last executing test programs: 1m52.151600822s ago: executing program 2 (id=78): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 1m39.617590682s ago: executing program 2 (id=109): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010026bd7000ffffffff0a14204003000006fffffff014000100ff020000000000000000000000000001140002"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000040) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m37.213438719s ago: executing program 2 (id=113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4058043) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000180)=0x8) 1m36.0215345s ago: executing program 2 (id=115): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 1m34.727423663s ago: executing program 2 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01f200100000000000000800030000000000", @ANYBLOB="10005a800c00038005000400ec000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 1m21.031543731s ago: executing program 2 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capt'], 0x86) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 1m12.431748265s ago: executing program 3 (id=134): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.829531003s ago: executing program 3 (id=140): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x1) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x5, 0xff, 0x6}, 0x10) 1m7.252011117s ago: executing program 3 (id=142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) 1m2.580359581s ago: executing program 32 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capt'], 0x86) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 1m2.239872295s ago: executing program 3 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$pagemap(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x10, 0x803, 0x0) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, 0x0, 0x80) close(r5) 58.341060086s ago: executing program 3 (id=149): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 53.958683952s ago: executing program 3 (id=155): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 38.388265814s ago: executing program 33 (id=155): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 37.492277312s ago: executing program 0 (id=173): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) 36.857268342s ago: executing program 1 (id=174): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 36.594480981s ago: executing program 0 (id=175): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x3e, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x1], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.777645861s ago: executing program 0 (id=176): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 29.997788165s ago: executing program 1 (id=178): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESHEX], 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x5) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000340)}, 0x850) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) 25.073165023s ago: executing program 0 (id=180): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {}, 0xfffffffc, 0x80000001}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = gettid() tkill(r3, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@noinit_itable}, {@quota}, {@debug}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4f1, &(0x7f0000000b00)="$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") bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) 20.894818989s ago: executing program 0 (id=182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x38, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}}, 0x0) 19.191503029s ago: executing program 4 (id=185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000160033060000000000000080fe8000000000000000000000000000aa7f000001000000000000000000000000000003ff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000006000000000608000000000000000000000000000000000000000000000000000500000000000000ffffffbfffffffff00000000000000000500000004000001020000000000000006000000020000000a00041819000000140000000c0015005c07301b90c9a99e523500010000008670a7798c0ae339b1500bae6ba34649d5bbeadf2cdfa0d892"], 0xfc}}, 0x0) 16.735554623s ago: executing program 4 (id=186): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket(0x23, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 16.164833583s ago: executing program 0 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fchdir(0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 15.790308177s ago: executing program 1 (id=188): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000280)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) syz_open_dev$sg(0x0, 0x6f5e, 0x2) 9.448427217s ago: executing program 4 (id=189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r9) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r5, 0x0, 0x4) 9.06000304s ago: executing program 1 (id=190): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {}, 0xfffffffc, 0x80000001}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() tkill(r4, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@noinit_itable}, {@quota}, {@debug}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4f1, &(0x7f0000000b00)="$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") bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) 5.359425941s ago: executing program 4 (id=191): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) signalfd(r0, &(0x7f00000000c0)={[0x2]}, 0x8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x1}) 2.123823694s ago: executing program 4 (id=192): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002240)=ANY=[], 0xff70) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 1.98132877s ago: executing program 1 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) 1.277283039s ago: executing program 4 (id=194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000160033060000000000000080fe8000000000000000000000000000aa7f000001000000000000000000000000000003ff000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000006000000000608000000000000000000000000000000000000000000000000000500000000000000ffffffbfffffffff00000000000000000500000004000001020000000000000006000000020000000a00041819000000140000000c0015005c07301b90c9a99e523500010000008670a7798c0ae339b1500bae6ba34649d5bb"], 0xfc}}, 0x0) 288.928583ms ago: executing program 34 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fchdir(0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 0s ago: executing program 1 (id=196): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) fanotify_init(0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) mmap(&(0x7f00009c2000/0x4000)=nil, 0x4000, 0x2000001, 0x42832, r2, 