last executing test programs: 7m13.110917521s ago: executing program 1 (id=364): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@usrjquota}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x193042, 0x80) sendfile(r0, r0, 0x0, 0x7a680000) write$FUSE_DIRENT(r0, &(0x7f0000000480)={0x38, 0x0, 0x0, [{0x3, 0x78, 0xd, 0x4, '&)\\,$!!{$:*#+'}]}, 0x38) 7m11.786615204s ago: executing program 1 (id=372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32=r1], 0x38}}, 0x0) 7m10.502981975s ago: executing program 1 (id=376): 7m10.370051198s ago: executing program 1 (id=377): ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000440)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"320f30030000a474c6658c8a4e9226080000f600"}) r4 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r4) 7m9.250760126s ago: executing program 1 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa000, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17", 0xfffffc4d}], 0x1, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r3, r4]}}], 0x18, 0x200400d1}, 0x8860) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) io_setup(0x443, &(0x7f0000001100)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x8, 0x0, r5, 0x0, 0x0, 0x81, 0x0, 0x6}]) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') r7 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) fcntl$dupfd(r7, 0x406, r7) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYBLOB="3ccc02984ec464417323afe3a38e923a920aa75b4ca4c8cff2b2efe84268584146149ab75dca38f0b6b8cea74e3f09f401738b7fce48e36a86c6abd5d79cbfd2d60c3e7527073e97f898cc3f2bef9baa2832dae95feb46fbf32c1f1ceb52688d6795c41090030878088e842990ebeca8294a3c5760e385d86a23", @ANYRES8, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES64=r1, @ANYBLOB="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"], 0xfb, 0x20f, &(0x7f0000000d40)="$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") getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x13) 7m7.125602698s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x61, &(0x7f00000000c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@can={{0x4, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "77cee78471c40045"}, 0x10}, 0x2}, 0x8010) 7m6.781293496s ago: executing program 32 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x61, &(0x7f00000000c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@can={{0x4, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "77cee78471c40045"}, 0x10}, 0x2}, 0x8010) 4m5.671894074s ago: executing program 4 (id=1071): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb10000000800080048", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4m5.4189148s ago: executing program 4 (id=1072): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x2, 0x0, 0xfa2, 0xffffffff, 0xfffffffc, {0x8000, 0x0, 0x0, 0x91, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r4, 0x0, 0x0, 0xeffff8b0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 4m4.489345312s ago: executing program 4 (id=1074): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9c, 0x7, 0x0, 0x1, 0x7fd, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0x3, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76d", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x28) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 4m4.151838141s ago: executing program 4 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 4m3.856729388s ago: executing program 4 (id=1077): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000002300)={[{@nombcache}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_async_commit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}], [{@smackfsroot={'smackfsroot', 0x3d, '/g&[%$['}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0x0, 0x587, &(0x7f0000004480)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) 4m3.401772209s ago: executing program 4 (id=1079): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0xffffffff, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x800, 0x8, {}, {0x5, 0x8, 0x6, 0x1, 0x6, 0x7, "d75d5351"}, 0x7, 0x2, {0x0}, 0x401, 0x0, r1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 3m48.080208294s ago: executing program 33 (id=1079): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0xffffffff, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x800, 0x8, {}, {0x5, 0x8, 0x6, 0x1, 0x6, 0x7, "d75d5351"}, 0x7, 0x2, {0x0}, 0x401, 0x0, r1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 5.73095328s ago: executing program 0 (id=2274): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 3.947140444s ago: executing program 2 (id=2283): memfd_secret(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 3.530957464s ago: executing program 2 (id=2284): socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x4dd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0xffffffff, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 3.504517444s ago: executing program 2 (id=2285): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000002}, 0x10) 3.456435556s ago: executing program 2 (id=2286): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x8000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) 2.646934455s ago: executing program 0 (id=2289): ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20004080) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201100300000010ac05720240000102030109022d0001010a207f0904000801030102"], &(0x7f00000008c0)={0x0, 0x0, 0x55, 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x100) 2.490803749s ago: executing program 2 (id=2291): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.306889164s ago: executing program 5 (id=2293): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x7, {"ffffffffee0000000000000000a300", "000900000000001700", "000000000100"}, 0x40000007, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000180)={0x6fa9, {"59a9a6b5b7f977e9914000", "4ce1e01fa0d554a75cfe69c0a9911da5", "6bd71ced3a451118a037005647e0fa2e"}, 0x1, 0x4}) 2.215681366s ago: executing program 5 (id=2294): socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x4dd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0xffffffff, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 1.932742082s ago: executing program 5 (id=2295): socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000180)='vfat\x00', 0x0) socket(0x2, 0x80805, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 1.726237737s ago: executing program 3 (id=2297): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r1}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r6, 0x3328}, {r5, 0x4236}], 0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x13, r0, 0x0) 1.154115871s ago: executing program 3 (id=2298): 1.022898875s ago: executing program 3 (id=2299): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x80000) read$FUSE(r0, &(0x7f0000002800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f00000068c0)={0x90, 0x0, r2, {0x4, 0x2, 0x4, 0x80000001, 0x6, 0x7, {0x5, 0x1, 0x96a, 0xffff, 0x3, 0x7fffffff, 0x9, 0x7f, 0x2d, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x43e5}}}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002240)={0x3}) 986.955865ms ago: executing program 0 (id=2300): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = dup(r2) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000092700000000000001000000850000009a00000077510800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1e00}, 0x94) mkdirat(r3, 0x0, 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 957.452247ms ago: executing program 3 (id=2301): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 762.975021ms ago: executing program 3 (id=2302): open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x0) lseek(r0, 0x80000000008, 0x3) 709.606692ms ago: executing program 0 (id=2303): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x7, {"ffffffffee0000000000000000a300", "000900000000001700", "000000000100"}, 0x40000007, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000180)={0x6fa9, {"59a9a6b5b7f977e9914000", "4ce1e01fa0d554a75cfe69c0a9911da5", "6bd71ced3a451118a037005647e0fa2e"}, 0x1, 0x4}) 699.085712ms ago: executing program 3 (id=2304): memfd_secret(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 561.058446ms ago: executing program 0 (id=2305): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020070000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) 407.35176ms ago: executing program 0 (id=2306): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r1}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r6, 0x3328}, {r5, 0x4236}], 0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x13, r0, 0x0) 402.51743ms ago: executing program 5 (id=2307): r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x8a, 0x7fffffffffffe, 0x5, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x210001, 0x1000000000000010, 0x2, 0x4, 0x0, 0x2, 0x4000000000000000], 0x70000, 0x2200}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1ffffff, 0x4, 0xc4, 0x53, 0x3e, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x6, 0x5, 0x800000001}, {0xb, 0xa7f2, 0x8, 0x88, 0x8, 0xfd, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x40000000000001}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x11, 0x7, 0xb3, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 202.951025ms ago: executing program 5 (id=2308): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='5', 0x1) 159.138146ms ago: executing program 2 (id=2309): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=2310): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.245576][ T5764] IPVS: starting estimator thread 0... [ 176.390589][ T6616] IPVS: using max 18 ests per chain, 43200 per kthread [ 176.596546][ T6622] loop1: detected capacity change from 0 to 512 [ 179.547945][ T6637] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 180.344176][ T6648] syzkaller0: entered promiscuous mode [ 180.370401][ T6648] syzkaller0: entered allmulticast mode [ 180.401068][ T6648] tipc: Started in network mode [ 180.421208][ T6648] tipc: Node identity 7a916eb759c3, cluster identity 4711 [ 180.429728][ T6648] tipc: Enabled bearer , priority 0 [ 180.491150][ T6648] tipc: Resetting bearer [ 180.871578][ T6647] tipc: Resetting bearer [ 181.112819][ T6647] tipc: Disabling bearer [ 182.666317][ T6677] loop1: detected capacity change from 0 to 16 [ 184.043235][ T6681] mmap: syz.3.254 (6681) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.775192][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.351328][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 185.387353][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.410619][ T5834] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 185.419731][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.012384][ T5834] usb 1-1: config 0 descriptor?? [ 186.075999][ T5834] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 186.185002][ T6697] loop1: detected capacity change from 0 to 128 [ 186.286110][ T6697] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.368557][ T6697] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.568944][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.444106][ T6722] loop1: detected capacity change from 0 to 512 [ 188.496442][ T6721] Zero length message leads to an empty skb [ 188.524925][ T5768] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.571806][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.582372][ T5764] usb 1-1: USB disconnect, device number 2 [ 188.689061][ T6725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.850920][ T6725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.890826][ T6725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.403857][ T6734] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 189.462969][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'. [ 189.473841][ T6734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.630902][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 189.695893][ T6734] bridge1: entered promiscuous mode [ 190.312584][ T6749] loop0: detected capacity change from 0 to 16 [ 190.447914][ T5768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.757379][ T6762] overlayfs: failed to clone upperpath [ 190.928444][ T6765] loop1: detected capacity change from 0 to 16 [ 191.675843][ T6769] ip6gre1: entered allmulticast mode [ 191.711218][ T3443] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.115713][ T6776] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 192.254129][ T6779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.287'. [ 192.328848][ T6779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.379266][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 192.450703][ T6776] bridge2: entered promiscuous mode [ 192.492178][ T6776] bond3: (slave bridge2): making interface the new active one [ 192.512115][ T6776] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 192.573767][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 194.561313][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.567732][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.080620][ T5784] Bluetooth: hci3: unexpected cc 0x2042 length: 2 > 1 [ 195.087546][ T5784] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 195.469420][ T6812] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 195.578483][ T6814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 195.613917][ T6814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.660536][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.781245][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 195.835615][ T6812] bridge2: entered promiscuous mode [ 195.854340][ T6812] bond2: (slave bridge2): making interface the new active one [ 195.863684][ T6812] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 196.547709][ T5784] Bluetooth: hci0: Malformed LE Event: 0x0b [ 196.622908][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 196.647143][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 197.063477][ T6828] loop1: detected capacity change from 0 to 16 [ 198.995878][ T6839] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 199.058192][ T6838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.845381][ T6879] loop0: detected capacity change from 0 to 16 [ 203.510358][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.553317][ T6920] autofs4:pid:6920:autofs_fill_super: called with bogus options [ 207.071679][ T6935] loop1: detected capacity change from 0 to 128 [ 207.081477][ T6935] ext4: Unknown parameter 'fsmagic' [ 208.071145][ T6943] tipc: Enabling of bearer rejected, failed to enable media [ 209.070706][ T6953] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 209.305880][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 210.330613][ T6955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.355816][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 210.405509][ T6965] loop1: detected capacity change from 0 to 256 [ 210.445885][ T6953] bridge2: entered promiscuous mode [ 210.535520][ T6953] bond3: (slave bridge2): making interface the new active one [ 210.595396][ T6953] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 211.895367][ T6992] tipc: Enabling of bearer rejected, failed to enable media [ 213.619830][ T7010] syz.0.356(7010): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 213.917623][ T7016] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 214.037880][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'. [ 