (device loop3): checking UUID tree [ 113.842225][ T3458] kworker/u4:9: attempt to access beyond end of device [ 113.842225][ T3458] loop1: rw=1, sector=77944, nr_sectors = 16 limit=40427 [ 114.615112][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.846162][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.882145][ T6125] loop1: detected capacity change from 0 to 2048 [ 114.901933][ T6125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.146880][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.219641][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 115.275334][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.317253][ T8] usb 3-1: Product: syz [ 115.468082][ T8] usb 3-1: Manufacturer: syz [ 115.497138][ T8] usb 3-1: SerialNumber: syz [ 115.808324][ T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 117.075575][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 117.107224][ T6142] block nbd0: not configured, cannot reconfigure [ 117.925120][ T6146] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 117.967402][ T6144] warning: `syz.0.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.949915][ T5816] usb 3-1: USB disconnect, device number 2 [ 122.993355][ T5816] usblp0: removed [ 124.033569][ T6167] loop1: detected capacity change from 0 to 2048 [ 125.026468][ T6167] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.278278][ T6156] loop2: detected capacity change from 0 to 32768 [ 125.302674][ T6156] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.72 (6156) [ 125.359395][ T6156] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.390237][ T6156] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 125.415817][ T6156] BTRFS info (device loop2): turning on sync discard [ 125.422789][ T6156] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 125.447250][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 125.456297][ T6156] BTRFS info (device loop2): use zstd compression, level 3 [ 125.463547][ T6156] BTRFS info (device loop2): turning on async discard [ 125.490825][ T6156] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 125.522301][ T6156] BTRFS info (device loop2): trying to use backup root at mount time [ 125.540828][ T6158] loop3: detected capacity change from 0 to 32768 [ 125.547639][ T6156] BTRFS info (device loop2): enabling auto defrag [ 125.554141][ T6156] BTRFS info (device loop2): using free space tree [ 125.571295][ T6158] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.73 (6158) [ 125.618997][ T6177] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 125.627185][ T6177] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 125.734929][ T3485] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 125.826190][ T6156] BTRFS error (device loop2): failed to load root extent [ 125.833347][ T6156] BTRFS warning (device loop2): try to load backup roots slot 1 [ 125.882225][ T42] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 125.915887][ T6156] BTRFS warning (device loop2): couldn't read tree root [ 125.922906][ T6156] BTRFS warning (device loop2): try to load backup roots slot 2 [ 125.981154][ T42] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 126.011470][ T5764] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5764) [ 126.049078][ T6156] BTRFS warning (device loop2): couldn't read tree root [ 126.079692][ T6156] BTRFS warning (device loop2): try to load backup roots slot 3 [ 127.019619][ T6156] BTRFS error (device loop2): open_ctree failed: -4 [ 127.303682][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.88'. [ 128.258907][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'. [ 128.365437][ T6218] syzkaller0: entered promiscuous mode [ 128.390249][ T6218] syzkaller0: entered allmulticast mode [ 128.801543][ T788] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 129.234479][ T6235] loop3: detected capacity change from 0 to 8192 [ 129.397553][ T6235] loop3: p1 p2 p3 [ 129.535688][ T6235] loop3: partition table partially beyond EOD, truncated [ 129.560099][ T6235] loop3: p1 size 67111168 extends beyond EOD, truncated [ 129.616793][ T6235] loop3: p2 size 8388608 extends beyond EOD, truncated [ 129.655340][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 129.671481][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.676717][ T6235] loop3: p3 start 4294901760 is beyond EOD, truncated [ 129.690670][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 129.702912][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 129.735458][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 129.754371][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.780857][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 129.794269][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 129.807028][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 129.823390][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 129.850540][ T788] usb 1-1: string descriptor 0 read error: -22 [ 129.866163][ T788] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.875310][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.891072][ T6242] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 129.905220][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.918360][ T788] adutux 1-1:168.0: interrupt endpoints not found [ 129.927190][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.959027][ T9] usb 2-1: config 1 has no interface number 0 [ 129.976235][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.979090][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 129.995798][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 130.026966][ T9] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 130.046171][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.102654][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=10.40 [ 