0xcb368000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 182.628632][ T5754] cgroup: Unknown subsys name 'net' [ 182.762860][ T5754] cgroup: Unknown subsys name 'cpuset' [ 182.778118][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 189.013624][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 194.912834][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.928021][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.943351][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.962528][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.982714][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.004489][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.042451][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.059452][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.074354][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.102455][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.154162][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.163692][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.173050][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.175997][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.211123][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.220551][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.233474][ T5074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.242936][ T5074] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.259215][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.286210][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.295961][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.310797][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.323312][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.349201][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.365585][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.746886][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 196.831103][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 197.131540][ T48] Bluetooth: hci0: command tx timeout [ 197.205559][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 197.216052][ T48] Bluetooth: hci1: command tx timeout [ 197.291497][ T48] Bluetooth: hci4: command tx timeout [ 197.311788][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 197.374170][ T48] Bluetooth: hci2: command tx timeout [ 197.454146][ T48] Bluetooth: hci3: command tx timeout [ 197.764645][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 198.058503][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.085469][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.102126][ T5772] bridge_slave_0: entered allmulticast mode [ 198.125649][ T5772] bridge_slave_0: entered promiscuous mode [ 198.271591][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.305148][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.323230][ T5772] bridge_slave_1: entered allmulticast mode [ 198.351916][ T5772] bridge_slave_1: entered promiscuous mode [ 198.506556][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.515941][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.523963][ T5776] bridge_slave_0: entered allmulticast mode [ 198.533726][ T5776] bridge_slave_0: entered promiscuous mode [ 198.655392][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.663336][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.670967][ T5776] bridge_slave_1: entered allmulticast mode [ 198.682970][ T5776] bridge_slave_1: entered promiscuous mode [ 198.788864][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.800175][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.810580][ T5782] bridge_slave_0: entered allmulticast mode [ 198.819422][ T5782] bridge_slave_0: entered promiscuous mode [ 198.841129][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.937188][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.945225][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.953349][ T5782] bridge_slave_1: entered allmulticast mode [ 198.962212][ T5782] bridge_slave_1: entered promiscuous mode [ 198.983316][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.993413][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.003165][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.010719][ T5780] bridge_slave_0: entered allmulticast mode [ 199.019873][ T5780] bridge_slave_0: entered promiscuous mode [ 199.058903][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.066894][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.074824][ T5781] bridge_slave_0: entered allmulticast mode [ 199.084001][ T5781] bridge_slave_0: entered promiscuous mode [ 199.149551][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.157434][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.165116][ T5780] bridge_slave_1: entered allmulticast mode [ 199.174115][ T5780] bridge_slave_1: entered promiscuous mode [ 199.194307][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.204076][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.211847][ T48] Bluetooth: hci0: command tx timeout [ 199.212888][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.225352][ T5781] bridge_slave_1: entered allmulticast mode [ 199.234865][ T5781] bridge_slave_1: entered promiscuous mode [ 199.291644][ T48] Bluetooth: hci1: command tx timeout [ 199.341087][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.371546][ T48] Bluetooth: hci4: command tx timeout [ 199.394781][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.413066][ T5772] team0: Port device team_slave_0 added [ 199.452441][ T48] Bluetooth: hci2: command tx timeout [ 199.514501][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.530945][ T5772] team0: Port device team_slave_1 added [ 199.537418][ T48] Bluetooth: hci3: command tx timeout [ 199.554067][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.601182][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.673509][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.715922][ T5776] team0: Port device team_slave_0 added [ 199.730806][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.878015][ T5776] team0: Port device team_slave_1 added [ 199.919810][ T5782] team0: Port device team_slave_0 added [ 199.928246][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.935604][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.962437][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.982123][ T5780] team0: Port device team_slave_0 added [ 200.023201][ T5781] team0: Port device team_slave_0 added [ 200.036629][ T5782] team0: Port device team_slave_1 added [ 200.045209][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.053046][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.079482][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.098933][ T5780] team0: Port device team_slave_1 added [ 200.162022][ T5781] team0: Port device team_slave_1 added [ 200.289686][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.297391][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.323871][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.365738][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.373085][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.399448][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.416678][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.424074][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.456447][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.470475][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.478249][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.505196][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.519597][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.527191][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.553609][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.637054][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.644417][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.670962][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.704217][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.711641][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.738278][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.799331][ T5772] hsr_slave_0: entered promiscuous mode [ 200.809280][ T5772] hsr_slave_1: entered promiscuous mode [ 200.846471][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.853809][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.880254][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.119639][ T5782] hsr_slave_0: entered promiscuous mode [ 201.128910][ T5782] hsr_slave_1: entered promiscuous mode [ 201.138038][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 201.144043][ T5782] Cannot create hsr debugfs directory [ 201.197797][ T5776] hsr_slave_0: entered promiscuous mode [ 201.207919][ T5776] hsr_slave_1: entered promiscuous mode [ 201.217056][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 201.223330][ T5776] Cannot create hsr debugfs directory [ 201.242506][ T5780] hsr_slave_0: entered promiscuous mode [ 201.251168][ T5780] hsr_slave_1: entered promiscuous mode [ 201.259176][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 201.265185][ T5780] Cannot create hsr debugfs directory [ 201.301830][ T48] Bluetooth: hci0: command tx timeout [ 201.371493][ T48] Bluetooth: hci1: command tx timeout [ 201.442047][ T5781] hsr_slave_0: entered promiscuous mode [ 201.451089][ T5781] hsr_slave_1: entered promiscuous mode [ 201.457460][ T48] Bluetooth: hci4: command tx timeout [ 201.466095][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 201.472162][ T5781] Cannot create hsr debugfs directory [ 201.531579][ T48] Bluetooth: hci2: command tx timeout [ 201.611558][ T48] Bluetooth: hci3: command tx timeout [ 202.805797][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.834149][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.856046][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.889581][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.006334][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.053092][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.082818][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.116512][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.318781][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.372828][ T48] Bluetooth: hci0: command tx timeout [ 203.380639][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.433083][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.453255][ T48] Bluetooth: hci1: command tx timeout [ 203.463792][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.531885][ T48] Bluetooth: hci4: command tx timeout [ 203.616643][ T48] Bluetooth: hci2: command tx timeout [ 203.692103][ T48] Bluetooth: hci3: command tx timeout [ 203.718125][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.752693][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.814931][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.883017][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.110163][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.117811][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.192367][ T5781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.216794][ T5781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.266888][ T5781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.300608][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.324585][ T5781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.579971][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.683146][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.690530][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.757246][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.764826][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.810681][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.860696][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.040730][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.058425][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.124471][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.132300][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.202708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.210222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.318314][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.325851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.349999][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.357514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.495089][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.791198][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.868764][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.016599][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.024271][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.080466][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.184564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.192257][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.230557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.238211][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.407201][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.415501][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.659744][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.675024][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.720049][ T5772] veth0_vlan: entered promiscuous mode [ 207.897153][ T5772] veth1_vlan: entered promiscuous mode [ 