214.068129][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 214.127000][ T7016] bridge3: entered promiscuous mode [ 214.151022][ T7016] bond3: (slave bridge3): making interface the new active one [ 214.244881][ T7016] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 215.172006][ T7031] tipc: Enabling of bearer rejected, failed to enable media [ 216.548746][ T7039] loop1: detected capacity change from 0 to 4096 [ 216.578915][ T7039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.599800][ T7039] EXT4-fs (loop1): Test dummy encryption mode enabled [ 216.651630][ T7039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.736585][ T7051] loop0: detected capacity change from 0 to 4096 [ 216.829131][ T7051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.064133][ T28] audit: type=1804 audit(1785242275.856:24): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.369" name=2F6E6577726F6F742F38342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop0" ino=18 res=1 errno=0 [ 217.284751][ T7039] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 217.613360][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.667531][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.860433][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.565239][ T7100] loop1: detected capacity change from 0 to 16 [ 220.823164][ T5768] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.293031][ T7109] hugetlbfs: syz.0.381 (7109): Using mlock ulimits for SHM_HUGETLB is obsolete [ 222.181499][ T7119] syzkaller0: entered promiscuous mode [ 222.187232][ T7119] syzkaller0: entered allmulticast mode [ 222.429631][ T3561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.570039][ T3561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.733652][ T3561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.022638][ T3561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.549535][ T3561] tipc: Left network mode [ 223.655391][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.666717][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.680477][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.689506][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.700382][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.712037][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.922971][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.400'. [ 224.093179][ T7140] loop0: detected capacity change from 0 to 16 [ 224.156644][ T5768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.713223][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 225.740453][ T5087] Bluetooth: hci0: command tx timeout [ 227.820823][ T5087] Bluetooth: hci0: command tx timeout [ 228.079785][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.127466][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.160791][ T7152] bridge_slave_0: entered allmulticast mode [ 228.201538][ T7152] bridge_slave_0: entered promiscuous mode [ 228.316334][ T3561] hsr_slave_0: left promiscuous mode [ 228.357810][ T3561] hsr_slave_1: left promiscuous mode [ 228.423604][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.473112][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.529614][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.588972][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.671712][ T3561] bridge_slave_1: left allmulticast mode [ 228.708305][ T3561] bridge_slave_1: left promiscuous mode [ 228.756667][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.789145][ T5087] Bluetooth: hci1: unexpected cc 0x2042 length: 2 > 1 [ 228.796154][ T5087] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 228.872333][ T3561] bridge_slave_0: left allmulticast mode [ 228.878070][ T3561] bridge_slave_0: left promiscuous mode [ 228.946569][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.108539][ T3561] veth1_macvtap: left promiscuous mode [ 229.126057][ T3561] veth0_macvtap: left promiscuous mode [ 229.133298][ T3561] veth1_vlan: left promiscuous mode [ 229.140124][ T3561] veth0_vlan: left promiscuous mode [ 229.542875][ T3561] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 229.624597][ T3561] bond3 (unregistering): Released all slaves [ 229.711157][ T3561] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 229.900499][ T5087] Bluetooth: hci0: command tx timeout [ 230.033213][ T3561] bond2 (unregistering): Released all slaves [ 230.375516][ T3561] bond1 (unregistering): Released all slaves [ 231.167777][ T3561] team0 (unregistering): Port device team_slave_1 removed [ 231.240127][ T3561] team0 (unregistering): Port device team_slave_0 removed [ 231.302046][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.375020][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.859259][ T3561] bond0 (unregistering): Released all slaves [ 231.977681][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.980707][ T5087] Bluetooth: hci0: command tx timeout [ 231.998697][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.007606][ T7152] bridge_slave_1: entered allmulticast mode [ 232.029022][ T7152] bridge_slave_1: entered promiscuous mode [ 232.215082][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.241063][ T7284] fuse: Bad value for 'fd' [ 232.265617][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.528937][ T7152] team0: Port device team_slave_0 added [ 232.537637][ T7152] team0: Port device team_slave_1 added [ 234.431002][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.438005][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.560282][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.627253][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.685342][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.819885][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.953177][ T7308] syzkaller0: entered promiscuous mode [ 234.958721][ T7308] syzkaller0: entered allmulticast mode [ 235.438808][ T7152] hsr_slave_0: entered promiscuous mode [ 235.511269][ T7152] hsr_slave_1: entered promiscuous mode [ 235.573787][ T7152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.815173][ T7152] Cannot create hsr debugfs directory [ 236.529607][ T7342] loop0: detected capacity change from 0 to 8192 [ 238.067891][ T7152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.593893][ T7152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.889414][ T7152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.911933][ T7152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.583662][ T7364] loop0: detected capacity change from 0 to 16 [ 241.059483][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.143142][ T7376] loop0: detected capacity change from 0 to 128 [ 241.943428][ T7376] EXT4-fs (loop0): Test dummy encryption mode enabled [ 241.966624][ T7152] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.078760][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.086007][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.166676][ T7376] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.211603][ T7376] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 242.225820][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.233103][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.389831][ T5087] Bluetooth: hci3: unexpected event for opcode 0x202d [ 242.405398][ T7152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.691010][ T7376] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 242.764219][ T7396] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 242.851373][ T7412] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 242.884230][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.064047][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.126919][ T7438] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 243.249256][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 243.265644][ T7438] bridge3: entered promiscuous mode [ 243.275804][ T7438] bond4: (slave bridge3): making interface the new active one [ 243.284530][ T7438] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 243.628198][ T7448] loop0: detected capacity change from 0 to 512 [ 244.605511][ T5768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.290353][ T5087] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 245.680993][ T5087] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 245.692065][ T5087] CPU: 1 PID: 5087 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 245.699767][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 245.709946][ T5087] Workqueue: hci3 hci_rx_work [ 245.714679][ T5087] Call Trace: [ 245.718069][ T5087] [ 245.721019][ T5087] dump_stack_lvl+0x18c/0x250 [ 245.725815][ T5087] ? show_regs_print_info+0x20/0x20 [ 245.731039][ T5087] ? load_image+0x420/0x420 [ 245.735674][ T5087] sysfs_create_dir_ns+0x26e/0x2a0 [ 245.740811][ T5087] ? __lock_acquire+0x7d80/0x7d80 [ 245.745879][ T5087] ? sysfs_warn_dup+0xa0/0xa0 [ 245.750713][ T5087] ? do_raw_spin_unlock+0x121/0x230 [ 245.756121][ T5087] kobject_add_internal+0x617/0xc90 [ 245.761367][ T5087] kobject_add+0x164/0x240 [ 245.765839][ T5087] ? kobject_init+0x1d0/0x1d0 [ 245.770547][ T5087] ? get_device_parent+0x366/0x390 [ 245.775698][ T5087] device_add+0x3fa/0xc40 [ 245.780056][ T5087] hci_conn_add_sysfs+0xd5/0x1e0 [ 245.785289][ T5087] le_conn_complete_evt+0xe9f/0x1480 [ 245.790613][ T5087] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 245.797011][ T5087] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 245.802773][ T5087] ? mutex_unlock+0x10/0x10 [ 245.807326][ T5087] ? skb_pull_data+0xf0/0x1f0 [ 245.812084][ T5087] hci_le_conn_complete_evt+0x187/0x440 [ 245.817653][ T5087] ? hci_remote_host_features_evt+0x150/0x150 [ 245.823821][ T5087] hci_event_packet+0x7b4/0x1280 [ 245.828781][ T5087] ? __lock_acquire+0x7d80/0x7d80 [ 245.833845][ T5087] ? lock_chain_count+0x20/0x20 [ 245.838724][ T5087] ? bis_list+0x290/0x290 [ 245.843079][ T5087] ? lockdep_hardirqs_on+0x98/0x150 [ 245.848310][ T5087] ? hci_send_to_monitor+0xd7/0x4f0 [ 245.853517][ T5087] hci_rx_work+0x43a/0xd60 [ 245.857948][ T5087] ? process_scheduled_works+0x975/0x1600 [ 245.863764][ T5087] process_scheduled_works+0xa60/0x1600 [ 245.869424][ T5087] ? worker_attach_to_pool+0x370/0x370 [ 245.874893][ T5087] ? assign_work+0x3cc/0x5d0 [ 245.879748][ T5087] worker_thread+0xa5e/0xfe0 [ 245.884350][ T5087] ? _raw_spin_unlock+0x40/0x40 [ 245.889272][ T5087] ? __kthread_parkme+0x71/0x1c0 [ 245.894424][ T5087] kthread+0x2fa/0x390 [ 245.898513][ T5087] ? pr_cont_work+0x550/0x550 [ 245.903286][ T5087] ? kthread_blkcg+0xd0/0xd0 [ 245.907975][ T5087] ret_from_fork+0x48/0x80 [ 245.912407][ T5087] ? kthread_blkcg+0xd0/0xd0 [ 245.917090][ T5087] ret_from_fork_asm+0x11/0x20 [ 245.921877][ T5087] [ 245.926435][ T5087] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 245.948466][ T5087] Bluetooth: hci3: failed to register connection device [ 245.986088][ T7152] veth0_vlan: entered promiscuous mode [ 246.524537][ T7152] veth1_vlan: entered promiscuous mode [ 246.758222][ T7152] veth0_macvtap: entered promiscuous mode [ 246.780093][ T7152] veth1_macvtap: entered promiscuous mode [ 246.842044][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.947994][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.989230][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.063791][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.075917][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.092131][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.343997][ T7509] loop0: detected capacity change from 0 to 512 [ 247.934563][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.955188][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.981321][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.035420][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.320426][ T5768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.353207][ T7152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.372673][ T7152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.400242][ T7152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.424451][ T7152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.666186][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.691767][ T7527] loop0: detected capacity change from 0 to 512 [ 248.704500][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.726711][ T7527] EXT4-fs: Ignoring removed i_version option [ 248.754672][ T7527] ext4: Unknown parameter 'smackfsfloor' [ 248.832830][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.943779][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.590342][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.022492][ T7537] loop4: detected capacity change from 0 to 2048 [ 250.235905][ T7537] loop4: p2 p3 p7 [ 250.943138][ T7546] loop0: detected capacity change from 0 to 512 [ 252.560103][ T7557] loop4: detected capacity change from 0 to 512 [ 252.726075][ T5768] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.089103][ T7570] loop0: detected capacity change from 0 to 1024 [ 253.161175][ T7573] loop4: detected capacity change from 0 to 512 [ 253.177713][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 253.290585][ T5767] udevd[5767]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 253.344434][ T7573] ext2: Unknown parameter 'obj_type' [ 253.456286][ T5944] udevd[5944]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 253.754211][ T7577] sctp: failed to load transform for md5: -2 [ 254.257415][ T7577] syz.2.481 (7577) used greatest stack depth: 19560 bytes left [ 254.377387][ T7570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 254.457359][ T7570] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.742171][ T7590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 255.985603][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.992218][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.032731][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 258.034883][ T7627] loop4: detected capacity change from 0 to 512 [ 258.075035][ T7627] ext2: Unknown parameter 'obj_type' [ 259.631017][ T7645] loop4: detected capacity change from 0 to 256 [ 260.187934][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.500'. [ 260.990372][ T7663] syz.2.503 uses obsolete (PF_INET,SOCK_PACKET) [ 261.104434][ T7665] fuse: Bad value for 'fd' [ 261.197407][ T7670] loop4: detected capacity change from 0 to 512 [ 261.943760][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 262.151392][ T5776] Bluetooth: hci1: unexpected event for opcode 0x0042 [ 264.420433][ T7689] syzkaller0: entered promiscuous mode [ 264.454276][ T7689] syzkaller0: entered allmulticast mode [ 265.320120][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 265.375129][ T7703] fuse: Bad value for 'fd' [ 265.786541][ T7714] loop0: detected capacity change from 0 to 512 [ 266.339248][ T5768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.628861][ T5776] Bluetooth: hci3: unexpected event for opcode 0x0042 [ 266.752993][ T7717] loop4: detected capacity change from 0 to 8192 [ 266.792461][ T7717] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.092288][ T7738] fuse: Bad value for 'fd' [ 268.620492][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.525'. [ 268.629431][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.525'. [ 270.175604][ T7760] loop4: detected capacity change from 0 to 512 [ 271.206518][ T7783] loop4: detected capacity change from 0 to 256 [ 271.267603][ T7783] FAT-fs (loop4): Unrecognized mount option "utg8=0" or missing value [ 271.928164][ T7798] IPv4: Oversized IP packet from 172.20.20.24 [ 271.937304][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 271.944683][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 272.956004][ T7807] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 272.992939][ T7815] loop0: detected capacity change from 0 to 256 [ 273.000493][ T7815] FAT-fs (loop0): Unrecognized mount option "utg8=0" or missing value [ 274.238972][ T7842] loop4: detected capacity change from 0 to 512 [ 274.284420][ T7842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.374826][ T7842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.414054][ T7842] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.435062][ T7847] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 274.532507][ T7842] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.4.550: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 274.702520][ T7842] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 274.714100][ T7842] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #12: comm syz.4.550: Deleting old file: nlink 2, error=-117 [ 274.836815][ T7152] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.085003][ T7855] loop4: detected capacity change from 0 to 256 [ 275.110890][ T7855] FAT-fs (loop4): Unrecognized mount option "utg8=0" or missing value [ 275.519028][ T5776] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 275.646174][ T7873] loop4: detected capacity change from 0 to 512 [ 275.678475][ T7873] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 275.826540][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 276.076934][ T7885] loop4: detected capacity change from 0 to 8192 [ 279.773421][ T7907] sctp: failed to load transform for md5: -2 [ 279.983370][ T7922] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 280.202819][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 280.674242][ T7948] loop4: detected capacity change from 0 to 256 [ 280.926895][ T7948] FAT-fs (loop4): Unrecognized mount option "utg8=0" or missing value [ 281.344426][ T7959] process 'syz.4.581' launched './file2' with NULL argv: empty string added [ 281.840836][ T7973] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 282.297232][ T7983] loop4: detected capacity change from 0 to 256 [ 282.348332][ T7983] FAT-fs (loop4): Unrecognized mount option "utg8=0" or missing value [ 283.306290][ T7989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.660231][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 284.910919][ T8014] loop4: detected capacity change from 0 to 1024 [ 284.949061][ T8014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.047453][ T8014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.301662][ T7152] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.351023][ T8067] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 287.402105][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.615'. [ 290.517630][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.627'. [ 291.123996][ T8130] netlink: 48 bytes leftover after parsing attributes in process `syz.2.630'. [ 292.225057][ T8159] 9pnet_fd: Insufficient options for proto=fd [ 292.232333][ T8159] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 292.248779][ T9] IPVS: starting estimator thread 0... [ 292.360277][ T8160] IPVS: using max 24 ests per chain, 57600 per kthread [ 292.443014][ T8164] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 299.271814][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 300.586296][ T8258] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 301.479240][ T8277] loop4: detected capacity change from 0 to 256 [ 301.516007][ T8277] FAT-fs (loop4): Unrecognized mount option "åÿŒƒ¤ˆ¥ˆúlˆ°shortname=winnt" or missing value [ 301.986986][ T8271] overlayfs: failed to clone upperpath [ 302.596402][ T8299] loop0: detected capacity change from 0 to 512 [ 302.710402][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.983590][ T8309] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 304.533484][ T8322] loop0: detected capacity change from 0 to 256 [ 304.541339][ T8322] FAT-fs (loop0): Unrecognized mount option "utg8=0" or missing value [ 304.691008][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.018329][ T8335] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 305.105693][ T8339] loop0: detected capacity change from 0 to 512 [ 305.452607][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 305.498567][ T8335] bridge1: entered promiscuous mode [ 305.527306][ T8335] bond1: (slave bridge1): making interface the new active one [ 305.569498][ T8359] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 305.647817][ T8335] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 307.929616][ T8385] syzkaller0: entered promiscuous mode [ 307.935488][ T8385] syzkaller0: entered allmulticast mode [ 308.132075][ T8394] fuse: Bad value for 'group_id' [ 309.094844][ T8403] loop4: detected capacity change from 0 to 256 [ 309.132120][ T8403] FAT-fs (loop4): Unrecognized mount option "utg8=0" or missing value [ 309.393443][ T8415] loop0: detected capacity change from 0 to 128 [ 309.423990][ T8410] bond1: invalid ARP target 0.0.0.0 specified for addition [ 309.431545][ T8410] bond1: option arp_ip_target: invalid value (0) [ 309.444420][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.444600][ T8410] bond1 (unregistering): Released all slaves [ 311.052112][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 311.594408][ T8467] loop0: detected capacity change from 0 to 512 [ 311.615001][ T8467] ext2: Unknown parameter 'obj_type' [ 311.725322][ T8473] loop4: detected capacity change from 0 to 128 [ 311.771252][ T8475] netlink: 'syz.3.727': attribute type 1 has an invalid length. [ 311.812287][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.826745][ T8387] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.300390][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.092500][ T8491] fuse: Bad value for 'fd' [ 313.108235][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 313.153882][ T8481] bridge4: entered promiscuous mode [ 313.164125][ T8481] bond6: (slave bridge4): making interface the new active one [ 313.177195][ T8481] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 313.297413][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 313.813541][ T8516] loop4: detected capacity change from 0 to 2048 [ 314.157558][ T8524] loop0: detected capacity change from 0 to 512 [ 314.173638][ T8524] EXT4-fs: Ignoring removed nobh option [ 314.186262][ T7957] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.255788][ T8524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 314.308693][ T8516] loop4: detected capacity change from 0 to 1024 [ 314.345760][ T8524] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.743: corrupted inode contents [ 314.544670][ T8524] EXT4-fs (loop0): Remounting filesystem read-only [ 314.581295][ T8524] Quota error (device loop0): write_blk: dquota write failed [ 314.677679][ T8524] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 314.820553][ T8524] EXT4-fs (loop0): 1 truncate cleaned up [ 314.846057][ T8524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.919070][ T8524] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.162464][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.111405][ T8557] loop0: detected capacity change from 0 to 128 [ 317.220600][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.440859][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.447227][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.493430][ T8568] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 318.513962][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 318.640907][ T8595] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 318.737234][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 318.753971][ T8595] bridge1: entered promiscuous mode [ 318.763044][ T8595] bond1: (slave bridge1): making interface the new active one [ 318.771329][ T8595] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 318.919466][ T8603] loop0: detected capacity change from 0 to 512 [ 319.932432][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 321.533314][ T8636] loop4: detected capacity change from 0 to 2048 [ 321.556781][ T8641] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 322.320380][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 322.418578][ T8641] bridge3: entered promiscuous mode [ 322.436040][ T8641] bond4: (slave bridge3): making interface the new active one [ 322.449142][ T8641] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 322.762315][ T8665] IPv4: Oversized IP packet from 172.20.20.24 [ 322.769537][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 322.776511][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 322.910529][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 323.241231][ T8680] netlink: 'syz.4.792': attribute type 1 has an invalid length. [ 323.864078][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 323.925160][ T8689] bridge2: entered promiscuous mode [ 323.970391][ T8689] bond3: (slave bridge2): making interface the new active one [ 324.003939][ T8689] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 324.091117][ T8699] IPv4: Oversized IP packet from 172.20.20.24 [ 324.097936][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 324.104397][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 324.371907][ T8703] loop4: detected capacity change from 0 to 4096 [ 324.402363][ T8703] EXT4-fs: inline encryption not supported [ 324.460762][ T8703] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 324.514790][ T8703] EXT4-fs (loop4): Test dummy encryption mode enabled [ 324.582437][ T8703] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 324.628455][ T8703] System zones: 0-5 [ 324.685261][ T8703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.144292][ T7152] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.383723][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.805'. [ 326.392948][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.805'. [ 327.175560][ T8737] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 327.301106][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 327.346290][ T8741] bridge3: entered promiscuous mode [ 327.473855][ T8741] bond5: (slave bridge3): making interface the new active one [ 327.508841][ T8741] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 327.798093][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 328.709258][ T8758] loop4: detected capacity change from 0 to 128 [ 328.914349][ T8758] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.955855][ T8758] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.044065][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'. [ 329.053357][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'. [ 329.571528][ T8758] syz.4.814 (pid 8758) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 329.640275][ T8758] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 329.690368][ T8758] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 329.758730][ T7152] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.089759][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 330.848734][ T8780] loop4: detected capacity change from 0 to 512 [ 330.877239][ T8780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 330.903416][ T8780] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.831: bad orphan inode 131072 [ 330.966771][ T8780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.157133][ T7152] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.488612][ T5837] IPVS: starting estimator thread 0... [ 332.610492][ T8796] IPVS: using max 19 ests per chain, 45600 per kthread [ 333.772505][ T8802] tty tty28: ldisc open failed (-12), clearing slot 27 [ 333.996122][ T8811] loop0: detected capacity change from 0 to 128 [ 334.103848][ T8816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.879447][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.994408][ T8869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.818347][ T8879] fuse: Bad value for 'fd' [ 339.048046][ T8886] loop4: detected capacity change from 0 to 512 [ 339.159417][ T7957] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.588806][ T8904] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.076376][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'. [ 340.086138][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'. [ 342.064797][ T8922] overlayfs: failed to clone upperpath [ 342.951164][ T8931] syzkaller0: entered promiscuous mode [ 343.045185][ T8931] syzkaller0: entered allmulticast mode [ 343.333971][ T8935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.524376][ T8937] loop0: detected capacity change from 0 to 128 [ 343.569225][ T8939] loop4: detected capacity change from 0 to 2048 [ 343.632086][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.681170][ T8939] loop4: p1 p2 p3 p4 [ 343.681170][ T8939] p1: [ 343.706040][ T8939] loop4: p1 size 16779263 extends beyond EOD, truncated [ 343.725498][ T8939] loop4: p2 size 458752 extends beyond EOD, truncated [ 343.755420][ T8939] loop4: p3 start 3036676096 is beyond EOD, truncated [ 343.780338][ T8939] loop4: p4 start 100663296 is beyond EOD, truncated [ 343.878577][ T7957] udevd[7957]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 343.903757][ T8387] udevd[8387]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 343.912346][ T8944] loop4: detected capacity change from 0 to 512 [ 345.527365][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 346.389903][ T8967] syzkaller0: entered promiscuous mode [ 346.430220][ T8967] syzkaller0: entered allmulticast mode [ 346.691564][ T8969] loop4: detected capacity change from 0 to 128 [ 346.761676][ T7957] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 347.066859][ T8977] loop4: detected capacity change from 0 to 512 [ 347.175587][ T7957] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 348.244927][ T8986] loop4: detected capacity change from 0 to 2048 [ 348.302654][ T8986] loop4: detected capacity change from 0 to 1024 [ 349.240482][ T5784] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 349.249405][ T5784] Bluetooth: hci2: Injecting HCI hardware error event [ 349.258569][ T5784] Bluetooth: hci2: hardware error 0x00 [ 349.405806][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 349.415022][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 349.559122][ T8995] syzkaller0: entered promiscuous mode [ 349.671494][ T8995] syzkaller0: entered allmulticast mode [ 349.932867][ T9001] autofs4:pid:9001:autofs_fill_super: called with bogus options [ 350.230888][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 350.442092][ T9011] loop0: detected capacity change from 0 to 512 [ 351.340702][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 351.512735][ T9019] loop0: detected capacity change from 0 to 2048 [ 353.003314][ T9030] autofs4:pid:9030:autofs_fill_super: called with bogus options [ 353.068074][ T9030] loop4: detected capacity change from 0 to 128 [ 355.548832][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 356.109166][ T9051] loop4: detected capacity change from 0 to 2048 [ 357.322421][ T9061] autofs4:pid:9061:autofs_fill_super: called with bogus options [ 357.353532][ T9061] loop4: detected capacity change from 0 to 128 [ 357.430360][ T7957] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.716188][ T9066] fuse: Bad value for 'fd' [ 358.266285][ T9079] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 360.396935][ T9090] autofs4:pid:9090:autofs_fill_super: called with bogus options [ 360.616699][ T9100] fuse: Bad value for 'fd' [ 361.413811][ T9111] fuse: Bad value for 'fd' [ 361.432436][ T9111] loop0: detected capacity change from 0 to 512 [ 361.439475][ T9111] EXT4-fs: Ignoring removed mblk_io_submit option [ 361.478143][ T9111] EXT4-fs (loop0): orphan cleanup on readonly fs [ 361.498851][ T9111] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 361.510514][ T9111] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 361.529428][ T9111] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 361.544816][ T9111] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.921: bad orphan inode 14 [ 361.556784][ T9111] ext4_test_bit(bit=13, block=18) = 1 [ 361.562367][ T9111] is_bad_inode(inode)=0 [ 361.566545][ T9111] NEXT_ORPHAN(inode)=0 [ 361.570713][ T9111] max_ino=32 [ 361.573970][ T9111] i_nlink=1 [ 361.577258][ T9111] EXT4-fs (loop0): 1 truncate cleaned up [ 361.584808][ T9111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.047358][ T9117] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 362.990849][ T5776] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 363.078701][ T9123] autofs4:pid:9123:autofs_fill_super: called with bogus options [ 363.486823][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.714926][ T9132] fuse: Bad value for 'fd' [ 364.254810][ T9136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.529575][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 364.950362][ T9144] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 365.734013][ T9148] autofs4:pid:9148:autofs_fill_super: called with bogus options [ 366.396459][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.936'. [ 366.405672][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.936'. [ 367.085219][ T9157] syzkaller0: entered promiscuous mode [ 367.114480][ T9157] syzkaller0: entered allmulticast mode [ 367.425552][ T9163] loop0: detected capacity change from 0 to 2048 [ 367.435390][ T9165] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.504889][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.557457][ T9163] loop0: detected capacity change from 0 to 1024 [ 367.564411][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.590283][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.623436][ T7957] Buffer I/O error on dev loop0, logical block 0, async page read [ 367.695915][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.821176][ T9169] autofs4:pid:9169:autofs_fill_super: called with bogus options [ 368.645761][ T9186] syzkaller0: entered promiscuous mode [ 368.651840][ T9186] syzkaller0: entered allmulticast mode [ 368.894805][ T9192] autofs4:pid:9192:autofs_fill_super: called with bogus options [ 368.909325][ T9192] loop4: detected capacity change from 0 to 128 [ 370.071455][ T28] audit: type=1326 audit(1785242428.876:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 371.127942][ T28] audit: type=1326 audit(1785242428.876:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 371.361202][ T28] audit: type=1326 audit(1785242428.896:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 371.486992][ T28] audit: type=1326 audit(1785242428.916:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 371.641413][ T28] audit: type=1326 audit(1785242428.916:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 371.731350][ T28] audit: type=1326 audit(1785242428.916:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 371.930538][ T28] audit: type=1326 audit(1785242428.916:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 372.395487][ T28] audit: type=1326 audit(1785242428.916:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 372.519538][ T28] audit: type=1326 audit(1785242428.916:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.0.955" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7a2a59de99 code=0x7ffc0000 [ 372.944562][ T9228] autofs4:pid:9228:autofs_fill_super: called with bogus options [ 373.429616][ T9228] loop0: detected capacity change from 0 to 128 [ 373.639986][ T9233] syzkaller0: entered promiscuous mode [ 373.674060][ T9233] syzkaller0: entered allmulticast mode [ 373.759814][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.768731][ T9258] syzkaller0: entered promiscuous mode [ 377.778939][ T9258] syzkaller0: entered allmulticast mode [ 379.950904][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.957258][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.967081][ T9288] autofs4:pid:9288:autofs_fill_super: called with bogus options [ 381.629971][ T9304] loop0: detected capacity change from 0 to 128 [ 381.646252][ T9304] FAT-fs (loop0): Unrecognized mount option "dis#ícard" or missing value [ 382.978281][ T9313] loop4: detected capacity change from 0 to 256 [ 382.985912][ T9313] FAT-fs (loop4): Unrecognized mount option "utg8=0" or missing value [ 383.890346][ T5776] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 384.005850][ T9320] autofs4:pid:9320:autofs_fill_super: called with bogus options [ 384.744149][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 384.829994][ T9332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 387.584643][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 387.763651][ T9372] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 388.276034][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 388.295447][ T9379] bridge4: entered promiscuous mode [ 390.423114][ T9420] loop0: detected capacity change from 0 to 128 [ 390.457014][ T9420] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 390.469628][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 390.701103][ T9428] autofs4:pid:9428:autofs_fill_super: called with bogus options [ 390.754006][ T9428] loop0: detected capacity change from 0 to 128 [ 391.216645][ T9439] loop0: detected capacity change from 0 to 512 [ 391.248203][ T9439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 391.285600][ T9439] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.518502][ T9439] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 391.550462][ T9439] Quota error (device loop0): write_blk: dquota write failed [ 391.599268][ T9439] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 391.633378][ T9446] overlayfs: failed to clone upperpath [ 391.843993][ T9439] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1023: Failed to acquire dquot type 0 [ 392.065065][ T9439] EXT4-fs (loop0): 1 truncate cleaned up [ 392.208721][ T9439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.301127][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.973780][ T9464] syzkaller0: entered promiscuous mode [ 394.979450][ T9464] syzkaller0: entered allmulticast mode [ 397.533286][ T9494] loop0: detected capacity change from 0 to 256 [ 397.552520][ T9490] syzkaller0: entered promiscuous mode [ 397.558068][ T9490] syzkaller0: entered allmulticast mode [ 397.565640][ T9494] FAT-fs (loop0): Unrecognized mount option "utg8=0" or missing value [ 397.603559][ T9494] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1043'. [ 398.973153][ T9521] fuse: Unknown parameter 'use00000000000000000000' [ 399.137744][ T9531] loop4: detected capacity change from 0 to 256 [ 399.145687][ T9531] FAT-fs (loop4): Unrecognized mount option "utg8=0" or missing value [ 399.161790][ T9531] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1054'. [ 399.731960][ T9541] loop4: detected capacity change from 0 to 128 [ 399.744050][ T9541] FAT-fs (loop4): Unrecognized mount option "dis#ícard" or missing value [ 400.476183][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 400.761059][ T9548] syzkaller0: entered promiscuous mode [ 400.786948][ T9548] syzkaller0: entered allmulticast mode [ 401.348433][ T9565] fuse: Unknown parameter 'use00000000000000000000' [ 402.193734][ T9569] loop0: detected capacity change from 0 to 256 [ 402.203068][ T9569] FAT-fs (loop0): Unrecognized mount option "utg8=0" or missing value [ 402.263618][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.283037][ T9569] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1064'. [ 402.806264][ T9578] loop0: detected capacity change from 0 to 1024 [ 404.020744][ T9591] fuse: Unknown parameter 'use00000000000000000000' [ 404.195869][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 405.233650][ T9601] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 405.490621][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 405.583472][ T9607] bridge5: entered promiscuous mode [ 405.706151][ T9609] loop4: detected capacity change from 0 to 1024 [ 406.364476][ T9616] loop0: detected capacity change from 0 to 128 [ 406.378071][ T9616] FAT-fs (loop0): Unrecognized mount option "dis#ícard" or missing value [ 407.301337][ T9624] fuse: Bad value for 'fd' [ 407.349016][ T9621] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1081'. [ 408.643322][ T9650] fuse: Unknown parameter 'user_i00000000000000000000' [ 411.143809][ T9673] rt1711h 0-0004: check vid/pid fail [ 411.164824][ T9673] rt1711h: probe of 0-0004 failed with error -5 [ 411.186617][ T9673] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04 [ 411.236706][ T9677] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1099'. [ 411.278233][ T5776] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 412.581039][ T9694] netlink: set zone limit has 8 unknown bytes [ 412.623311][ T9694] netlink: 'syz.3.1104': attribute type 10 has an invalid length. [ 412.649914][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.688635][ T9694] bridge_slave_1: left allmulticast mode [ 412.704937][ T9694] bridge_slave_1: left promiscuous mode [ 412.717045][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.296589][ T9703] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 413.500805][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 413.551248][ T9703] bridge5: entered promiscuous mode [ 414.468906][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 414.478157][ T9721] bridge_slave_0: left allmulticast mode [ 414.483987][ T9721] bridge_slave_0: left promiscuous mode [ 414.490393][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.862511][ T9740] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 415.953636][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 415.970651][ T9740] bridge0: entered promiscuous mode [ 416.635106][ T9756] loop0: detected capacity change from 0 to 512 [ 416.649404][ T9756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 416.704574][ T9756] EXT4-fs (loop0): 1 truncate cleaned up [ 416.725624][ T9756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.816423][ T28] audit: type=1326 audit(1785242475.616:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.0.1124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a2a59de99 code=0x0 [ 417.525472][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.847980][ T9799] syzkaller0: entered promiscuous mode [ 421.870250][ T9799] syzkaller0: entered allmulticast mode [ 422.312965][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.323686][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.333334][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.343949][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.362368][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 422.389057][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.453788][ T9810] overlayfs: failed to clone upperpath [ 422.669953][ T3561] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.772396][ T3561] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.057788][ T3561] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.302003][ T3561] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.544952][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 424.355321][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.410513][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.417798][ T9806] bridge_slave_0: entered allmulticast mode [ 424.446323][ T9806] bridge_slave_0: entered promiscuous mode [ 424.468146][ T5784] Bluetooth: hci0: command tx timeout [ 424.481054][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.506639][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.516706][ T9806] bridge_slave_1: entered allmulticast mode [ 424.528713][ T9806] bridge_slave_1: entered promiscuous mode [ 424.708428][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.766729][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.036256][ T9866] warning: `syz.0.1161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 426.024558][ T9806] team0: Port device team_slave_0 added [ 426.318343][ T9806] team0: Port device team_slave_1 added [ 426.566968][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.592688][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.605428][ T5784] Bluetooth: hci0: command tx timeout [ 426.629192][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.760896][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.860487][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.959352][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.241751][ T9806] hsr_slave_0: entered promiscuous mode [ 427.284855][ T9806] hsr_slave_1: entered promiscuous mode [ 427.298458][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.315695][ T9806] Cannot create hsr debugfs directory [ 428.708271][ T5784] Bluetooth: hci0: command tx timeout [ 429.573711][ T3561] hsr_slave_0: left promiscuous mode [ 429.590405][ T3561] hsr_slave_1: left promiscuous mode [ 429.705161][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.730239][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.784366][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.820268][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.832422][ T3561] bridge_slave_1: left allmulticast mode [ 429.838215][ T3561] bridge_slave_1: left promiscuous mode [ 429.848057][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.070373][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.546730][ T3561] bridge_slave_0: left allmulticast mode [ 430.579108][ T3561] bridge_slave_0: left promiscuous mode [ 430.586006][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.677425][ T3561] veth1_macvtap: left promiscuous mode [ 430.685281][ T3561] veth0_macvtap: left promiscuous mode [ 430.694098][ T3561] veth1_vlan: left promiscuous mode [ 430.705332][ T3561] veth0_vlan: left promiscuous mode [ 430.782922][ T5784] Bluetooth: hci0: command tx timeout [ 430.968377][ T3561] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 431.087434][ T3561] bond6 (unregistering): Released all slaves [ 431.117790][ T3561] bond5 (unregistering): Released all slaves [ 431.158853][ T3561] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 431.273907][ T3561] bond4 (unregistering): Released all slaves [ 431.334624][ T3561] bond3 (unregistering): Released all slaves [ 431.445720][ T3561] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 431.564751][ T3561] bond2 (unregistering): Released all slaves [ 431.587589][ T3561] bond1 (unregistering): Released all slaves [ 432.463285][ T9981] loop0: detected capacity change from 0 to 2048 [ 432.481787][ T9981] loop0: p1 < > p4 [ 432.488291][ T9981] loop0: p4 size 8388608 extends beyond EOD, truncated [ 432.663058][ T9983] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 432.943110][ T3561] team0 (unregistering): Port device