130.127564][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.130466][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 130.135601][ T9] usb 2-1: Product: syz [ 130.135618][ T9] usb 2-1: Manufacturer: syz [ 130.135629][ T9] usb 2-1: SerialNumber: syz [ 130.139469][ T788] usb 1-1: USB disconnect, device number 3 [ 130.167201][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 130.188605][ T6232] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.622763][ T9] cdc_ncm 2-1:1.1: bind() failure [ 130.643381][ T9] usb 2-1: USB disconnect, device number 2 [ 130.769450][ T6255] syzkaller0: entered promiscuous mode [ 130.775000][ T6255] syzkaller0: entered allmulticast mode [ 131.015910][ T2133] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.216040][ T2133] usb 3-1: Using ep0 maxpacket: 32 [ 131.231572][ T2133] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.264191][ T2133] usb 3-1: config 1 has no interfaces? [ 131.283321][ T2133] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 131.300097][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.326854][ T2133] usb 3-1: Product: syz [ 131.338481][ T2133] usb 3-1: Manufacturer: syz [ 131.354850][ T2133] usb 3-1: SerialNumber: syz [ 131.362297][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.112'. [ 131.595553][ T788] usb 3-1: USB disconnect, device number 3 [ 131.626207][ T5813] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.834157][ T6279] loop0: detected capacity change from 0 to 2048 [ 132.900821][ T6279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.957987][ T6279] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 132.975647][ T6279] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 132.982831][ T6279] overlayfs: failed to verify upper root origin [ 133.063900][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.162661][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.172149][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.499422][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 133.520199][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.535281][ T5813] usb 2-1: config 2 has an invalid interface number: 76 but max is 0 [ 133.557724][ T5813] usb 2-1: config 2 has no interface number 0 [ 133.563873][ T5813] usb 2-1: config 2 interface 76 has no altsetting 0 [ 133.591376][ T5813] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 133.601601][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.610932][ T5813] usb 2-1: Product: syz [ 133.616570][ T5813] usb 2-1: Manufacturer: syz [ 133.621319][ T5813] usb 2-1: SerialNumber: syz [ 133.673264][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 134.116172][ T5813] go7007 2-1:2.76: Sensoray 2250 found [ 134.121962][ T5813] go7007: probe of 2-1:2.76 failed with error -12 [ 134.132128][ T5813] usb 2-1: USB disconnect, device number 3 [ 134.924378][ T6308] loop3: detected capacity change from 0 to 2048 [ 135.043331][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.060617][ T6309] loop2: detected capacity change from 0 to 8192 [ 135.154032][ T6309] loop2: p1 p2 p3 [ 135.165846][ T6309] loop2: partition table partially beyond EOD, truncated [ 135.186596][ T6309] loop2: p1 size 67111168 extends beyond EOD, truncated [ 135.219281][ T6309] loop2: p2 size 8388608 extends beyond EOD, truncated [ 135.252302][ T6309] loop2: p3 start 4294901760 is beyond EOD, truncated [ 135.325353][ T6308] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 135.341513][ T6308] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 135.348674][ T6308] overlayfs: failed to verify upper root origin [ 136.162730][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.240259][ T6323] xt_hashlimit: size too large, truncated to 1048576 [ 136.453032][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 136.463587][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 137.043602][ T6329] loop3: detected capacity change from 0 to 32768 [ 137.080113][ T6329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.132 (6329) [ 137.200011][ T6329] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.210749][ T6329] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 137.219572][ T6329] BTRFS info (device loop3): force clearing of disk cache [ 137.226791][ T6329] BTRFS info (device loop3): metadata ratio 0 [ 137.232898][ T6329] BTRFS info (device loop3): enabling ssd optimizations [ 137.239975][ T6329] BTRFS info (device loop3): using spread ssd allocation scheme [ 137.247704][ T6329] BTRFS info (device loop3): using free space tree [ 137.345483][ T6329] BTRFS info (device loop3): auto enabling async discard [ 137.363053][ T6329] BTRFS info (device loop3): rebuilding free space tree [ 137.535884][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.676018][ T2133] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 137.727888][ T5846] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.753605][ T5846] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 137.765788][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 137.784364][ T5846] usb 2-1: Product: syz [ 137.794269][ T5846] usb 2-1: Manufacturer: syz [ 137.804386][ T5846] usb 2-1: SerialNumber: syz [ 137.880072][ T2133] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.901962][ T2133] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 137.915824][ T2133] usb 4-1: can't read configurations, error -71 [ 138.047507][ T5846] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.429192][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.856439][ T6370] loop0: detected capacity change from 0 to 8192 [ 140.962458][ T6370] loop0: p1 p2 p3 [ 140.983598][ T6370] loop0: partition table partially beyond EOD, truncated [ 141.013576][ T6370] loop0: p1 size 67111168 extends beyond EOD, truncated [ 141.044381][ T6370] loop0: p2 size 