207.968711][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.517919][ T5772] veth0_macvtap: entered promiscuous mode [ 208.540582][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.606583][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.619011][ T5780] veth0_vlan: entered promiscuous mode [ 208.634087][ T5772] veth1_macvtap: entered promiscuous mode [ 208.784094][ T5782] veth0_vlan: entered promiscuous mode [ 208.824804][ T5780] veth1_vlan: entered promiscuous mode [ 208.951907][ T5782] veth1_vlan: entered promiscuous mode [ 208.996731][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.151076][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.362038][ T131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.372296][ T1139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.390361][ T5780] veth0_macvtap: entered promiscuous mode [ 209.468658][ T1139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.480395][ T1139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.575334][ T5780] veth1_macvtap: entered promiscuous mode [ 209.598980][ T5782] veth0_macvtap: entered promiscuous mode [ 209.618428][ T5776] veth0_vlan: entered promiscuous mode [ 209.729177][ T5782] veth1_macvtap: entered promiscuous mode [ 209.769905][ T5776] veth1_vlan: entered promiscuous mode [ 209.948591][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.118529][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.178743][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.199277][ T5781] veth0_vlan: entered promiscuous mode [ 210.286147][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.304156][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.327847][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.363022][ T5776] veth0_macvtap: entered promiscuous mode [ 210.405575][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.442245][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.477466][ T5781] veth1_vlan: entered promiscuous mode [ 210.530208][ T5776] veth1_macvtap: entered promiscuous mode [ 210.567108][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.584114][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.641092][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.690870][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.913949][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.005841][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.166291][ T5781] veth0_macvtap: entered promiscuous mode [ 211.238016][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.281758][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.311653][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.344474][ T5781] veth1_macvtap: entered promiscuous mode [ 211.370670][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.586208][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.716058][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.867835][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.891762][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.900820][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.973127][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.751524][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.759592][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.052861][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.060929][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.708861][ T5772] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 218.155807][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.229171][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.540690][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.600412][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.046484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.081938][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.288410][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.296700][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.607920][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.657498][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.920337][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.940975][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.158039][ T5976] ======================================================= [ 221.158039][ T5976] WARNING: The mand mount option has been deprecated and [ 221.158039][ T5976] and is ignored by this kernel. Remove the mand [ 221.158039][ T5976] option from the mount to silence this warning. [ 221.158039][ T5976] ======================================================= [ 221.311145][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.361607][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.610461][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.640498][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.054192][ T5992] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 223.407907][ T5997] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 223.437424][ T5997] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 227.363667][ T6037] loop1: detected capacity change from 0 to 128 [ 228.315095][ T6054] capability: warning: `syz.3.32' uses 32-bit capabilities (legacy support in use) [ 232.272570][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 232.311563][ T6086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.41'. [ 232.724835][ T6086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.315799][ T6081] loop2: detected capacity change from 0 to 8192 [ 235.321572][ T6115] overlayfs: missing 'lowerdir' [ 236.768924][ T6126] loop2: detected capacity change from 0 to 7 [ 236.847696][ T6126] Dev loop2: unable to read RDB block 7 [ 236.882265][ T6126] loop2: unable to read partition table [ 236.915881][ T6126] loop2: partition table beyond EOD, truncated [ 236.956363][ T6126] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.996180][ T6174] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 244.918815][ T6201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.321942][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.83'. [ 246.067384][ T6213] program syz.0.87 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.042961][ T6231] loop4: detected capacity change from 0 to 128 [ 250.132938][ T6231] FAT-fs (loop4): bogus sectors per cluster 5 [ 250.160463][ T6231] FAT-fs (loop4): Can't find a valid FAT filesystem [ 250.632301][ T6235] tipc: Started in network mode [ 250.637568][ T6235] tipc: Node identity ea1f380b637b, cluster identity 4711 [ 250.720534][ T6235] tipc: Enabled bearer , priority 0 [ 250.865749][ T6233] tipc: Disabling bearer [ 251.338001][ T6241] process 'syz.4.96' launched '/dev/fd/6' with NULL argv: empty string added [ 251.521516][ T5830] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 