team_slave_1 removed [ 433.023193][ T3561] team0 (unregistering): Port device team_slave_0 removed [ 433.076395][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.138509][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.478580][ T3561] bond0 (unregistering): Released all slaves [ 433.587535][ T9946] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.599999][ T9946] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.614645][ T9946] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.623906][ T9946] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 433.645770][ T9946] geneve2: entered promiscuous mode [ 433.655193][ T9946] geneve2: entered allmulticast mode [ 433.700395][ T9950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.764266][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1188'. [ 433.774530][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1188'. [ 434.116896][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.173654][T10001] batadv_slave_1: entered promiscuous mode [ 434.348812][ T9806] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 434.787197][ T9806] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.947422][ T9806] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.992962][ T9806] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 435.077229][T10015] fuse: Bad value for 'fd' [ 435.265916][ T3561] IPVS: stop unused estimator thread 0... [ 435.456376][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.519592][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.559652][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.568034][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.595240][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.602636][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.830587][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'. [ 435.839670][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'. [ 437.201743][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.693035][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 438.154665][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1218'. [ 438.164028][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1218'. [ 438.384994][T10090] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 439.190013][ T9806] veth0_vlan: entered promiscuous mode [ 439.353760][ T9806] veth1_vlan: entered promiscuous mode [ 439.381394][T10102] overlayfs: disabling nfs_export due to verity=on [ 439.387980][T10102] overlayfs: conflicting options: userxattr,verity=on [ 439.442799][ T9806] veth0_macvtap: entered promiscuous mode [ 439.491396][ T9806] veth1_macvtap: entered promiscuous mode [ 439.547423][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.587790][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.612237][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.638474][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.657251][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.688331][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.716922][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.734910][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.748127][ T9806] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.763573][ T9806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.778419][ T9806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.794146][ T9806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.035779][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1226'. [ 440.045171][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1226'. [ 440.065671][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.113392][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.306765][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.311733][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.321739][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.328837][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.432433][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 440.821931][T10128] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 442.587113][T10162] 9pnet_fd: Insufficient options for proto=fd [ 442.605127][T10162] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 442.746484][ T5837] IPVS: starting estimator thread 0... [ 442.940288][T10164] IPVS: using max 23 ests per chain, 55200 per kthread [ 443.597051][T10183] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1239'. [ 445.655197][T10222] loop0: detected capacity change from 0 to 512 [ 445.726654][T10225] fuse: Unknown parameter '0x0000000000000003' [ 445.733489][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.335114][T10237] loop5: detected capacity change from 0 to 8192 [ 447.713557][T10252] fuse: Unknown parameter '0x0000000000000003' [ 449.568817][T10294] fuse: Unknown parameter '0x0000000000000003' [ 449.861533][T10306] loop5: detected capacity change from 0 to 512 [ 451.092083][T10321] loop5: detected capacity change from 0 to 256 [ 451.141446][T10321] FAT-fs (loop5): Unrecognized mount option "utg8=0" or missing value [ 451.650899][T10338] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 451.896465][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'. [ 451.920976][T10344] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1284'. [ 456.392674][T10391] loop5: detected capacity change from 0 to 8192 [ 456.472345][T10391] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 456.790982][T10397] fuse: Unknown parameter 'fd0x0000000000000003' [ 458.229711][T10422] fuse: Unknown parameter 'fd0x0000000000000003' [ 458.320485][T10425] loop5: detected capacity change from 0 to 512 [ 463.156249][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'. [ 463.165451][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'. [ 465.982079][T10508] loop5: detected capacity change from 0 to 2048 [ 466.078504][T10508] loop5: p1 < > p4 [ 466.100873][T10508] loop5: p4 size 8388608 extends beyond EOD, truncated [ 466.195465][ T5141] loop5: p1 < > p4 [ 466.229942][ T5141] loop5: p4 size 8388608 extends beyond EOD, truncated [ 467.180790][ T8387] udevd[8387]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 467.195049][ T7957] udevd[7957]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 467.494297][ T7957] udevd[7957]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 467.508940][ T8387] udevd[8387]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 469.185346][T10556] loop5: detected capacity change from 0 to 2048 [ 469.271863][T10556] loop5: p1 < > p4 [ 469.280651][T10556] loop5: p4 size 8388608 extends beyond EOD, truncated [ 471.787334][T10576] fuse: Bad value for 'fd' [ 471.902558][T10577] loop5: detected capacity change from 0 to 512 [ 472.187863][T10583] loop0: detected capacity change from 0 to 128 [ 473.113388][ T8386] udevd[8386]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 473.138882][ T8387] udevd[8387]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 473.938589][T10620] fuse: Bad value for 'fd' [ 475.159717][T10634] loop0: detected capacity change from 0 to 128 [ 476.822412][T10681] 9pnet_fd: Insufficient options for proto=fd [ 476.830256][T10681] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 476.974648][ T27] IPVS: starting estimator thread 0... [ 477.490287][T10683] IPVS: using max 21 ests per chain, 50400 per kthread [ 477.522692][T10689] loop0: detected capacity change from 0 to 128 [ 477.797900][T10705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.033779][T10732] 9pnet_fd: Insufficient options for proto=fd [ 479.041724][T10732] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 481.839837][T10775] 9pnet_fd: Insufficient options for proto=fd [ 481.847870][T10775] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 482.699976][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 484.910298][T10830] 9pnet_fd: Insufficient options for proto=fd [ 484.917637][T10830] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 487.664327][T10869] loop0: detected capacity change from 0 to 512 [ 487.715834][T10869] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 487.793303][T10869] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 487.876274][T10869] EXT4-fs (loop0): mount failed [ 490.558431][T10925] overlayfs: failed to clone upperpath [ 491.224856][T10948] overlayfs: failed to clone upperpath [ 491.586953][T10966] loop0: detected capacity change from 0 to 2048 [ 491.686176][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.726692][T10966] loop0: detected capacity change from 0 to 1024 [ 491.733842][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.050763][T11002] fuse: Bad value for 'fd' [ 495.406401][T11022] loop0: detected capacity change from 0 to 2048 [ 495.859196][T11031] fuse: Bad value for 'fd' [ 496.136372][T11043] fuse: Bad value for 'fd' [ 496.399745][T11048] loop5: detected capacity change from 0 to 128 [ 496.407324][T11048] FAT-fs (loop5): Unrecognized mount option "dis#ícard" or missing value [ 496.453217][ T7957] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.462885][T11051] overlayfs: failed to clone upperpath [ 496.856291][T11059] fuse: Bad value for 'fd' [ 497.505951][T11072] loop5: detected capacity change from 0 to 736 [ 499.297249][T11121] loop0: detected capacity change from 0 to 1024 [ 499.597223][T11136] i2c i2c-0: new_device: Extra parameters [ 499.703363][T11140] loop0: detected capacity change from 0 to 512 [ 499.732306][T11140] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 499.760822][T11140] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 499.793225][T11140] EXT4-fs (loop0): mount failed [ 500.417399][T11161] overlayfs: failed to clone upperpath [ 500.498335][T11163] overlayfs: failed to clone upperpath [ 501.747716][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.754377][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.219809][T11212] loop5: detected capacity change from 0 to 1024 [ 502.258379][T11216] i2c i2c-0: Failed to register i2c client rt1711h at 0x04 (-16) [ 504.577516][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 505.376305][T11270] loop0: detected capacity change from 0 to 2048 [ 506.407587][T11288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1562'. [ 506.583661][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 507.455483][T11306] loop0: detected capacity change from 0 to 1024 [ 507.461741][T11310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1571'. [ 507.540588][ T7957] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 507.614630][T11306] autofs4:pid:11306:autofs_fill_super: called with bogus options [ 508.141476][T11321] 9pnet_fd: Insufficient options for proto=fd [ 508.148557][T11321] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 508.819515][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1575'. [ 509.486691][T11338] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1580'. [ 509.500151][T11338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1580'. [ 509.637614][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1584'. [ 510.181244][T11354] 9pnet_fd: Insufficient options for proto=fd [ 510.189075][T11354] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 511.359699][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 511.889527][T11385] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 513.624641][T11414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.928617][T11416] fuse: Bad value for 'fd' [ 514.509382][T11422] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 515.417219][T11433] loop5: detected capacity change from 0 to 2048 [ 515.517398][T11433] loop5: detected capacity change from 0 to 1024 [ 516.006758][T11443] loop0: detected capacity change from 0 to 256 [ 516.747561][T11458] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 519.836241][T11498] 9pnet_fd: Insufficient options for proto=fd [ 519.844040][T11498] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 519.934337][T11497] loop5: detected capacity change from 0 to 512 [ 520.170333][T11497] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 520.528664][T11497] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 520.569410][T11497] EXT4-fs (loop5): mount failed [ 521.330552][T11517] overlayfs: failed to clone upperpath [ 522.002256][T11536] 9pnet_fd: Insufficient options for proto=fd [ 522.009988][T11536] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 522.865985][T11545] overlayfs: failed to clone upperpath [ 524.368164][T11571] 9pnet_fd: Insufficient options for proto=fd [ 524.376186][T11571] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 525.239895][T11579] overlayfs: failed to clone upperpath [ 526.831731][T11611] 9pnet_fd: Insufficient options for proto=fd [ 526.839636][T11611] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 527.550996][T11614] overlayfs: failed to clone upperpath [ 529.198082][T11649] overlayfs: failed to clone upperpath [ 529.264344][T11651] 9pnet_fd: Insufficient options for proto=fd [ 529.272356][T11651] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 531.195556][T11678] overlayfs: failed to clone upperpath [ 531.407158][T11689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1695'. [ 531.683020][T11694] 9pnet_fd: Insufficient options for proto=fd [ 531.691080][T11694] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 532.445715][T11701] overlayfs: failed to clone upperpath [ 532.736066][T11711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1704'. [ 534.165418][T11727] 9pnet_fd: Insufficient options for proto=fd [ 534.172624][T11727] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 534.604760][T11736] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1713'. [ 534.609868][T11732] overlayfs: failed to clone upperpath [ 534.888996][T11746] netlink: 'syz.5.1718': attribute type 1 has an invalid length. [ 535.870978][T11758] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1721'. [ 536.630289][T11766] loop5: detected capacity change from 0 to 256 [ 536.637830][T11766] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 536.696281][T11766] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 536.736516][T11769] overlayfs: failed to clone upperpath [ 537.109509][T11777] sctp: [Deprecated]: syz.0.1728 (pid 11777) Use of int in max_burst socket option deprecated. [ 537.109509][T11777] Use struct sctp_assoc_value instead [ 537.313727][T11780] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 538.118340][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1729'. [ 538.477256][T11796] netlink: 'syz.0.1734': attribute type 4 has an invalid length. [ 538.601449][T11803] netlink: 'syz.0.1734': attribute type 4 has an invalid length. [ 538.868746][T11814] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.876232][T11814] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.923745][T11814] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.931379][T11814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.941299][T11814] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.948498][T11814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.026961][T11814] team0: Port device bridge0 added [ 539.039835][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 539.261139][T11830] netlink: 'syz.5.1743': attribute type 1 has an invalid length. [ 539.529157][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1743'. [ 544.567240][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1769'. [ 544.607267][T11920] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 544.793052][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 545.199800][T11929] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1772'. [ 545.395697][T11940] loop0: detected capacity change from 0 to 16 [ 545.435418][T11940] erofs: (device loop0): mounted with root inode @ nid 36. [ 547.574887][T11940] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 549.334750][T12006] loop5: detected capacity change from 0 to 512 [ 549.502658][T12006] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 549.598398][T12006] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 549.721088][T12006] EXT4-fs (loop5): mount failed [ 552.265801][T12052] loop0: detected capacity change from 0 to 512 [ 552.278075][T12052] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 552.359602][T12052] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 552.385821][T12052] EXT4-fs (loop0): mount failed [ 553.218045][T12075] capability: warning: `syz.3.1809' uses 32-bit capabilities (legacy support in use) [ 556.956799][T12134] 9pnet_fd: Insufficient options for proto=fd [ 556.964647][T12134] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 557.795982][T12143] loop5: detected capacity change from 0 to 512 [ 557.837452][T12143] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 557.939145][T12143] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 557.995562][T12143] EXT4-fs (loop5): mount failed [ 560.989282][T12201] overlayfs: failed to clone upperpath [ 561.250140][T12212] loop0: detected capacity change from 0 to 512 [ 561.287442][T12212] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 562.334005][T12232] overlayfs: failed to clone upperpath [ 563.188383][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.194860][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.567672][T12253] overlayfs: failed to clone upperpath [ 564.321801][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 564.331010][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 565.104773][T12282] overlayfs: failed to clone upperpath [ 565.918091][T12316] overlayfs: failed to clone upperpath [ 569.009791][T12371] loop0: detected capacity change from 0 to 16 [ 569.037901][T12371] erofs: (device loop0): mounted with root inode @ nid 36. [ 573.877978][T12440] 9pnet_fd: Insufficient options for proto=fd [ 573.885627][T12440] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 575.772368][T12470] 9pnet_fd: Insufficient options for proto=fd [ 575.779636][T12470] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 578.957751][T12490] overlayfs: failed to clone upperpath [ 579.206905][T12494] loop0: detected capacity change from 0 to 512 [ 579.256917][T12494] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.478923][T12494] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 579.503852][T12494] EXT4-fs (loop0): mount failed [ 580.387588][T12513] erspan0: entered promiscuous mode [ 580.404291][T12513] vlan0: entered promiscuous mode [ 580.470891][T12514] 9pnet_fd: Insufficient options for proto=fd [ 580.477975][T12514] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 581.251964][T12525] loop0: detected capacity change from 0 to 128 [ 581.259498][T12525] FAT-fs (loop0): Unrecognized mount option "dis#ícard" or missing value [ 584.250979][T12560] 9pnet_fd: Insufficient options for proto=fd [ 584.258046][T12560] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 586.279785][T12582] overlayfs: failed to clone upperpath [ 587.658949][T12602] 9pnet_fd: Insufficient options for proto=fd [ 587.666268][T12602] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 587.936063][T12605] loop0: detected capacity change from 0 to 512 [ 588.032081][T12605] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 588.140341][T12605] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 588.980897][T12605] EXT4-fs (loop0): mount failed [ 590.980361][T12632] cgroup2: Unknown parameter 'favord' [ 591.274529][T12640] 9pnet_fd: Insufficient options for proto=fd [ 591.281994][T12640] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 592.266619][T12663] loop0: detected capacity change from 0 to 128 [ 592.278680][T12663] FAT-fs (loop0): Unrecognized mount option "dis#ícard" or missing value [ 592.934366][T12669] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 592.968189][T12666] loop5: detected capacity change from 0 to 512 [ 593.015040][T12666] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 593.170144][T12666] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 593.203430][T12666] EXT4-fs (loop5): mount failed [ 593.709490][T12688] 9pnet_fd: Insufficient options for proto=fd [ 593.716675][T12688] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 594.475548][T12704] loop5: detected capacity change from 0 to 128 [ 594.488858][T12704] FAT-fs (loop5): Unrecognized mount option "dis#ícard" or missing value [ 595.082107][ T7957] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 595.822656][T12726] 9pnet_fd: Insufficient options for proto=fd [ 595.829672][T12726] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 596.713605][T12735] binder: 12734:12735 unknown command 29196 [ 596.719577][T12735] binder: 12734:12735 ioctl c0306201 0 returned -22 [ 597.209079][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2032'. [ 597.218398][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2032'. [ 597.240519][T12750] 9pnet_fd: Insufficient options for proto=fd [ 597.248692][T12750] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 597.706673][T12762] input: syz1 as /devices/virtual/input/input6 [ 598.973206][T12783] 9pnet_fd: Insufficient options for proto=fd [ 598.980281][T12783] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 599.187610][T12790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2051'. [ 599.196953][T12790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2051'. [ 601.034119][T12817] 9pnet_fd: Insufficient options for proto=fd [ 601.041683][T12817] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 601.671963][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2063'. [ 601.681399][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2063'. [ 603.382087][T12857] 9pnet_fd: Insufficient options for proto=fd [ 603.390478][T12857] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 603.960451][ T5814] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 604.200636][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 604.266455][ T5814] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.374701][ T5814] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.572321][ T5814] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.760170][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.768221][ T5814] usb 6-1: Product: syz [ 604.782364][ T5814] usb 6-1: Manufacturer: syz [ 604.787114][ T5814] usb 6-1: SerialNumber: syz [ 604.829531][T12884] veth1_macvtap: left promiscuous mode [ 604.841185][T12884] macsec0: entered allmulticast mode [ 605.036112][ T5814] usb 6-1: 0:2 : does not exist [ 605.054956][ T5814] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 605.075991][T12893] 9pnet_fd: Insufficient options for proto=fd [ 605.083387][T12893] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 605.188219][ T5814] usb 6-1: USB disconnect, device number 2 [ 605.373142][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.546055][T11684] Bluetooth: hci4: Frame reassembly failed (-84) [ 606.696734][T12951] 9pnet_fd: Insufficient options for proto=fd [ 606.712103][T12951] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 607.580457][ T5776] Bluetooth: hci4: command 0x1003 tx timeout [ 607.600256][ T5784] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 608.169623][T12995] tipc: Can't bind to reserved service type 0 [ 608.300545][T13004] loop5: detected capacity change from 0 to 512 [ 608.341647][T13004] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.427822][T13004] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 608.468681][T13004] EXT4-fs (loop5): mount failed [ 608.557121][T13018] overlayfs: failed to clone upperpath [ 609.173138][T13034] input: syz0 as /devices/virtual/input/input7 [ 609.205092][T13039] 9pnet_fd: Insufficient options for proto=fd [ 609.215927][T13039] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 609.892601][T13061] overlayfs: failed to clone lowerpath [ 610.842048][T13093] overlayfs: overlapping lowerdir path [ 612.291085][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 612.654427][T13142] overlayfs: overlapping lowerdir path [ 613.134630][T13152] loop5: detected capacity change from 0 to 512 [ 613.182488][T13152] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 613.238887][T13152] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 613.361305][T13152] EXT4-fs (loop5): mount failed [ 613.513496][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.525100][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.534308][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.687605][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.697290][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 613.705752][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 613.748545][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.763915][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.773272][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.786719][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.794752][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 613.804663][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 614.205620][T13162] chnl_net:caif_netlink_parms(): no params data found [ 614.492714][T13162] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.499972][T13162] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.522633][T13162] bridge_slave_0: entered allmulticast mode [ 614.542331][T13162] bridge_slave_0: entered promiscuous mode [ 614.561662][T13162] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.590712][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.612378][T13162] bridge_slave_1: entered allmulticast mode [ 614.624781][T13162] bridge_slave_1: entered promiscuous mode [ 614.806617][T13162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.870927][T13162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.016995][T13162] team0: Port device team_slave_0 added [ 615.032534][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 615.047882][T13162] team0: Port device team_slave_1 added [ 615.111916][T13162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.120542][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.175073][T13162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.234747][ T995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.249539][ T995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 615.311869][T13162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.318875][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.377247][T13162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.424575][ T995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.436713][ T995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 615.503656][ T995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.522506][ T995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 615.587045][T13162] hsr_slave_0: entered promiscuous mode [ 615.595749][T13162] hsr_slave_1: entered promiscuous mode [ 615.603101][T13162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.613272][T13162] Cannot create hsr debugfs directory [ 615.743566][ T995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.754021][ T995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 615.850089][ T5815] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 615.910340][ T5784] Bluetooth: hci4: command tx timeout [ 616.095734][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.127430][ T5815] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 616.190927][ T5815] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 616.256743][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.275651][ T5815] usb 6-1: Product: syz [ 616.285810][ T5815] usb 6-1: Manufacturer: syz [ 616.306289][ T5815] usb 6-1: SerialNumber: syz [ 616.366202][ T5815] usb-storage 6-1:1.0: USB Mass Storage device detected [ 616.462014][ T5815] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 616.491502][ T5815] scsi host1: usb-storage 6-1:1.0 [ 616.668317][ T5764] usb 6-1: USB disconnect, device number 3 [ 617.801883][T13162] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 617.818566][T13162] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 617.981223][ T5784] Bluetooth: hci4: command tx timeout [ 618.047506][T13162] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 618.058717][T13162] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.759266][ T995] hsr_slave_0: left promiscuous mode [ 618.931924][ T995] hsr_slave_1: left promiscuous mode [ 619.010418][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.017901][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.070752][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.169430][ T995] veth1_vlan: left promiscuous mode [ 619.180021][ T995] veth0_vlan: left promiscuous mode [ 619.512077][ T995] bond16 (unregistering): Released all slaves [ 619.574722][ T995] bond15 (unregistering): Released all slaves [ 619.612637][ T995] bond14 (unregistering): Released all slaves [ 619.649114][ T995] bond13 (unregistering): Released all slaves [ 619.714587][ T995] bond12 (unregistering): Released all slaves [ 619.757166][ T995] bond11 (unregistering): Released all slaves [ 619.802609][ T995] bond10 (unregistering): Released all slaves [ 619.834278][ T995] bond9 (unregistering): Released all slaves [ 619.865051][ T995] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 619.928669][ T995] bond8 (unregistering): Released all slaves [ 619.945971][ T995] bond7 (unregistering): Released all slaves [ 619.964554][ T995] bond6 (unregistering): Released all slaves [ 619.991097][ T995] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 620.100127][ T5784] Bluetooth: hci4: command tx timeout [ 620.133986][ T995] bond5 (unregistering): Released all slaves [ 620.174511][ T995] bond4 (unregistering): Released all slaves [ 620.797402][ T995] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 621.271819][ T995] bond3 (unregistering): Released all slaves [ 621.310353][ T995] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 621.388483][ T995] bond2 (unregistering): Released all slaves [ 621.432699][ T995] bond1 (unregistering): Released all slaves [ 622.140564][ T5784] Bluetooth: hci4: command tx timeout [ 622.573511][T13316] loop5: detected capacity change from 0 to 128 [ 622.588589][T13316] FAT-fs (loop5): Unrecognized mount option "dis#ícard" or missing value [ 623.441146][ T995] team0 (unregistering): Port device team_slave_1 removed [ 623.513439][ T995] team0 (unregistering): Port device team_slave_0 removed [ 623.604249][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.710396][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.252504][ T995] bond0 (unregistering): Released all slaves [ 624.555783][T13162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.582439][T13336] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 624.631021][T13162] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.679028][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.687787][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.713768][T13336] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 624.767446][T13284] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.774750][T13284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.987601][T13284] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.994877][T13284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.714144][ T995] IPVS: stop unused estimator thread 0... [ 626.058374][T13162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.232965][T13162] veth0_vlan: entered promiscuous mode [ 626.257729][T13162] veth1_vlan: entered promiscuous mode [ 626.335348][T13162] veth0_macvtap: entered promiscuous mode [ 626.366750][T13162] veth1_macvtap: entered promiscuous mode [ 626.373181][T13362] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 626.387809][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.417722][T13362] CIFS: Attempting to mount //127.0.0.1/share [ 626.434123][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.455627][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.481045][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.496418][T13162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.512898][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.529211][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.546175][T13162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.559302][T13162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.571608][T13162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.592966][T13162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.602170][T13162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.616619][T13162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.626533][T13162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.815552][T13284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.843619][T13284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.855454][T13284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.864691][T13284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.497402][T13362] CIFS: VFS: Error connecting to socket. Aborting operation. [ 627.538144][T13362] CIFS: VFS: cifs_mount failed w/return code = -4 [ 627.997463][T13378] 9pnet_fd: Insufficient options for proto=fd [ 628.004022][ T27] IPVS: starting estimator thread 0... [ 628.023082][T13378] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 628.110155][T13379] IPVS: using max 23 ests per chain, 55200 per kthread [ 628.868879][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 628.890482][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 628.902887][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.908392][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.934130][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.954608][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 628.963378][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 629.172538][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.278638][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.377346][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.489310][T13388] chnl_net:caif_netlink_parms(): no params data found [ 629.767749][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.794363][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.811048][T13388] bridge_slave_0: entered allmulticast mode [ 629.818424][T13388] bridge_slave_0: entered promiscuous mode [ 629.841530][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.876893][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.888606][T13388] bridge_slave_1: entered allmulticast mode [ 629.908692][T13388] bridge_slave_1: entered promiscuous mode [ 630.118027][T13388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.175391][T13388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.335695][T13388] team0: Port device team_slave_0 added [ 630.354766][T13388] team0: Port device team_slave_1 added [ 630.508077][T13388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.523419][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.588470][T13388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.626997][T13388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.648785][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.687341][T13388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.796623][T13388] hsr_slave_0: entered promiscuous mode [ 630.804424][T13388] hsr_slave_1: entered promiscuous mode [ 630.818893][T13388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.837584][T13388] Cannot create hsr debugfs directory [ 631.031263][ T5784] Bluetooth: hci1: command tx timeout [ 631.327190][ T12] hsr_slave_0: left promiscuous mode [ 631.339085][ T12] hsr_slave_1: left promiscuous mode [ 631.366083][ T12] bridge_slave_1: left allmulticast mode [ 631.378747][ T12] bridge_slave_1: left promiscuous mode [ 631.403879][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.425808][ T12] bridge_slave_0: left allmulticast mode [ 631.443122][ T12] bridge_slave_0: left promiscuous mode [ 631.461058][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.575665][ T12] veth1_macvtap: left promiscuous mode [ 631.591876][ T12] veth0_macvtap: left promiscuous mode [ 631.598103][ T12] veth1_vlan: left promiscuous mode [ 631.623197][ T12] veth0_vlan: left promiscuous mode [ 632.201195][ T5833] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 632.296957][ T12] bond4 (unregistering): Released all slaves [ 632.321333][T13463] 9pnet_fd: Insufficient options for proto=fd [ 632.328387][T13463] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 632.329025][ T12] bond3 (unregistering): Released all slaves [ 632.421228][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 632.426365][ T5833] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.456497][ T5833] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.484203][ T5833] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.489709][ T12] bond2 (unregistering): Released all slaves [ 632.513211][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.534398][ T5833] usb 1-1: Product: syz [ 632.542207][ T5833] usb 1-1: Manufacturer: syz [ 632.554930][ T12] bond1 (unregistering): Released all slaves [ 632.555426][ T5833] usb 1-1: SerialNumber: syz [ 632.751504][ T5837] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 632.812753][ T5833] usb 1-1: 0:2 : does not exist [ 632.874999][ T5833] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 632.933506][ T5833] usb 1-1: USB disconnect, device number 3 [ 632.960170][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 632.972945][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.004348][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.014159][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.053007][ T5837] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.068843][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.078750][ T5837] usb 4-1: Product: syz [ 633.097719][ T5837] usb 4-1: Manufacturer: syz [ 633.107859][ T5837] usb 4-1: SerialNumber: syz [ 633.116656][ T5784] Bluetooth: hci1: command tx timeout [ 633.361835][ T5837] usb 4-1: 0:2 : does not exist [ 633.370989][ T5837] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 633.414433][ T5837] usb 4-1: USB disconnect, device number 4 [ 633.477023][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.843309][ T12] team0 (unregistering): Port device team_slave_1 removed [ 633.943643][ T12] team0 (unregistering): Port device team_slave_0 removed [ 634.010502][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.111295][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.486317][T13476] loop5: detected capacity change from 0 to 2048 [ 634.759060][ T12] bond0 (unregistering): Released all slaves [ 635.180475][ T5784] Bluetooth: hci1: command tx timeout [ 635.539027][T13473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2236'. [ 636.316564][T13498] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 636.337872][T13498] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 636.641409][T13503] loop5: detected capacity change from 0 to 2048 [ 636.711845][T13505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2246'. [ 636.803258][T13503] loop5: detected capacity change from 0 to 1024 [ 636.936830][ T12] IPVS: stop unused estimator thread 0... [ 637.320478][ T5814] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 637.330490][ T5784] Bluetooth: hci1: command tx timeout [ 637.459697][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 637.627478][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.670299][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 637.678138][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.715750][T13388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 637.742099][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.760901][ T5814] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 637.773605][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.779714][T13388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 637.790404][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.803977][T13388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 637.823441][ T5814] usb 4-1: config 0 descriptor?? [ 637.862821][ T5816] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.872622][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.891078][ T5816] usb 1-1: Product: syz [ 637.906159][ T5816] usb 1-1: Manufacturer: syz [ 637.916333][ T5816] usb 1-1: SerialNumber: syz [ 638.016069][T13388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 638.159141][ T5816] usb 1-1: 0:2 : does not exist [ 638.196398][T13388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.217957][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.230915][ T5816] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 638.249775][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.257044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.316219][T13528] random: crng reseeded on system resumption [ 638.319671][ T5814] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x2 [ 638.355014][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.362698][T11684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.386383][ T5816] usb 1-1: USB disconnect, device number 4 [ 638.425107][ T5814] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 638.467108][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.896691][ T5814] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 638.917554][ T5814] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 638.953826][ T5814] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71 [ 639.026690][ T5814] usb 4-1: USB disconnect, device number 5 [ 639.072657][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.187051][T13388] veth0_vlan: entered promiscuous mode [ 639.207929][T13388] veth1_vlan: entered promiscuous mode [ 639.282149][T13388] veth0_macvtap: entered promiscuous mode [ 639.314848][T13388] veth1_macvtap: entered promiscuous mode [ 639.357216][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.368410][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.383428][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.395623][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.436754][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.481274][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.502583][T13388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.534512][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.557813][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.589296][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.611437][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.630121][T13388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.696738][T13388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.731623][T13388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.739279][T13558] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2255'. [ 639.774924][T13388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.802299][T13388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.820292][T13388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.849765][T13388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.151290][T13284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.181324][T13284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.260575][T11684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.286261][T11684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.278922][T13604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2265'. [ 641.696269][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 641.910641][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 641.922541][ T5815] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 641.931961][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.944183][ T5815] usb 6-1: config 0 descriptor?? [ 641.956324][ T5815] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 642.040712][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 642.120123][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 642.221259][ T5814] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 642.252006][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.265391][ T5834] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 642.274749][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.283681][ T5834] usb 4-1: Product: syz [ 642.287897][ T5834] usb 4-1: Manufacturer: syz [ 642.292576][ T5834] usb 4-1: SerialNumber: syz [ 642.307800][ T5834] usb-storage 4-1:1.0: USB Mass Storage device detected [ 642.315402][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 642.324940][ T5834] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 642.334288][ T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 642.342697][ T5834] scsi host1: usb-storage 4-1:1.0 [ 642.350110][ T27] usb 3-1: config 0 has no interface number 0 [ 642.356308][ T27] usb 3-1: config 0 interface 184 has no altsetting 0 [ 642.370266][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 642.380312][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.388465][ T27] usb 3-1: Product: syz [ 642.393044][ T27] usb 3-1: Manufacturer: syz [ 642.397705][ T27] usb 3-1: SerialNumber: syz [ 642.403132][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 642.413050][ T27] usb 3-1: config 0 descriptor?? [ 642.423604][ T27] smsc75xx v1.0.0 [ 642.424367][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.441109][ T5814] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.453113][ T5814] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.463006][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.471504][ T5814] usb 1-1: Product: syz [ 642.476035][ T5814] usb 1-1: Manufacturer: syz [ 642.481128][ T5814] usb 1-1: SerialNumber: syz [ 642.555311][ T5833] usb 4-1: USB disconnect, device number 6 [ 642.697071][ T5814] usb 1-1: 0:2 : does not exist [ 642.711657][ T5814] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 642.744999][ T5814] usb 1-1: USB disconnect, device number 5 [ 642.783344][ T8387] udevd[8387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.408158][ T5815] usb 6-1: USB disconnect, device number 4 [ 643.441059][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 643.461393][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 643.510950][ T5814] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 643.642614][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 643.663108][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 643.675180][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 643.686208][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 643.696691][ T27] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 643.700492][ T5814] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 643.716427][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.724937][ T5814] usb 4-1: Product: syz [ 643.729123][ T5814] usb 4-1: Manufacturer: syz [ 643.734403][ T5814] usb 4-1: SerialNumber: syz [ 643.762652][ T5814] usb 4-1: config 0 descriptor?? [ 643.950274][ T5833] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 643.979818][ T5814] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 644.263481][ T5833] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.279865][ T5833] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 644.965293][ T5837] usb 3-1: USB disconnect, device number 3 [ 645.059248][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 645.068769][ T5833] usb 1-1: Product: syz [ 645.073193][ T5833] usb 1-1: Manufacturer: syz [ 645.078194][ T5833] usb 1-1: SerialNumber: syz [ 645.248511][T13645] block2mtd: too many arguments [ 645.343348][ T5833] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 645.475102][T13651] CIFS: Attempting to mount //127.0.0.1/share [ 645.495884][ T5814] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 645.512980][ T5814] usb 4-1: USB disconnect, device number 7 [ 645.617272][ T5833] usb 1-1: USB disconnect, device number 6 [ 645.641540][ T5833] usblp0: removed [ 646.424773][T13651] CIFS: VFS: cifs_mount failed w/return code = -112 [ 647.104877][T13684] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 647.122841][T13684] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 647.270092][ T5837] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 647.270196][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 647.468878][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 647.481417][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 647.498337][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 647.521431][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 647.527750][ T5837] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 647.541579][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.553665][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.560282][ T5814] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 647.567664][ T5837] usb 3-1: Product: syz [ 647.579610][ T5837] usb 3-1: Manufacturer: syz [ 647.584322][ T5814] usb 1-1: config 1 interface 0 has no altsetting 0 [ 647.586878][ T5814] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 647.604615][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.606497][ T5837] usb 3-1: SerialNumber: syz [ 647.623813][ T5814] usb 1-1: Product: syz [ 647.624087][ T5837] usb 3-1: config 0 descriptor?? [ 647.628013][ T5814] usb 1-1: Manufacturer: syz [ 647.628033][ T5814] usb 1-1: SerialNumber: syz [ 647.663834][ T5837] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 647.677171][ T5837] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 647.859697][ T5814] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 647.886775][ T5126] bcm5974 1-1:1.0: could not read from device [ 647.898815][ T5833] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 647.930297][ T5126] bcm5974 1-1:1.0: could not read from device [ 647.942398][ T5814] usb 1-1: USB disconnect, device number 7 [ 647.953336][ T5126] bcm5974 1-1:1.0: could not read from device [ 648.101154][ T5833] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.120364][ T5833] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.134194][ T5833] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.157849][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.166426][ T5833] usb 6-1: Product: syz [ 648.175209][ T5833] usb 6-1: Manufacturer: syz [ 648.179882][ T5833] usb 6-1: SerialNumber: syz [ 648.282950][ T5837] em28xx 3-1:0.0: chip ID is em2874 [ 648.415511][ T5833] usb 6-1: 0:2 : does not exist [ 648.452055][ T5833] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 648.520779][ T5833] usb 6-1: USB disconnect, device number 5 [ 648.566676][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.624291][ T5837] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 648.654494][ T5837] em28xx 3-1:0.0: board has no eeprom [ 648.750127][ T5837] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 648.758141][T13709] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 648.765674][T13709] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 648.770382][ T5837] em28xx 3-1:0.0: dvb set to bulk mode. [ 648.782834][ T27] em28xx 3-1:0.0: Binding DVB extension [ 648.813949][ T5837] usb 3-1: USB disconnect, device number 4 [ 648.840502][ T5837] em28xx 3-1:0.0: Disconnecting em28xx [ 648.946299][ T27] em28xx 3-1:0.0: Registering input extension [ 649.142216][ T27] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 649.174692][ T27] Registered IR keymap rc-empty [ 649.198237][ T27] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 649.240539][ T27] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 649.299275][ T27] em28xx 3-1:0.0: Input extension successfully initialized [ 649.329569][ T5837] em28xx 3-1:0.0: Closing input extension [ 649.408469][ T9806] ================================================================== [ 649.416646][ T9806] BUG: KASAN: slab-use-after-free in nfsd_shutdown_threads+0x8d/0x1a0 [ 649.424969][ T9806] Write of size 4 at addr ffff888030696050 by task syz-executor/9806 [ 649.433054][ T9806] [ 649.435465][ T9806] CPU: 0 PID: 9806 Comm: syz-executor Not tainted syzkaller #0 [ 649.443077][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 649.453263][ T9806] Call Trace: [ 649.456547][ T9806] [ 649.459591][ T9806] dump_stack_lvl+0x18c/0x250 [ 649.464408][ T9806] ? __lock_acquire+0x7d80/0x7d80 [ 649.469539][ T9806] ? show_regs_print_info+0x20/0x20 [ 649.474751][ T9806] ? load_image+0x420/0x420 [ 649.479295][ T9806] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 649.484864][ T9806] ? __virt_addr_valid+0x10c/0x380 [ 649.490122][ T9806] ? __virt_addr_valid+0x10c/0x380 [ 649.495263][ T9806] ? __virt_addr_valid+0x10c/0x380 [ 649.500479][ T9806] ? __virt_addr_valid+0x10c/0x380 [ 649.505788][ T9806] print_report+0xa8/0x210 [ 649.510233][ T9806] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 649.510948][ T5837] em28xx 3-1:0.0: Freeing device [ 649.515606][ T9806] kasan_report+0x117/0x150 [ 649.525059][ T9806] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 649.530499][ T9806] kasan_check_range+0x241/0x290 [ 649.535550][ T9806] nfsd_shutdown_threads+0x8d/0x1a0 [ 649.540771][ T9806] nfsd_umount+0x42/0xc0 [ 649.545063][ T9806] deactivate_locked_super+0x97/0x100 [ 649.550554][ T9806] cleanup_mnt+0x3d7/0x460 [ 649.555038][ T9806] task_work_run+0x1d4/0x260 [ 649.559681][ T9806] ? task_work_cancel+0x220/0x220 [ 649.564734][ T9806] ? exit_to_user_mode_loop+0x3b/0x110 [ 649.570215][ T9806] exit_to_user_mode_loop+0xe6/0x110 [ 649.575521][ T9806] exit_to_user_mode_prepare+0xee/0x180 [ 649.581091][ T9806] syscall_exit_to_user_mode+0x1a/0x50 [ 649.586654][ T9806] do_syscall_64+0x61/0xb0 [ 649.591091][ T9806] ? clear_bhb_loop+0x40/0x90 [ 649.595915][ T9806] ? clear_bhb_loop+0x40/0x90 [ 649.600608][ T9806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.606528][ T9806] RIP: 0033:0x7f7639f9f0d7 [ 649.611035][ T9806] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 649.630730][ T9806] RSP: 002b:00007ffe7975e818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 649.639326][ T9806] RAX: 0000000000000000 RBX: 00007f763a03330a RCX: 00007f7639f9f0d7 [ 649.647345][ T9806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7975e8d0 [ 649.655420][ T9806] RBP: 00007ffe7975e8d0 R08: 00007ffe7975f8d0 R09: 00000000ffffffff [ 649.663502][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7975f960 [ 649.671511][ T9806] R13: 00007f763a03330a R14: 000000000009e877 R15: 00007ffe7975f9a0 [ 649.679519][ T9806] [ 649.682554][ T9806] [ 649.684904][ T9806] Allocated by task 13719: [ 649.689327][ T9806] kasan_set_track+0x4e/0x70 [ 649.693938][ T9806] __kasan_kmalloc+0x8f/0xa0 [ 649.698546][ T9806] __svc_create+0x60/0xa20 [ 649.703081][ T9806] svc_create_pooled+0x66a/0x7e0 [ 649.708133][ T9806] nfsd_create_serv+0x29f/0x5c0 [ 649.713003][ T9806] write_ports+0x698/0xfa0 [ 649.717436][ T9806] nfsctl_transaction_write+0x10c/0x150 [ 649.722994][ T9806] vfs_write+0x299/0x9a0 [ 649.727345][ T9806] ksys_write+0x151/0x260 [ 649.731707][ T9806] do_syscall_64+0x55/0xb0 [ 649.736135][ T9806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.742483][ T9806] [ 649.745001][ T9806] Freed by task 13719: [ 649.749073][ T9806] kasan_set_track+0x4e/0x70 [ 649.753680][ T9806] kasan_save_free_info+0x28/0x40 [ 649.758786][ T9806] ____kasan_slab_free+0x126/0x1f0 [ 649.764003][ T9806] slab_free_freelist_hook+0x130/0x1a0 [ 649.769474][ T9806] __kmem_cache_free+0xba/0x1f0 [ 649.774345][ T9806] write_ports+0xb1a/0xfa0 [ 649.778789][ T9806] nfsctl_transaction_write+0x10c/0x150 [ 649.784369][ T9806] vfs_write+0x299/0x9a0 [ 649.788835][ T9806] ksys_write+0x151/0x260 [ 649.793233][ T9806] do_syscall_64+0x55/0xb0 [ 649.797666][ T9806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.803582][ T9806] [ 649.805914][ T9806] Last potentially related work creation: [ 649.811664][ T9806] kasan_save_stack+0x3e/0x60 [ 649.816418][ T9806] __kasan_record_aux_stack+0xaf/0xc0 [ 649.821836][ T9806] call_rcu+0x153/0x900 [ 649.826120][ T9806] inet_rcu_free_ifa+0x77/0xc0 [ 649.830915][ T9806] rcu_core+0x9c1/0x17f0 [ 649.835181][ T9806] handle_softirqs+0x27d/0x820 [ 649.839961][ T9806] run_ksoftirqd+0xa8/0x100 [ 649.844479][ T9806] smpboot_thread_fn+0x651/0x9f0 [ 649.849430][ T9806] kthread+0x2fa/0x390 [ 649.853521][ T9806] ret_from_fork+0x48/0x80 [ 649.857993][ T9806] ret_from_fork_asm+0x11/0x20 [ 649.862888][ T9806] [ 649.865217][ T9806] The buggy address belongs to the object at ffff888030696000 [ 649.865217][ T9806] which belongs to the cache kmalloc-512 of size 512 [ 649.879793][ T9806] The buggy address is located 80 bytes inside of [ 649.879793][ T9806] freed 512-byte region [ffff888030696000, ffff888030696200) [ 649.894231][ T9806] [ 649.896727][ T9806] The buggy address belongs to the physical page: [ 649.900693][ T5837] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 649.903360][ T9806] page:ffffea0000c1a500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30694 [ 649.903383][ T9806] head:ffffea0000c1a500 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 649.903398][ T9806] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 649.938317][ T9806] page_type: 0xffffffff() [ 649.942698][ T9806] raw: 00fff00000000840 ffff888017c41c80 dead000000000100 dead000000000122 [ 649.951475][ T9806] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 649.960070][ T9806] page dumped because: kasan: bad access detected [ 649.966688][ T9806] page_owner tracks the page as allocated [ 649.972407][ T9806] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4679, tgid 4679 (kworker/u4:10), ts 21823973992, free_ts 0 [ 649.993179][ T9806] post_alloc_hook+0x1c1/0x200 [ 649.998015][ T9806] get_page_from_freelist+0x2181/0x22a0 [ 650.003590][ T9806] __alloc_pages+0x1f0/0x460 [ 650.008293][ T9806] alloc_slab_page+0x5d/0x180 [ 650.012987][ T9806] new_slab+0x87/0x2d0 [ 650.017068][ T9806] ___slab_alloc+0xc5c/0x12f0 [ 650.021757][ T9806] __kmem_cache_alloc_node+0x11f/0x250 [ 650.027238][ T9806] kmalloc_trace+0x2a/0xe0 [ 650.031674][ T9806] alloc_bprm+0x56/0x9a0 [ 650.035925][ T9806] kernel_execve+0x98/0x980 [ 650.040439][ T9806] call_usermodehelper_exec_async+0x20b/0x350 [ 650.046516][ T9806] ret_from_fork+0x48/0x80 [ 650.050949][ T9806] ret_from_fork_asm+0x11/0x20 [ 650.055832][ T9806] page_owner free stack trace missing [ 650.061204][ T9806] [ 650.063534][ T9806] Memory state around the buggy address: [ 650.069166][ T9806] ffff888030695f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 650.077419][ T9806] ffff888030695f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 650.085606][ T9806] >ffff888030696000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 650.093693][ T9806] ^ [ 650.100387][ T9806] ffff888030696080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 650.108636][ T9806] ffff888030696100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 650.116711][ T9806] ================================================================== [ 650.129339][ T9806] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 650.136593][ T9806] CPU: 0 PID: 9806 Comm: syz-executor Not tainted syzkaller #0 [ 650.144235][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 650.154315][ T9806] Call Trace: [ 650.157805][ T9806] [ 650.160749][ T9806] dump_stack_lvl+0x18c/0x250 [ 650.166065][ T9806] ? show_regs_print_info+0x20/0x20 [ 650.171284][ T9806] ? load_image+0x420/0x420 [ 650.175846][ T9806] panic+0x2ca/0x720 [ 650.180019][ T9806] ? bpf_jit_dump+0xd0/0xd0 [ 650.184544][ T9806] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 650.190550][ T9806] ? _raw_spin_unlock+0x40/0x40 [ 650.195607][ T9806] ? print_memory_metadata+0x314/0x400 [ 650.201434][ T9806] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 650.204260][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.214610][ T5837] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 650.214638][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.214656][ T5837] usb 3-1: Product: syz [ 650.214667][ T5837] usb 3-1: Manufacturer: syz [ 650.214680][ T5837] usb 3-1: SerialNumber: syz [ 650.247823][ T9806] check_panic_on_warn+0x84/0xa0 [ 650.253564][ T9806] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 650.258968][ T9806] end_report+0x6f/0x130 [ 650.263251][ T9806] kasan_report+0x128/0x150 [ 650.267758][ T9806] ? nfsd_shutdown_threads+0x8d/0x1a0 [ 650.273137][ T9806] kasan_check_range+0x241/0x290 [ 650.278073][ T9806] nfsd_shutdown_threads+0x8d/0x1a0 [ 650.283291][ T9806] nfsd_umount+0x42/0xc0 [ 650.287535][ T9806] deactivate_locked_super+0x97/0x100 [ 650.292902][ T9806] cleanup_mnt+0x3d7/0x460 [ 650.297319][ T9806] task_work_run+0x1d4/0x260 [ 650.301909][ T9806] ? task_work_cancel+0x220/0x220 [ 650.307989][ T9806] ? exit_to_user_mode_loop+0x3b/0x110 [ 650.314884][ T9806] exit_to_user_mode_loop+0xe6/0x110 [ 650.320188][ T9806] exit_to_user_mode_prepare+0xee/0x180 [ 650.325744][ T9806] syscall_exit_to_user_mode+0x1a/0x50 [ 650.331293][ T9806] do_syscall_64+0x61/0xb0 [ 650.335711][ T9806] ? clear_bhb_loop+0x40/0x90 [ 650.340383][ T9806] ? clear_bhb_loop+0x40/0x90 [ 650.345057][ T9806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.350960][ T9806] RIP: 0033:0x7f7639f9f0d7 [ 650.355370][ T9806] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 650.375163][ T9806] RSP: 002b:00007ffe7975e818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 650.383691][ T9806] RAX: 0000000000000000 RBX: 00007f763a03330a RCX: 00007f7639f9f0d7 [ 650.391846][ T9806] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7975e8d0 [ 650.399817][ T9806] RBP: 00007ffe7975e8d0 R08: 00007ffe7975f8d0 R09: 00000000ffffffff [ 650.407881][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7975f960 [ 650.415953][ T9806] R13: 00007f763a03330a R14: 000000000009e877 R15: 00007ffe7975f9a0 [ 650.423934][ T9806] [ 650.427304][ T9806] Kernel Offset: disabled [ 650.431744][ T9806] Rebooting in 86400 seconds..