8388608 extends beyond EOD, truncated [ 141.070268][ T6370] loop0: p3 start 4294901760 is beyond EOD, truncated [ 144.926445][ T2133] usb 2-1: USB disconnect, device number 4 [ 144.970035][ T6379] loop0: detected capacity change from 0 to 4096 [ 144.977341][ T2133] usblp0: removed [ 145.005078][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 145.018618][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 145.964040][ T6390] loop3: detected capacity change from 0 to 1024 [ 146.103404][ T28] audit: type=1800 audit(1781403660.879:3): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.145" name="file1" dev="loop0" ino=34 res=0 errno=0 [ 146.171262][ T6390] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.210240][ T6390] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.302296][ T6390] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.353576][ T6390] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.398927][ T6395] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.424678][ T6395] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.480727][ T6400] hfsplus: request for non-existent node 33423360 in B*Tree [ 146.691769][ T6400] hfsplus: request for non-existent node 33423360 in B*Tree [ 151.493099][ T6422] loop1: detected capacity change from 0 to 512 [ 152.664578][ T6433] loop2: detected capacity change from 0 to 1024 [ 152.704252][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 152.756359][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.025748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 155.175404][ T6437] loop3: detected capacity change from 0 to 512 [ 155.184551][ T6439] loop0: detected capacity change from 0 to 16 [ 155.196590][ T6439] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 155.309314][ T6435] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.390902][ T6439] erofs: DAX unsupported by block device. Turning off DAX. [ 155.556118][ T6435] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.585877][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.593241][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.713401][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.746544][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 155.776008][ T6437] EXT4-fs: error -4 creating inode table initialization thread [ 155.826779][ T6437] EXT4-fs (loop3): mount failed [ 155.864690][ T6440] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.072861][ T6440] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.437032][ T6442] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.475953][ T6442] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.507859][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.523999][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.554956][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.565681][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.582355][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.592432][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.628635][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.645830][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.665893][ T5846] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.687529][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.694984][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.710878][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.721290][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.735905][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.743764][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.766669][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.774021][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.795062][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 156.812750][ T6433] hfsplus: request for non-existent node 33423360 in B*Tree [ 157.030325][ T5846] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.069195][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.117426][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.232716][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.042758][ T5846] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.180799][ T5846] usb 2-1: string descriptor 0 read error: -71 [ 162.187594][ T5846] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.199460][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.219415][ T5846] usb 2-1: can't set config #1, error -71 [ 162.227896][ T5846] usb 2-1: USB disconnect, device number 5 [ 162.271083][ T6473] Zero length message leads to an empty skb [ 162.399100][ T6475] loop0: detected capacity change from 0 to 2048 [ 162.453924][ T6477] loop2: detected capacity change from 0 to 512 [ 162.457201][ T6475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.636661][ T6475] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 162.652796][ T6475] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 162.659994][ T6475] overlayfs: failed to verify upper root origin [ 162.675072][ T6475] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 162.733539][ T6477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 162.766024][ T6477] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.953607][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.544656][ T6494] loop0: detected capacity change from 0 to 1024 [ 163.642350][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.654137][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.665807][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.673153][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.760017][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.775913][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 164.554719][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 164.563763][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 