251.681712][ T5830] usb 2-1: device descriptor read/64, error -71 [ 251.929877][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 252.131554][ T5830] usb 2-1: device descriptor read/64, error -71 [ 252.256713][ T5830] usb usb2-port1: attempt power cycle [ 252.642254][ T5830] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 252.714943][ T5830] usb 2-1: device descriptor read/8, error -71 [ 252.991660][ T5830] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 253.052234][ T5830] usb 2-1: device descriptor read/8, error -71 [ 253.192659][ T5830] usb usb2-port1: unable to enumerate USB device [ 253.629570][ T6266] netlink: 56 bytes leftover after parsing attributes in process `syz.3.105'. [ 256.683544][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.109'. [ 258.379499][ T6289] loop0: detected capacity change from 0 to 32768 [ 258.389407][ T6289] btrfs: Deprecated parameter 'usebackuproot' [ 258.395898][ T6289] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 258.438011][ T6289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.112 (6289) [ 258.483088][ T6289] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.501497][ T6289] BTRFS info (device loop0): using crc32c checksum algorithm [ 258.509260][ T6289] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 258.688439][ T131] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 258.742593][ T6289] BTRFS warning (device loop0): couldn't read tree root [ 258.749999][ T6289] BTRFS warning (device loop0): try to load backup roots slot 1 [ 258.767597][ T151] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 258.851140][ T6289] BTRFS warning (device loop0): couldn't read tree root [ 258.864613][ T6289] BTRFS warning (device loop0): try to load backup roots slot 2 [ 258.893125][ T1148] BTRFS warning (device loop0): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 258.964059][ T6289] BTRFS warning (device loop0): couldn't read tree root [ 258.971820][ T6289] BTRFS warning (device loop0): try to load backup roots slot 3 [ 259.038479][ T6289] BTRFS info (device loop0): rebuilding free space tree [ 259.090813][ T6289] BTRFS info (device loop0): disabling free space tree [ 259.098310][ T6289] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 259.108339][ T6289] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 259.153395][ T6289] BTRFS info (device loop0): checking UUID tree [ 259.172759][ T6289] BTRFS info (device loop0): enabling ssd optimizations [ 259.179953][ T6289] BTRFS info (device loop0): turning off barriers [ 259.192010][ T6289] BTRFS info (device loop0): turning on sync discard [ 259.198931][ T6289] BTRFS info (device loop0): enabling disk space caching [ 259.208380][ T6289] BTRFS info (device loop0): force clearing of disk cache [ 259.215990][ T6289] BTRFS info (device loop0): enabling auto defrag [ 259.222720][ T6289] BTRFS info (device loop0): trying to use backup root at mount time [ 259.231004][ T6289] BTRFS info (device loop0): max_inline set to 0 [ 260.916807][ T6320] No control pipe specified [ 264.331701][ T6328] 9pnet_virtio: no channels available for device syz [ 264.933298][ T6328] syz.2.118 (6328) used greatest stack depth: 1696 bytes left [ 265.035220][ T5772] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.550312][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.560188][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.792086][ T5830] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 265.981457][ T5830] usb 4-1: device descriptor read/64, error -71 [ 267.021485][ T5830] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.237333][ T5830] usb 4-1: device descriptor read/64, error -71 [ 267.423170][ T5830] usb usb4-port1: attempt power cycle [ 271.341553][ T5830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.302083][ T5830] usb 4-1: device descriptor read/8, error -71 [ 285.631556][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 285.786281][ T5830] usb 5-1: device descriptor read/64, error -71 [ 286.081521][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 286.308526][ T5830] usb 5-1: device descriptor read/64, error -71 [ 286.442849][ T5830] usb usb5-port1: attempt power cycle [ 286.882440][ T5830] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 286.954497][ T5830] usb 5-1: device descriptor read/8, error -71 [ 287.813597][ T6400] loop0: detected capacity change from 0 to 32768 [ 287.823664][ T6400] btrfs: Deprecated parameter 'usebackuproot' [ 287.829963][ T6400] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 287.843122][ T6400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.141 (6400) [ 287.874937][ T6400] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.885448][ T6400] BTRFS info (device loop0): using crc32c checksum algorithm [ 287.893303][ T6400] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 288.101862][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 288.160848][ T6066] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 288.195538][ T5830] usb 5-1: device descriptor read/8, error -71 [ 288.259491][ T6400] BTRFS warning (device loop0): couldn't read tree root [ 288.277313][ T6400] BTRFS warning (device loop0): try to load backup roots slot 1 [ 288.293209][ T6066] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 288.307323][ T6400] BTRFS warning (device loop0): couldn't read tree root [ 288.314924][ T6400] BTRFS warning (device loop0): try to load backup roots slot 2 [ 288.324317][ T5830] usb usb5-port1: unable to enumerate USB device [ 288.331897][ T6066] BTRFS warning (device loop0): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 288.347220][ T6400] BTRFS warning (device loop0): couldn't read tree root [ 288.354654][ T6400] BTRFS warning (device loop0): try to load backup roots slot 3 [ 288.422542][ T6400] BTRFS info (device loop0): rebuilding free space tree [ 288.465702][ T6400] BTRFS info (device loop0): disabling free space tree [ 288.481687][ T6400] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 288.494392][ T6400] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 288.566107][ T6400] BTRFS info (device loop0): checking UUID tree [ 289.352247][ T6400] BTRFS info (device loop0): enabling ssd optimizations [ 289.359644][ T6400] BTRFS info (device loop0): turning off barriers [ 289.366435][ T6400] BTRFS info (device loop0): turning on sync discard [ 289.373668][ T6400] BTRFS info (device loop0): enabling disk space caching [ 289.380895][ T6400] BTRFS info (device loop0): force clearing of disk cache [ 289.388347][ T6400] BTRFS info (device loop0): enabling auto defrag [ 289.399761][ T6400] BTRFS info (device loop0): trying to use backup root at mount time [ 289.408209][ T6400] BTRFS info (device loop0): max_inline set to 0 [ 290.615884][ T6426] No control pipe specified [ 294.722878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 294.823542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 294.926086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 295.132408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 295.233226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 295.335618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 295.745914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 295.975502][ T5772] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.671554][ T795] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 296.891544][ T795] usb 4-1: Using ep0 maxpacket: 8 [ 296.917920][ T795] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 296.978221][ T795] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.075345][ T795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.146444][ T795] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 297.229027][ T795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 297.303917][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.312770][ T795] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.333082][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.352675][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.363318][ T795] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.374577][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.412100][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.426961][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.472113][ T795] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 298.120347][ T6450] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 298.143977][ T6449] tipc: Started in network mode [ 298.161765][ T6449] tipc: Node identity 96695818b148, cluster identity 4711 [ 298.170353][ T6449] tipc: Enabled bearer , priority 0 [ 298.245004][ T6446] tipc: Disabling bearer [ 299.541586][ T48] Bluetooth: hci5: command tx timeout [ 299.954777][ T6460] 9pnet_virtio: no channels available for device syz [ 300.189664][ T5830] usb 4-1: USB disconnect, device number 6 [ 300.410202][ T6454] syzkaller0: entered promiscuous mode [ 300.446799][ T6454] syzkaller0: entered allmulticast mode [ 301.822064][ T48] Bluetooth: hci5: command tx timeout [ 303.851557][ T48] Bluetooth: hci5: command tx timeout [ 305.157079][ T6471] loop1: detected capacity change from 0 to 32768 [ 305.170471][ T6471] btrfs: Deprecated parameter 'usebackuproot' [ 305.177002][ T6471] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 305.292607][ T6471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.157 (6471) [ 305.685320][ T6444] chnl_net:caif_netlink_parms(): no params data found [ 306.502613][ T48] Bluetooth: hci5: command tx timeout [ 306.521528][ T6471] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 306.532047][ T6471] BTRFS info (device loop1): using crc32c checksum algorithm [ 306.539747][ T6471] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 307.743648][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 307.744733][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 307.754846][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 307.765326][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 307.775884][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 307.785843][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 307.795673][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 307.805459][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 307.815753][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 307.829726][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 307.840245][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 307.850916][ T6471] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 307.861536][ T6471] BTRFS error (device loop1): open_ctree failed: -12 [ 310.704055][ T76] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.989405][ T76] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.391992][ T76] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.786413][ T76] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.958643][ T6515] syzkaller0: entered promiscuous mode [ 313.990179][ T6515] syzkaller0: entered allmulticast mode [ 315.003649][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 315.346258][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.357899][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.368210][ T6444] bridge_slave_0: entered allmulticast mode [ 315.381078][ T6444] bridge_slave_0: entered promiscuous mode [ 315.434322][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.473194][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.492325][ T6444] bridge_slave_1: entered allmulticast mode [ 315.535828][ T6444] bridge_slave_1: entered promiscuous mode [ 316.318615][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.683444][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.400234][ T6444] team0: Port device team_slave_0 added [ 317.674060][ T6444] team0: Port device team_slave_1 added [ 318.130667][ T76] bridge_slave_1: left allmulticast mode [ 318.138566][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.212826][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.220678][ T76] bridge_slave_1: left promiscuous mode [ 318.232385][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.245779][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.262136][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 318.279368][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.305896][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.339935][ T76] bridge_slave_0: left allmulticast mode [ 318.364468][ T76] bridge_slave_0: left promiscuous mode [ 318.384788][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.560031][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 318.611683][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.656976][ T5830] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.720675][ T5830] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.778729][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.815897][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 318.831811][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 318.838045][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 318.846682][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 320.639429][ T48] Bluetooth: hci4: command tx timeout [ 320.676575][ T5830] usb 2-1: config 0 descriptor?? [ 322.682612][ T5779] Bluetooth: hci4: command tx timeout [ 324.072293][ T5830] usb 2-1: can't set config #0, error -71 [ 324.161724][ T5830] usb 2-1: USB disconnect, device number 6 [ 324.736828][ T5779] Bluetooth: hci4: command tx timeout [ 325.720410][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.797594][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.902213][ T76] bond0 (unregistering): Released all slaves [ 326.023986][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.032177][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.180007][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.811908][ T5779] Bluetooth: hci4: command tx timeout [ 326.996767][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.036230][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.058290][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.093502][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.352569][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.985440][ T6565] syzkaller0: entered promiscuous mode [ 328.991156][ T6565] syzkaller0: entered allmulticast mode [ 330.417158][ T6577] loop0: detected capacity change from 0 to 512 [ 330.597555][ T6577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.606826][ T6577] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.809900][ T6577] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 330.921350][ T6577] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.180: Allocating blocks 41-42 which overlap fs metadata [ 330.935806][ T6577] loop0: lost filesystem error report for type 5 error -117 [ 330.941313][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 330.955477][ C1] EXT4-fs (loop0): initial error at time 1776190169: ext4_mb_mark_diskspace_used:4222 [ 330.965460][ C1] EXT4-fs (loop0): last error at time 1776190169: ext4_mb_mark_diskspace_used:4222 [ 331.041667][ T6577] Quota error (device loop0): write_blk: dquota write failed [ 331.049734][ T6577] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 331.060984][ T6577] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.180: Allocating blocks 41-42 which overlap fs metadata [ 331.083659][ T6577] loop0: lost filesystem error report for type 5 error -117 [ 331.132003][ T6577] Quota error (device loop0): write_blk: dquota write failed [ 331.147690][ T6577] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 331.158178][ T6577] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.180: Failed to acquire dquot type 1 [ 331.169621][ T6577] loop0: lost filesystem error report for type 5 error -117 [ 331.202034][ T6577] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 331.217603][ T6577] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.180: corrupted inode contents [ 331.229901][ T6577] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 331.348050][ T6577] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #12: comm syz.0.180: mark_inode_dirty error [ 331.369274][ T6577] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 331.380291][ T6577] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.180: corrupted inode contents [ 331.404307][ T6577] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 331.434077][ T6577] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.180: mark_inode_dirty error [ 331.455355][ T6577] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 331.471364][ T6577] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.180: corrupted inode contents [ 331.501441][ T6577] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 331.559899][ T6577] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 331.578606][ T6577] loop0: lost filesystem error report for type 5 error -117 [ 331.618847][ T6577] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.180: corrupted inode contents [ 331.638870][ T6577] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 331.678305][ T6577] EXT4-fs error (device loop0): ext4_truncate:4604: inode #12: comm syz.0.180: mark_inode_dirty error [ 331.707354][ T6577] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 331.743848][ T6577] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 331.763057][ T6577] loop0: lost filesystem error report for type 5 error -117 [ 331.808330][ T6577] EXT4-fs (loop0): 1 truncate cleaned up [ 331.836120][ T6577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.412083][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.438771][ T6444] hsr_slave_0: entered promiscuous mode [ 333.487031][ T6444] hsr_slave_1: entered promiscuous mode [ 333.514765][ T6444] debugfs: 'hsr0' already exists in 'hsr' [ 333.534329][ T6444] Cannot create hsr debugfs directory [ 334.046198][ T76] hsr_slave_0: left promiscuous mode [ 334.064416][ T76] hsr_slave_1: left promiscuous mode [ 334.073901][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.112905][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.190528][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.242237][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.432050][ T76] veth1_macvtap: left promiscuous mode [ 334.437979][ T76] veth0_macvtap: left promiscuous mode [ 334.501862][ T76] veth1_vlan: left promiscuous mode [ 334.507479][ T76] veth0_vlan: left promiscuous mode [ 335.424627][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 336.372241][ T76] team0 (unregistering): Port device team_slave_1 removed [ 336.543961][ T76] team0 (unregistering): Port device team_slave_0 removed [ 342.131635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 342.234182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 342.343197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 346.427082][ T6621] loop1: detected capacity change from 0 to 512 [ 346.585692][ T6621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.594686][ T6621] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.649988][ T6621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 346.697297][ T6621] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.190: Allocating blocks 41-42 which overlap fs metadata [ 346.711524][ T6621] loop1: lost filesystem error report for type 5 error -117 [ 346.713285][ T6621] Quota error (device loop1): write_blk: dquota write failed [ 346.728477][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 346.728571][ C1] EXT4-fs (loop1): initial error at time 1776190185: ext4_mb_mark_diskspace_used:4222 [ 346.728705][ C1] EXT4-fs (loop1): last error at time 1776190185: ext4_mb_mark_diskspace_used:4222 [ 346.767446][ T6621] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 346.777275][ T6621] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.190: Allocating blocks 41-42 which overlap fs metadata [ 346.791472][ T6621] loop1: lost filesystem error report for type 5 error -117 [ 346.842461][ T6621] Quota error (device loop1): write_blk: dquota write failed [ 346.860196][ T6621] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 346.871103][ T6621] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.190: Failed to acquire dquot type 1 [ 346.882717][ T6621] loop1: lost filesystem error report for type 5 error -117 [ 346.896676][ T6621] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 346.911955][ T6621] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #12: comm syz.1.190: corrupted inode contents [ 346.923907][ T6621] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 346.964891][ T6621] EXT4-fs error (device loop1): ext4_dirty_inode:6497: inode #12: comm syz.1.190: mark_inode_dirty error [ 346.987098][ T6621] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 346.988436][ T6621] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #12: comm syz.1.190: corrupted inode contents [ 347.010580][ T6621] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.021579][ T6621] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.190: mark_inode_dirty error [ 347.050961][ T6621] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.087065][ T6621] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #12: comm syz.1.190: corrupted inode contents [ 347.109059][ T6621] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.110930][ T6621] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 347.130580][ T6621] loop1: lost filesystem error report for type 5 error -117 [ 347.134407][ T6621] EXT4-fs error (device loop1): ext4_do_update_inode:5604: inode #12: comm syz.1.190: corrupted inode contents [ 347.168089][ T6621] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.177773][ T6621] EXT4-fs error (device loop1): ext4_truncate:4604: inode #12: comm syz.1.190: mark_inode_dirty error [ 347.198630][ T6621] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 347.200229][ T6621] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 347.218966][ T6621] loop1: lost filesystem error report for type 5 error -117 [ 347.226083][ T6621] EXT4-fs (loop1): 1 truncate cleaned up [ 347.241935][ T6621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.530563][ T6614] syzkaller0: entered promiscuous mode [ 347.581743][ T6614] syzkaller0: entered allmulticast mode [ 349.143562][ T6546] chnl_net:caif_netlink_parms(): no params data found [ 352.338648][ T6444] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.431656][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.772823][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 354.783009][ T5074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.812978][ T5074] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.843241][ T5074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.896278][ T5074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.908873][ T5074] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.761495][ T9] ===================================================== [ 356.768748][ T9] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 [ 356.779443][ T9] vidtv_ts_null_write_into+0x43e/0x5c0 [ 356.785899][ T9] vidtv_mux_tick+0x3480/0x3e30 [ 356.790950][ T9] process_scheduled_works+0xb82/0x1e80 [ 356.796834][ T9] worker_thread+0xee4/0x1590 [ 356.801913][ T9] kthread+0x53f/0x600 [ 356.806207][ T9] ret_from_fork+0x20f/0x8d0 [ 356.810973][ T9] ret_from_fork_asm+0x1a/0x30 [ 356.815976][ T9] [ 356.818406][ T9] Uninit was stored to memory at: [ 356.823755][ T9] vidtv_ts_null_write_into+0x437/0x5c0 [ 356.829436][ T9] vidtv_mux_tick+0x3480/0x3e30 [ 356.834483][ T9] process_scheduled_works+0xb82/0x1e80 [ 356.840182][ T9] worker_thread+0xee4/0x1590 [ 356.845062][ T9] kthread+0x53f/0x600 [ 356.849267][ T9] ret_from_fork+0x20f/0x8d0 [ 356.854030][ T9] ret_from_fork_asm+0x1a/0x30 [ 356.858932][ T9] [ 356.862026][ T9] Local variable args.i132 created at: [ 356.867615][ T9] vidtv_mux_tick+0x3119/0x3e30 [ 356.872755][ T9] process_scheduled_works+0xb82/0x1e80 [ 356.880270][ T9] [ 356.883366][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.894910][ T9] Tainted: [L]=SOFTLOCKUP [ 356.899355][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.909680][ T9] Workqueue: events vidtv_mux_tick [ 356.915066][ T9] ===================================================== [ 356.922568][ T9] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.892134][ T9] Kernel panic - not syncing: kmsan.panic set ... [ 357.898837][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B L syzkaller #0 PREEMPT(full) [ 357.909774][ T9] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 357.915464][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.925719][ T9] Workqueue: events vidtv_mux_tick [ 357.931054][ T9] Call Trace: [ 357.934448][ T9] [ 357.937587][ T9] __dump_stack+0x26/0x30 [ 357.942129][ T9] dump_stack_lvl+0x50/0x1c0 [ 357.946932][ T9] ? dump_stack+0x12/0x25 [ 357.951480][ T9] dump_stack+0x1e/0x25 [ 357.955838][ T9] vpanic+0x7b4/0x1430 [ 357.960171][ T9] panic+0x15d/0x160 [ 357.964359][ T9] kmsan_report+0x31a/0x320 [ 357.969072][ T9] ? __msan_warning+0x1b/0x30 [ 357.973996][ T9] ? vidtv_ts_null_write_into+0x43e/0x5c0 [ 357.979950][ T9] ? vidtv_mux_tick+0x3480/0x3e30 [ 357.985159][ T9] ? process_scheduled_works+0xb82/0x1e80 [ 357.991087][ T9] ? worker_thread+0xee4/0x1590 [ 357.996147][ T9] ? kthread+0x53f/0x600 [ 358.000621][ T9] ? ret_from_fork+0x20f/0x8d0 [ 358.005589][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 358.010768][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 358.015935][ T9] ? preempt_schedule_irq+0x79/0xa0 [ 358.021389][ T9] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 358.027718][ T9] ? irqentry_exit+0x8f/0x6c0 [ 358.032589][ T9] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 358.039176][ T9] ? kmsan_get_metadata+0xf1/0x160 [ 358.044485][ T9] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 358.050502][ T9] ? vidtv_ts_inc_cc+0x91/0xf0 [ 358.055511][ T9] ? filter_irq_stacks+0x49/0x190 [ 358.060862][ T9] ? stack_depot_save_flags+0x35/0x790 [ 358.066594][ T9] ? kmsan_get_metadata+0xf1/0x160 [ 358.071896][ T9] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 358.078482][ T9] ? kmsan_get_metadata+0xf1/0x160 [ 358.083795][ T9] __msan_warning+0x1b/0x30 [ 358.088549][ T9] vidtv_ts_null_write_into+0x43e/0x5c0 [ 358.094358][ T9] vidtv_mux_tick+0x3480/0x3e30 [ 358.099578][ T9] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 358.104966][ T9] process_scheduled_works+0xb82/0x1e80 [ 358.110805][ T9] worker_thread+0xee4/0x1590 [ 358.115749][ T9] kthread+0x53f/0x600 [ 358.120050][ T9] ? __pfx_worker_thread+0x10/0x10 [ 358.125389][ T9] ? __pfx_kthread+0x10/0x10 [ 358.130200][ T9] ret_from_fork+0x20f/0x8d0 [ 358.134917][ T9] ? __switch_to+0x51c/0x750 [ 358.139649][ T9] ? __pfx_kthread+0x10/0x10 [ 358.144378][ T9] ret_from_fork_asm+0x1a/0x30 [ 358.149479][ T9] [ 358.153210][ T9] Kernel Offset: disabled [ 358.157630][ T9] Rebooting in 86400 seconds..