164.574259][ T6497] hfsplus: request for non-existent node 33423360 in B*Tree [ 164.585846][ T6497] hfsplus: request for non-existent node 33423360 in B*Tree [ 164.717545][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 164.724901][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 165.057337][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 165.070793][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 165.083973][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.185478][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.224036][ T6497] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.254148][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 166.265805][ T6497] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.321838][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.333948][ T6505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.191'. [ 166.345871][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.391708][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.417251][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.436630][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.444161][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.465396][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.472891][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.503922][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.512212][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.524610][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.533119][ T6494] hfsplus: request for non-existent node 33423360 in B*Tree [ 166.645885][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.847588][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.858821][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 166.934664][ T6520] loop0: detected capacity change from 0 to 2048 [ 166.958316][ T6520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.255822][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.275576][ T8] usb 4-1: config 0 descriptor?? [ 167.532792][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 167.556233][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 167.578794][ T8] usb 4-1: USB disconnect, device number 4 [ 167.846279][ T6533] netlink: 56 bytes leftover after parsing attributes in process `syz.1.200'. [ 168.071081][ T6537] loop1: detected capacity change from 0 to 2048 [ 168.112605][ T6537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.909372][ T6537] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 168.925659][ T6537] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 168.932795][ T6537] overlayfs: failed to verify upper root origin [ 168.964073][ T6537] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 169.065713][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.413718][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.558166][ T6550] [ 169.560590][ T6550] ============================= [ 169.565447][ T6550] WARNING: suspicious RCU usage [ 169.570778][ T6550] syzkaller #0 Not tainted [ 169.575213][ T6550] ----------------------------- [ 169.580197][ T6550] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 169.588681][ T6550] [ 169.588681][ T6550] other info that might help us debug this: [ 169.588681][ T6550] [ 169.599024][ T6550] [ 169.599024][ T6550] rcu_scheduler_active = 2, debug_locks = 1 [ 169.607184][ T6550] 1 lock held by syz.2.207/6550: [ 169.612140][ T6550] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 169.621111][ T6550] [ 169.621111][ T6550] stack backtrace: [ 169.627179][ T6550] CPU: 1 PID: 6550 Comm: syz.2.207 Not tainted syzkaller #0 [ 169.634484][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.644571][ T6550] Call Trace: [ 169.647875][ T6550] [ 169.650822][ T6550] dump_stack_lvl+0x18c/0x250 [ 169.655530][ T6550] ? show_regs_print_info+0x20/0x20 [ 169.660751][ T6550] ? load_image+0x420/0x420 [ 169.665288][ T6550] lockdep_rcu_suspicious+0x1e1/0x300 [ 169.670689][ T6550] ieee80211_check_concurrent_iface+0x475/0x950 [ 169.676980][ T6550] ieee80211_open+0xc1/0x200 [ 169.681605][ T6550] __dev_open+0x2cb/0x430 [ 169.685964][ T6550] ? dev_open+0x190/0x190 [ 169.690330][ T6550] __dev_change_flags+0x211/0x6a0 [ 169.695488][ T6550] ? dev_get_flags+0x1c0/0x1c0 [ 169.700289][ T6550] ? mutex_lock_nested+0x20/0x20 [ 169.705277][ T6550] dev_change_flags+0x88/0x1a0 [ 169.710082][ T6550] dev_ioctl+0x7b4/0x1140 [ 169.714462][ T6550] sock_do_ioctl+0x239/0x310 [ 169.719081][ T6550] ? sock_show_fdinfo+0xb0/0xb0 [ 169.723972][ T6550] sock_ioctl+0x5ba/0x7e0 [ 169.728328][ T6550] ? sock_poll+0x3e0/0x3e0 [ 169.732811][ T6550] ? bpf_lsm_file_ioctl+0x9/0x10 [ 169.737774][ T6550] ? security_file_ioctl+0x80/0xa0 [ 169.742909][ T6550] ? sock_poll+0x3e0/0x3e0 [ 169.747353][ T6550] __se_sys_ioctl+0xfd/0x170 [ 169.751990][ T6550] do_syscall_64+0x55/0xb0 [ 169.756443][ T6550] ? clear_bhb_loop+0x40/0x90 [ 169.761147][ T6550] ? clear_bhb_loop+0x40/0x90 [ 169.765843][ T6550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.771765][ T6550] RIP: 0033:0x7f87c1b9ce59 [ 169.776217][ T6550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.795852][ T6550] RSP: 002b:00007f87c2b30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.804305][ T6550] RAX: ffffffffffffffda RBX: 00007f87c1e15fa0 RCX: 00007f87c1b9ce59 [ 169.812301][ T6550] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 169.820386][ T6550] RBP: 00007f87c1c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 169.828376][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.836373][ T6550] R13: 00007f87c1e16038 R14: 00007f87c1e15fa0 R15: 00007ffff61ec1a8 [ 169.844388][ T6550] [ 169.956717][ T6550] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 169.964196][ T6550] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode