last executing test programs: 9m24.491539984s ago: executing program 4 (id=54): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) utimensat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 9m23.662287762s ago: executing program 4 (id=58): r0 = userfaultfd(0x80001) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000050) close(r0) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) 9m22.957778814s ago: executing program 4 (id=59): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x54, 0x0, &(0x7f0000000380)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 9m22.103667964s ago: executing program 4 (id=63): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0x2, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x80) write$cgroup_int(r1, &(0x7f0000000280)=0x1ae, 0xfffffe72) 9m20.509794165s ago: executing program 4 (id=67): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf9, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x2}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) socket$netlink(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40) 9m19.637027715s ago: executing program 4 (id=71): pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x2, 0x400004, 0x7, 0x8000000000000001, 0xffffffffffffff3f}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m16.995685345s ago: executing program 32 (id=71): pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x2, 0x400004, 0x7, 0x8000000000000001, 0xffffffffffffff3f}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m19.712020586s ago: executing program 1 (id=852): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) pipe(&(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0c81}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2m18.562190121s ago: executing program 1 (id=856): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x41e, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x400000000010, 0x3, 0x0) socket(0x2, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff080009000000000008001100fc00000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m16.053879931s ago: executing program 1 (id=862): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x200, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) landlock_restrict_self(r1, 0xa) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x9) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 2m15.479997152s ago: executing program 1 (id=866): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 2m12.603782793s ago: executing program 1 (id=870): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 2m7.542220315s ago: executing program 1 (id=875): close(0xffffffffffffffff) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 1m48.892620015s ago: executing program 33 (id=875): close(0xffffffffffffffff) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 30.435657128s ago: executing program 0 (id=1001): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x90004) syz_emit_vhci(0x0, 0x16) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 29.188502828s ago: executing program 2 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) 27.976494703s ago: executing program 3 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x20}}, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 26.194419732s ago: executing program 0 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 23.346824406s ago: executing program 2 (id=1005): rename(0x0, &(0x7f0000000140)='./file0\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6(0xa, 0xe, 0x902) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_emit_ethernet(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 20.559657624s ago: executing program 3 (id=1006): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0xc) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 18.807270278s ago: executing program 5 (id=1007): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 18.003009115s ago: executing program 0 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prlimit64(r0, 0xd, 0x0, &(0x7f0000000080)) r4 = dup(r3) socket(0x80000000000000a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$packet(r4, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) 17.799915365s ago: executing program 3 (id=1009): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0x2, 0x12) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x10) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048015) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) 17.612938459s ago: executing program 2 (id=1010): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_adjtime(0xffffffd3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) 17.379247326s ago: executing program 5 (id=1011): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 13.824467284s ago: executing program 0 (id=1012): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 10.783418736s ago: executing program 3 (id=1013): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x20040000) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x650080, 0x0) flock(r1, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800010100000000000000000a00000000000000000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r6, 0x20000093, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}}, 0x108) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0xc0, 0x60, 0xd0e0000, 0xc0, 0x100, 0x190, 0x1d8, 0x1d8, 0x190, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xffe5, 0xff, 0x2}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x2f, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x4, 0x6, 0x4, 0x6], 0x0, 0x2}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x7, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 10.776573969s ago: executing program 5 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) 9.371974093s ago: executing program 2 (id=1015): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@inode32}]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) write$dsp(r1, &(0x7f0000000140), 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x1308806, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) 7.300586787s ago: executing program 5 (id=1016): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.795473599s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getrandom(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) add_key$fscrypt_provisioning(&(0x7f0000001400), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="01"], 0x48, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x0, 0x9}, {0x28, 0x1, 0xf7, 0xfffff00c}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xa052) 6.732081035s ago: executing program 2 (id=1018): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@dev, @initdev}, &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, 0x0, 0xc65e0d01c3f2ef}, 0x20004804) 6.622173751s ago: executing program 3 (id=1019): ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, &(0x7f00000005c0)={&(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x101, 0x0, 0x6, 0x1, 0xfffffffffffffccc, 0x4}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) ioctl$FITHAW(r0, 0xc0045878) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) io_submit(0x0, 0x0, &(0x7f0000000040)) write$UHID_INPUT(r6, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 4.512741903s ago: executing program 5 (id=1020): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 451.737798ms ago: executing program 0 (id=1021): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x0, r0, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000"]) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 371.426559ms ago: executing program 3 (id=1022): syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000008b40), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r6 = dup(r4) syz_genetlink_get_family_id$nl80211(0x0, r6) setsockopt(r6, 0x9, 0xc, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x1, 0x0, 0x1, 0xa, 0x4}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000001c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x8, @dev}, 0xffffffff, 0x0, 0x100000}}, 0x2e) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}}, 0x0) 240.498641ms ago: executing program 2 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x34000047}, 0x240000d0) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) 0s ago: executing program 5 (id=1024): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_adjtime(0xffffffd3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 189.874945][ T5756] cgroup: Unknown subsys name 'net' [ 190.031916][ T5756] cgroup: Unknown subsys name 'cpuset' [ 190.049204][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.318704][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 201.004193][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.013831][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.018105][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.026814][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.037582][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.047035][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.060821][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.061716][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.083293][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.084834][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.096072][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.111211][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.121542][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.156545][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.169041][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.203862][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.231870][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.268708][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.297431][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.314043][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.349253][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.359065][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.369868][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.385260][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.397341][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.881779][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 202.944175][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 203.210736][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 203.243064][ T5782] Bluetooth: hci0: command tx timeout [ 203.248959][ T5780] Bluetooth: hci1: command tx timeout [ 203.249013][ T5783] Bluetooth: hci2: command tx timeout [ 203.400896][ T5780] Bluetooth: hci3: command tx timeout [ 203.490498][ T5780] Bluetooth: hci4: command tx timeout [ 203.599135][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 203.633589][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 203.963756][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.980830][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.988578][ T5773] bridge_slave_0: entered allmulticast mode [ 204.042692][ T5773] bridge_slave_0: entered promiscuous mode [ 204.073913][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.090733][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.143943][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.152312][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.160458][ T5773] bridge_slave_1: entered allmulticast mode [ 204.171405][ T5773] bridge_slave_1: entered promiscuous mode [ 204.416982][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.440723][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.448521][ T5784] bridge_slave_0: entered allmulticast mode [ 204.462178][ T5784] bridge_slave_0: entered promiscuous mode [ 204.674430][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.686570][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.696025][ T5784] bridge_slave_1: entered allmulticast mode [ 204.711975][ T5784] bridge_slave_1: entered promiscuous mode [ 204.735535][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.810297][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.841215][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.849053][ T5788] bridge_slave_0: entered allmulticast mode [ 204.875623][ T5788] bridge_slave_0: entered promiscuous mode [ 205.027859][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.043082][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.051019][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.058569][ T5788] bridge_slave_1: entered allmulticast mode [ 205.067986][ T5788] bridge_slave_1: entered promiscuous mode [ 205.089864][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.222119][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.320448][ T5780] Bluetooth: hci2: command tx timeout [ 205.320652][ T5782] Bluetooth: hci1: command tx timeout [ 205.326063][ T5780] Bluetooth: hci0: command tx timeout [ 205.392999][ T5773] team0: Port device team_slave_0 added [ 205.399718][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.409511][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.417452][ T5776] bridge_slave_0: entered allmulticast mode [ 205.426881][ T5776] bridge_slave_0: entered promiscuous mode [ 205.447027][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.457159][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.465264][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.473296][ T5775] bridge_slave_0: entered allmulticast mode [ 205.480595][ T5780] Bluetooth: hci3: command tx timeout [ 205.485892][ T5775] bridge_slave_0: entered promiscuous mode [ 205.533062][ T5773] team0: Port device team_slave_1 added [ 205.539490][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.547793][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.555602][ T5776] bridge_slave_1: entered allmulticast mode [ 205.565473][ T5776] bridge_slave_1: entered promiscuous mode [ 205.570968][ T5780] Bluetooth: hci4: command tx timeout [ 205.588617][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.625525][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.633578][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.641844][ T5775] bridge_slave_1: entered allmulticast mode [ 205.651494][ T5775] bridge_slave_1: entered promiscuous mode [ 205.669387][ T5784] team0: Port device team_slave_0 added [ 205.795115][ T5784] team0: Port device team_slave_1 added [ 205.862494][ T5788] team0: Port device team_slave_0 added [ 205.925546][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.933024][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.960199][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.981685][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.000463][ T5788] team0: Port device team_slave_1 added [ 206.015793][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.057127][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.064434][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.091215][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.111221][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.155042][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.186883][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.194080][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.220564][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.336903][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.344285][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.370907][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.413778][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.421839][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.448694][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.521507][ T5776] team0: Port device team_slave_0 added [ 206.529870][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.537144][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.564014][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.596285][ T5775] team0: Port device team_slave_0 added [ 206.615640][ T5775] team0: Port device team_slave_1 added [ 206.660849][ T5776] team0: Port device team_slave_1 added [ 206.850938][ T5773] hsr_slave_0: entered promiscuous mode [ 206.859855][ T5773] hsr_slave_1: entered promiscuous mode [ 206.927485][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.935080][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.961890][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.006459][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.013905][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.040531][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.081934][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.089093][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.116257][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.145607][ T5784] hsr_slave_0: entered promiscuous mode [ 207.154726][ T5784] hsr_slave_1: entered promiscuous mode [ 207.164379][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 207.170873][ T5784] Cannot create hsr debugfs directory [ 207.179593][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.187276][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.213777][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.240749][ T5788] hsr_slave_0: entered promiscuous mode [ 207.252302][ T5788] hsr_slave_1: entered promiscuous mode [ 207.260613][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 207.266507][ T5788] Cannot create hsr debugfs directory [ 207.402252][ T5780] Bluetooth: hci1: command tx timeout [ 207.402449][ T5783] Bluetooth: hci2: command tx timeout [ 207.407865][ T5780] Bluetooth: hci0: command tx timeout [ 207.560466][ T5780] Bluetooth: hci3: command tx timeout [ 207.625528][ T5775] hsr_slave_0: entered promiscuous mode [ 207.634576][ T5775] hsr_slave_1: entered promiscuous mode [ 207.640627][ T5780] Bluetooth: hci4: command tx timeout [ 207.646733][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 207.653083][ T5775] Cannot create hsr debugfs directory [ 207.937617][ T5776] hsr_slave_0: entered promiscuous mode [ 207.946980][ T5776] hsr_slave_1: entered promiscuous mode [ 207.955780][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 207.961997][ T5776] Cannot create hsr debugfs directory [ 209.050980][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.081345][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.115926][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.153912][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.275102][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.332806][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.393670][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.417428][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.484785][ T5780] Bluetooth: hci2: command tx timeout [ 209.493610][ T5782] Bluetooth: hci0: command tx timeout [ 209.499307][ T5782] Bluetooth: hci1: command tx timeout [ 209.623876][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.640447][ T5782] Bluetooth: hci3: command tx timeout [ 209.681871][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.720672][ T5782] Bluetooth: hci4: command tx timeout [ 209.728117][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.754704][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.043955][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.089075][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.128925][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.153192][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.517614][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.543972][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.569277][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.642942][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.698908][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.798176][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.955877][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.018474][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.065993][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.073754][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.132282][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.139712][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.156184][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.163672][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.248815][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.256525][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.454993][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.687496][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.789526][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.873238][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.881053][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.065119][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.137680][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.145360][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.215401][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.223085][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.356445][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.384896][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.392493][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.747233][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.875168][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.882735][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.016971][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.024542][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.202989][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.275091][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.132470][ T5776] veth0_vlan: entered promiscuous mode [ 214.262650][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.271949][ T5773] veth0_vlan: entered promiscuous mode [ 214.327106][ T5776] veth1_vlan: entered promiscuous mode [ 214.399703][ T5773] veth1_vlan: entered promiscuous mode [ 214.837338][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.886029][ T5776] veth0_macvtap: entered promiscuous mode [ 214.977936][ T5776] veth1_macvtap: entered promiscuous mode [ 215.001799][ T5773] veth0_macvtap: entered promiscuous mode [ 215.096245][ T5773] veth1_macvtap: entered promiscuous mode [ 215.282665][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.413650][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.438832][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.459689][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.538740][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.548604][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.578844][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.606124][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.617000][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.718759][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.736608][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.789672][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.814111][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.850730][ T5788] veth0_vlan: entered promiscuous mode [ 216.048335][ T5788] veth1_vlan: entered promiscuous mode [ 216.437337][ T5784] veth0_vlan: entered promiscuous mode [ 216.532901][ T5775] veth0_vlan: entered promiscuous mode [ 216.667968][ T5788] veth0_macvtap: entered promiscuous mode [ 216.703034][ T5784] veth1_vlan: entered promiscuous mode [ 216.746118][ T5775] veth1_vlan: entered promiscuous mode [ 216.776430][ T5788] veth1_macvtap: entered promiscuous mode [ 217.088660][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.202494][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.367506][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.387877][ T5784] veth0_macvtap: entered promiscuous mode [ 217.432034][ T5775] veth0_macvtap: entered promiscuous mode [ 217.456340][ T767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.473131][ T767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.546297][ T767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.593487][ T5784] veth1_macvtap: entered promiscuous mode [ 217.616743][ T5775] veth1_macvtap: entered promiscuous mode [ 217.889725][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.985137][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.029645][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.128468][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.230769][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.301212][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.330988][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.401276][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.420581][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.429671][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.516056][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.562784][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.408844][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.451181][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.547219][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.585973][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.773469][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.800619][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.142852][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.168414][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.431190][ T5773] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 223.446942][ T5951] ref_ctr_offset mismatch. inode: 0x12 offset: 0x0 ref_ctr_offset(old): 0xffffffff00 ref_ctr_offset(new): 0x0 [ 224.291613][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.299672][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.674998][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.721252][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.753262][ T5944] kernel read not supported for file [fscontext] (pid: 5944 comm: kworker/1:6) [ 225.146334][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 225.486941][ T5976] netlink: 'syz.1.10': attribute type 15 has an invalid length. [ 225.511061][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 225.581545][ T5976] netlink: 'syz.1.10': attribute type 15 has an invalid length. [ 225.590607][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 225.603875][ T1079] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 225.624492][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.674307][ T5976] Zero length message leads to an empty skb [ 225.685665][ T767] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 225.723829][ T767] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 225.756167][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.767476][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.901976][ T767] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 226.070565][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.078654][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.558102][ T5980] loop1: detected capacity change from 0 to 2048 [ 226.570489][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.630916][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.692651][ T5984] netlink: 'syz.0.12': attribute type 13 has an invalid length. [ 226.729421][ T5980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.535992][ T5986] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 16384 lbcount: 20480 extent 129+19968 [ 228.096785][ T5988] binder: 5987:5988 ioctl c0306201 200000000080 returned -14 [ 228.128750][ T5988] binder: 5987:5988 ioctl c0306201 2000000003c0 returned -14 [ 229.061468][ T5990] loop2: detected capacity change from 0 to 32768 [ 229.076432][ T5990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15 (5990) [ 229.107580][ T5990] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.118411][ T5990] BTRFS info (device loop2): using sha256 checksum algorithm [ 229.297940][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.359832][ T5990] BTRFS info (device loop2): rebuilding free space tree [ 229.380683][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.417316][ T5990] BTRFS info (device loop2): enabling ssd optimizations [ 229.424755][ T5990] BTRFS info (device loop2): using spread ssd allocation scheme [ 229.432869][ T5990] BTRFS info (device loop2): enabling free space tree [ 229.439857][ T5990] BTRFS info (device loop2): force clearing of disk cache [ 229.455398][ T5990] BTRFS info (device loop2): enabling auto defrag [ 229.463316][ T5990] BTRFS info (device loop2): max_inline set to 0 [ 229.873123][ T35] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 230.444411][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.558430][ T6021] io-wq is not configured for unbound workers [ 235.032327][ T6063] evm: overlay not supported [ 235.332108][ T6065] sd 0:0:1:0: PR command failed: 1026 [ 235.337930][ T6065] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 235.435132][ T6065] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 236.091277][ T6072] ======================================================= [ 236.091277][ T6072] WARNING: The mand mount option has been deprecated and [ 236.091277][ T6072] and is ignored by this kernel. Remove the mand [ 236.091277][ T6072] option from the mount to silence this warning. [ 236.091277][ T6072] ======================================================= [ 236.412254][ T6076] bridge0: entered promiscuous mode [ 236.417929][ T6076] vlan2: entered promiscuous mode [ 237.442670][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.529313][ T6098] netlink: 'syz.2.48': attribute type 4 has an invalid length. [ 239.201401][ T6107] syz.2.52 uses obsolete (PF_INET,SOCK_PACKET) [ 239.405450][ T6109] loop3: detected capacity change from 0 to 512 [ 239.541355][ T6109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 239.588570][ T6109] System zones: 1-2, 4-12, 8-8 [ 239.711423][ T6109] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.53: iget: bad i_size value: 38620345925642 [ 239.755841][ T6109] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.757340][ T6109] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.53: couldn't read orphan inode 15 (err -117) [ 239.767085][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 239.767185][ C1] EXT4-fs (loop3): initial error at time 1776083614: ext4_orphan_get:1397: inode 15 [ 239.767354][ C1] EXT4-fs (loop3): last error at time 1776083614: ext4_orphan_get:1397: inode 15 [ 239.864218][ T6109] loop3: lost filesystem error report for type 5 error -117 [ 239.923187][ T6109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.248348][ T6109] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.53: bg 0: block 5: invalid block bitmap [ 240.313880][ T6109] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 112 with error 28 [ 240.390722][ T6109] EXT4-fs (loop3): This should not happen!! Data will be lost [ 240.390722][ T6109] [ 240.463779][ T6109] EXT4-fs (loop3): Total free blocks count 0 [ 240.496356][ T6109] EXT4-fs (loop3): Free/Dirty block details [ 240.540533][ T6109] EXT4-fs (loop3): free_blocks=0 [ 240.545722][ T6109] EXT4-fs (loop3): dirty_blocks=112 [ 240.617856][ T6109] EXT4-fs (loop3): Block reservation details [ 240.660790][ T6109] EXT4-fs (loop3): i_reserved_data_blocks=112 [ 241.313046][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.392032][ T6124] loop1: detected capacity change from 0 to 512 [ 241.481316][ T6124] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.57: corrupted xattr block 95: invalid header [ 241.561097][ T6124] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.570235][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 241.586546][ C0] EXT4-fs (loop1): initial error at time 1776083616: ext4_expand_extra_isize_ea:2808: inode 11 [ 241.597391][ C0] EXT4-fs (loop1): last error at time 1776083616: ext4_expand_extra_isize_ea:2808: inode 11 [ 241.651272][ T6124] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 241.761083][ T6124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.57: bg 0: block 7: invalid block bitmap [ 241.840245][ T6124] loop1: lost filesystem error report for type 5 error -117 [ 241.867616][ T6124] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 241.940692][ T6124] loop1: lost filesystem error report for type 5 error -117 [ 241.961744][ T6124] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2970: inode #11: comm syz.1.57: corrupted xattr block 95: invalid header [ 242.066898][ T6124] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.080244][ T6124] EXT4-fs warning (device loop1): ext4_evict_inode:285: xattr delete (err -117) [ 242.159470][ T6124] EXT4-fs (loop1): 1 orphan inode deleted [ 242.183703][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.215457][ T6139] loop4: detected capacity change from 0 to 128 [ 242.843279][ T6139] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 242.877827][ T6139] FAT-fs (loop4): Filesystem has been set read-only [ 242.897975][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.220408][ T2142] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 243.318922][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 243.462439][ T2142] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 243.512498][ T2142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.536011][ T2142] usb 4-1: Product: syz [ 243.550632][ T2142] usb 4-1: Manufacturer: syz [ 243.557381][ T2142] usb 4-1: SerialNumber: syz [ 244.026190][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.134706][ T2142] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 244.216365][ T2142] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 244.480713][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.666685][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.956027][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.529469][ T2142] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 245.563038][ T2142] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 245.601326][ T2142] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 245.671200][ T35] bridge_slave_1: left allmulticast mode [ 245.677087][ T35] bridge_slave_1: left promiscuous mode [ 245.719092][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.740448][ T2142] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -110 [ 245.821805][ T35] bridge_slave_0: left allmulticast mode [ 245.841129][ T2142] usb 4-1: USB disconnect, device number 2 [ 245.856388][ T35] bridge_slave_0: left promiscuous mode [ 245.887052][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.042082][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.111825][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.180645][ T35] bond0 (unregistering): Released all slaves [ 248.686320][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.711189][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.720906][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.747629][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.762916][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.877505][ T6196] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 249.015699][ T35] hsr_slave_0: left promiscuous mode [ 249.043048][ T35] hsr_slave_1: left promiscuous mode [ 249.072878][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.103902][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.188083][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.260558][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.372960][ T35] veth1_macvtap: left promiscuous mode [ 249.378735][ T35] veth0_macvtap: left promiscuous mode [ 249.419575][ T35] veth1_vlan: left promiscuous mode [ 249.426666][ T35] veth0_vlan: left promiscuous mode [ 249.977626][ T6195] loop0: detected capacity change from 0 to 4096 [ 250.090760][ T6195] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 250.771010][ T6195] ntfs3(loop0): mft corrupted [ 250.815659][ T6195] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 250.846287][ T5780] Bluetooth: hci3: command tx timeout [ 251.013597][ T6216] ntfs3(loop0): mft corrupted [ 251.033744][ T6215] ntfs3(loop0): mft corrupted [ 251.234632][ T6219] ntfs3(loop0): ino=0, attr_set_size_ex [ 251.305645][ T6195] ntfs3(loop0): mft corrupted [ 251.353435][ T6195] ntfs3(loop0): mft corrupted [ 251.404691][ T6195] ntfs3(loop0): mft corrupted [ 251.451356][ T6215] ntfs3(loop0): mft corrupted [ 251.743533][ T35] team0 (unregistering): Port device team_slave_1 removed [ 251.914828][ T35] team0 (unregistering): Port device team_slave_0 removed [ 252.877653][ T6209] bridge_slave_0: left allmulticast mode [ 252.912232][ T6209] bridge_slave_0: left promiscuous mode [ 252.925316][ T5780] Bluetooth: hci3: command tx timeout [ 252.940721][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.058412][ T6209] bridge_slave_1: left allmulticast mode [ 253.088908][ T6209] bridge_slave_1: left promiscuous mode [ 253.103005][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.143249][ T6209] bond0: (slave bond_slave_0): Releasing backup interface [ 253.215886][ T6209] bond0: (slave bond_slave_1): Releasing backup interface [ 253.397764][ T6209] team0: Port device team_slave_0 removed [ 253.519677][ T6209] team0: Port device team_slave_1 removed [ 253.546392][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.620948][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.664766][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.686006][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.773268][ T6209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.054483][ T5780] Bluetooth: hci3: command tx timeout [ 257.091561][ T5780] Bluetooth: hci3: command tx timeout [ 258.517573][ T30] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 258.716608][ T30] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.800539][ T5944] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 259.115591][ T5944] usb 1-1: config 0 has no interfaces? [ 259.129186][ T5944] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.191840][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.223146][ T5944] usb 1-1: SerialNumber: syz [ 259.291384][ T5944] usb 1-1: config 0 descriptor?? [ 259.483644][ T6257] loop1: detected capacity change from 0 to 256 [ 259.559727][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.99'. [ 259.634675][ T6257] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.707101][ T5838] usb 1-1: USB disconnect, device number 2 [ 259.867223][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 260.217772][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.345695][ T6266] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 261.721774][ T6284] loop1: detected capacity change from 0 to 512 [ 261.899952][ T6186] chnl_net:caif_netlink_parms(): no params data found [ 261.912513][ T6284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.122848][ T6284] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.552141][ T6284] EXT4-fs (loop1): shut down requested (1) [ 263.525398][ T6296] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 263.543972][ T29] audit: type=1800 audit(1776083638.121:2): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.106" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 263.613194][ T6296] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 263.667634][ T6296] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 263.824458][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.210728][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 265.445827][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 265.500762][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.534603][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.546579][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.633083][ T5838] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.718599][ T5838] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 265.739134][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.771500][ T5838] usb 3-1: Product: syz [ 265.775938][ T5838] usb 3-1: Manufacturer: syz [ 265.837817][ T5838] usb 3-1: SerialNumber: syz [ 265.883163][ T5838] usb 3-1: config 0 descriptor?? [ 266.408818][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.430614][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.438400][ T6186] bridge_slave_0: entered allmulticast mode [ 266.470693][ T6186] bridge_slave_0: entered promiscuous mode [ 266.540617][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.573246][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.602597][ T6186] bridge_slave_1: entered allmulticast mode [ 266.652519][ T6186] bridge_slave_1: entered promiscuous mode [ 266.814602][ T6319] lo: Caught tx_queue_len zero misconfig [ 267.239819][ T6186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.316601][ T6186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.710980][ T6330] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 267.822047][ T6328] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 267.985281][ T2142] usb 3-1: USB disconnect, device number 2 [ 268.015774][ T6186] team0: Port device team_slave_0 added [ 268.165661][ T6186] team0: Port device team_slave_1 added [ 268.605513][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.634116][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.696080][ T6342] process 'syz.1.117' launched '/dev/fd/3' with NULL argv: empty string added [ 268.780635][ T6186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.890982][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.898184][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.064898][ T6186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.736692][ T6186] hsr_slave_0: entered promiscuous mode [ 269.840933][ T6186] hsr_slave_1: entered promiscuous mode [ 269.880794][ T6186] debugfs: 'hsr0' already exists in 'hsr' [ 269.919917][ T6186] Cannot create hsr debugfs directory [ 270.661995][ T6364] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 270.802298][ T6367] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 270.927233][ T6367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.123'. [ 271.121029][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.253924][ T6364] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 271.435362][ T6376] loop2: detected capacity change from 0 to 512 [ 271.503388][ T6367] batadv0: entered promiscuous mode [ 271.540612][ T6367] batadv0: entered allmulticast mode [ 271.638250][ T6367] bond0: (slave batadv0): Releasing backup interface [ 271.675162][ T6375] loop3: detected capacity change from 0 to 2048 [ 271.689998][ T6367] bridge0: port 3(batadv0) entered blocking state [ 271.722955][ T6367] bridge0: port 3(batadv0) entered disabled state [ 271.788616][ T6375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.811057][ T5944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 271.844898][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 271.854497][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 271.912351][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.011699][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 272.055644][ T5944] usb 3-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 272.100784][ T5944] usb 3-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 272.140361][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.185981][ T5944] usb 3-1: config 0 descriptor?? [ 272.320196][ T5944] uvcvideo 3-1:0.0: Found UVC 0.00 device (2801:0201) [ 272.328248][ T5944] uvcvideo 3-1:0.0: No valid video chain found. [ 272.512975][ T5944] usb 3-1: USB disconnect, device number 3 [ 273.374892][ T6186] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.519172][ T6186] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.712597][ T6186] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.856569][ T6186] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.909937][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'. [ 273.920564][ T2142] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 274.064557][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 274.215344][ T2142] usb 4-1: Using ep0 maxpacket: 16 [ 274.277540][ T2142] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 274.321789][ T2142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.447734][ T2142] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.486060][ T2142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.516705][ T2142] usb 4-1: Product: syz [ 274.530580][ T2142] usb 4-1: Manufacturer: syz [ 274.573417][ T2142] usb 4-1: SerialNumber: syz [ 274.633354][ T2142] usb 4-1: config 0 descriptor?? [ 274.727259][ T2142] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 274.773742][ T2142] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 275.871572][ T2142] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 275.950684][ T2142] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 276.221548][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 276.808606][ T6186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.076837][ T6186] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.127132][ T2142] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 277.171111][ T2142] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 277.209780][ T2142] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 277.241308][ T2142] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 277.278906][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.286554][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.288846][ T2142] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 277.353960][ T2142] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 277.449865][ T2142] usb 4-1: USB disconnect, device number 3 [ 277.528826][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.536621][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.565193][ T6432] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 280.768396][ T6186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.047889][ T6186] veth0_vlan: entered promiscuous mode [ 284.196531][ T6186] veth1_vlan: entered promiscuous mode [ 284.919577][ T6186] veth0_macvtap: entered promiscuous mode [ 285.063141][ T6186] veth1_macvtap: entered promiscuous mode [ 285.385217][ T6186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.346588][ T6186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.337209][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.397611][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.558521][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.622013][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.495441][ T6537] macvlan1: entered promiscuous mode [ 288.891837][ T6537] macvlan1 (unregistering): left promiscuous mode [ 291.365614][ T6548] loop3: detected capacity change from 0 to 32768 [ 291.493319][ T6548] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.967241][ T6548] XFS (loop3): Ending clean mount [ 294.709975][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.690528][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 297.883660][ T29] audit: type=1804 audit(1776083672.501:3): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.180" name="/newroot/33/file7/file0" dev="tmpfs" ino=189 res=1 errno=0 [ 297.920639][ T5834] usb 2-1: config 0 has no interfaces? [ 297.953972][ T5834] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.989195][ T5834] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 298.030285][ T5834] usb 2-1: Manufacturer: syz [ 298.100301][ T5834] usb 2-1: config 0 descriptor?? [ 299.068868][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 299.314968][ T5834] usb 2-1: USB disconnect, device number 2 [ 300.385658][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.453440][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.865759][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.932614][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.751108][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 301.765407][ T6648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.682056][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 303.304595][ T6677] netlink: 'syz.2.195': attribute type 2 has an invalid length. [ 303.368492][ T6677] netlink: 'syz.2.195': attribute type 2 has an invalid length. [ 304.599938][ T6692] syz_tun: entered allmulticast mode [ 308.459705][ T6714] netlink: 'syz.5.207': attribute type 39 has an invalid length. [ 308.661628][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.718689][ T6719] tipc: Failed to remove unknown binding: 66,0,0/0:73940554/73940556 [ 308.719000][ T6719] tipc: Failed to remove unknown binding: 66,0,0/0:73940554/73940555 [ 308.833646][ T6714] bridge_slave_0 (unregistering): left allmulticast mode [ 308.833765][ T6714] bridge_slave_0 (unregistering): left promiscuous mode [ 308.834151][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.259207][ T29] audit: type=1804 audit(1776083683.871:4): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.209" name="/newroot/54/file0" dev="fuse" ino=1 res=1 errno=0 [ 317.242192][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.633910][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.021823][ T6776] erspan0: entered promiscuous mode [ 318.210904][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.224'. [ 318.355455][ T6782] SQUASHFS error: Failed to read block 0x0: -5 [ 318.520914][ T6782] unable to read squashfs_super_block [ 320.551220][ T6807] loop1: detected capacity change from 0 to 256 [ 320.718189][ T6807] loop1: detected capacity change from 0 to 764 [ 320.804132][ T6807] iso9660: Unknown parameter '' [ 321.322727][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 322.505181][ T6825] loop2: detected capacity change from 0 to 512 [ 322.724770][ T6825] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 322.870488][ T6825] EXT4-fs (loop2): group descriptors corrupted! [ 323.910360][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 323.916656][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 323.924137][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 324.441923][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 325.477416][ T6878] netlink: 176 bytes leftover after parsing attributes in process `syz.2.244'. [ 326.953791][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.960983][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.490343][ T29] audit: type=1326 audit(1776083702.101:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 327.573289][ T29] audit: type=1326 audit(1776083702.141:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 327.710357][ T29] audit: type=1326 audit(1776083702.141:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 327.860621][ T29] audit: type=1326 audit(1776083702.151:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 327.980657][ T29] audit: type=1326 audit(1776083702.151:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 328.100745][ T29] audit: type=1326 audit(1776083702.151:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 328.301084][ T29] audit: type=1326 audit(1776083702.151:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 328.480950][ T29] audit: type=1326 audit(1776083702.161:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 328.571136][ T29] audit: type=1326 audit(1776083702.161:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 328.721051][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.255'. [ 328.757049][ T29] audit: type=1326 audit(1776083702.161:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea699c819 code=0x7ffc0000 [ 328.944294][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.255'. [ 329.917074][ T6919] loop1: detected capacity change from 0 to 256 [ 331.147275][ T6927] loop0: detected capacity change from 0 to 1024 [ 333.498509][ T35] hfsplus: b-tree write err: -5, ino 25 [ 333.527239][ T35] hfsplus: b-tree write err: -5, ino 4 [ 333.543458][ T6945] bridge1: entered promiscuous mode [ 333.587431][ T35] hfsplus: b-tree write err: -5, ino 2 [ 333.589262][ T6945] bridge1: entered allmulticast mode [ 333.637632][ T35] hfsplus: b-tree write err: -5, ino 20 [ 333.774036][ T6945] team0: Port device bridge1 added [ 333.921209][ T6947] bridge0: port 3(team0) entered blocking state [ 333.963083][ T6947] bridge0: port 3(team0) entered disabled state [ 334.047348][ T6947] team0: entered allmulticast mode [ 334.087852][ T6947] team_slave_0: entered allmulticast mode [ 334.141461][ T6947] team_slave_1: entered allmulticast mode [ 334.207208][ T6947] team0: entered promiscuous mode [ 334.261063][ T6947] team_slave_0: entered promiscuous mode [ 334.267867][ T6947] team_slave_1: entered promiscuous mode [ 334.355468][ T6947] bridge0: port 3(team0) entered blocking state [ 334.362441][ T6947] bridge0: port 3(team0) entered forwarding state [ 335.530088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 335.763034][ T6965] loop0: detected capacity change from 0 to 128 [ 335.831156][ T6965] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 335.955329][ T6965] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.054810][ T6965] ext2 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.670690][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.174313][ T5944] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 338.177433][ T7002] loop1: detected capacity change from 0 to 1024 [ 338.381111][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 338.405599][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 338.478539][ T5944] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 338.510486][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.550337][ T5944] usb 4-1: Product: syz [ 338.567400][ T5944] usb 4-1: Manufacturer: syz [ 338.585732][ T5944] usb 4-1: SerialNumber: syz [ 338.685260][ T5944] usb 4-1: config 0 descriptor?? [ 338.753475][ T5944] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 338.818988][ T5944] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 339.568213][ T5944] em28xx 4-1:0.0: chip ID is em2765 [ 339.687449][ T7007] loop0: detected capacity change from 0 to 32768 [ 339.705409][ T7007] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.288 (7007) [ 339.744723][ T7007] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.755229][ T7007] BTRFS info (device loop0): using sha256 checksum algorithm [ 340.049436][ T7007] BTRFS info (device loop0): setting nodatasum [ 340.056151][ T7007] BTRFS info (device loop0): enabling ssd optimizations [ 340.064082][ T7007] BTRFS info (device loop0): turning on async discard [ 340.071175][ T7007] BTRFS info (device loop0): enabling free space tree [ 340.296148][ T5944] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 340.376228][ T5944] em28xx 4-1:0.0: board has no eeprom [ 340.420449][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 340.735626][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.931066][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.053667][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 341.053843][ T29] audit: type=1800 audit(1776083715.601:50): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.288" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 341.121772][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.144854][ T5834] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.227799][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.394247][ T5834] usb 3-1: config 0 descriptor?? [ 341.573488][ T7028] em28xx 4-1:0.0: writing to i2c device at 0xfe failed (error=-5) [ 341.620553][ T5944] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 341.628753][ T5944] em28xx 4-1:0.0: dvb set to bulk mode. [ 341.713100][ T30] em28xx 4-1:0.0: Binding DVB extension [ 341.835368][ T5944] usb 4-1: USB disconnect, device number 4 [ 341.868505][ T5944] em28xx 4-1:0.0: Disconnecting em28xx [ 342.200351][ T5834] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 342.415129][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.462438][ T30] em28xx 4-1:0.0: Registering input extension [ 342.511931][ T5944] em28xx 4-1:0.0: Closing input extension [ 342.614313][ T5944] em28xx 4-1:0.0: Freeing device [ 343.563809][ T7046] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 344.051987][ T5838] usb 3-1: USB disconnect, device number 4 [ 344.682713][ T7055] loop5: detected capacity change from 0 to 2048 [ 344.812526][ T7062] netlink: 44 bytes leftover after parsing attributes in process `syz.3.300'. [ 344.862727][ T7057] loop5: p1 < > p3 p4 [ 344.862727][ T7057] p4: [ 344.883574][ T29] audit: type=1326 audit(1776083719.501:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cbef9c819 code=0x7fc00000 [ 344.941727][ T7057] loop5: p3 start 4294901760 is beyond EOD, truncated [ 345.007357][ T29] audit: type=1326 audit(1776083719.501:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3cbef9c819 code=0x7fc00000 [ 345.031691][ T7057] loop5: p4 size 722688 extends beyond EOD, truncated [ 345.164939][ T7057] loop5: p6 start 262464109 is beyond EOD, truncated [ 345.220427][ T7057] loop5: p7 size 2304 extends beyond EOD, truncated [ 345.457978][ T7055] loop5: p1 < > p3 p4 [ 345.457978][ T7055] p4: [ 345.588031][ T7055] loop5: p3 start 4294901760 is beyond EOD, truncated [ 345.627154][ T7055] loop5: p4 size 722688 extends beyond EOD, truncated [ 345.732733][ T7055] loop5: p6 start 262464109 is beyond EOD, truncated [ 345.811718][ T7055] loop5: p7 size 2304 extends beyond EOD, truncated [ 345.947574][ T29] audit: type=1800 audit(1776083720.561:53): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.301" name="bus" dev="ramfs" ino=12940 res=0 errno=0 [ 345.992330][ T5134] loop5: p1 < > p3 p4 [ 345.992330][ T5134] p4: [ 346.060634][ T5134] loop5: p3 start 4294901760 is beyond EOD, truncated [ 346.082128][ T5134] loop5: p4 size 722688 extends beyond EOD, truncated [ 346.149474][ T5134] loop5: p6 start 262464109 is beyond EOD, truncated [ 346.167357][ T5134] loop5: p7 size 2304 extends beyond EOD, truncated [ 346.571253][ T7057] loop5: detected capacity change from 0 to 4096 [ 347.383898][ T7057] ntfs3(loop5): Failed to read $AttrDef (-4). [ 347.462859][ T7081] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 347.956331][ T7087] loop0: detected capacity change from 0 to 128 [ 348.312229][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.850259][ T7083] bond1: (slave veth3): Enslaving as an active interface with a down link [ 349.094618][ T7086] bond1: (slave dummy0): making interface the new active one [ 349.181322][ T7086] dummy0: entered promiscuous mode [ 349.202103][ T7086] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 349.473665][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 349.507030][ T6012] udevd[6012]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 349.527209][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 349.562943][ T6904] udevd[6904]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 351.201505][ T7166] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 351.229177][ T5930] udevd[5930]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 351.394846][ T6899] udevd[6899]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 351.473640][ T6893] udevd[6893]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 351.611952][ T6163] udevd[6163]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 352.382655][ T7180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.459646][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 352.607917][ T6012] udevd[6012]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 353.165780][ T7184] binder: 7183:7184 ioctl c0306201 200000000280 returned -14 [ 355.300328][ T2142] IPVS: starting estimator thread 0... [ 355.430769][ T7203] IPVS: using max 192 ests per chain, 9600 per kthread [ 357.010949][ T7220] binder: 7217:7220 ioctl c0306201 200000000ac0 returned -14 [ 357.731038][ T7231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 363.265021][ T29] audit: type=1800 audit(1776083737.881:54): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.338" name="bus" dev="tmpfs" ino=437 res=0 errno=0 [ 363.793842][ T7260] 9p: Bad value for 'rfdno' [ 365.946867][ T6832] dummy0: left promiscuous mode [ 367.296757][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 367.424442][ T7284] syz_tun (unregistering): left allmulticast mode [ 367.439524][ T7282] loop3: detected capacity change from 0 to 1024 [ 368.041220][ T7288] dns_resolver: Unsupported content type (186) [ 374.606567][ T7316] loop1: detected capacity change from 0 to 256 [ 374.639369][ T7316] vfat: Unknown parameter 'uni_' [ 375.440568][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 377.957441][ T5783] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 377.966714][ T5783] Bluetooth: hci2: Injecting HCI hardware error event [ 377.974667][ T5783] Bluetooth: hci2: hardware error 0x00 [ 380.476433][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.366'. [ 380.771445][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 381.750410][ T5944] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 381.966378][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.985438][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.026717][ T5944] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 382.047061][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.116348][ T5944] usb 6-1: config 0 descriptor?? [ 382.868815][ T5944] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 383.124716][ T5944] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 383.231934][ T5944] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 383.239075][ T5944] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 383.443705][ T5944] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 383.568863][ T5944] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 383.635771][ T5944] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 383.739558][ T5944] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 383.955411][ T5944] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 384.083917][ T5944] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 384.243623][ T5944] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -71 [ 384.449623][ T5944] usb 6-1: USB disconnect, device number 2 [ 384.862634][ T7375] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 384.869953][ T7375] overlayfs: failed to set xattr on upper [ 384.876106][ T7375] overlayfs: ...falling back to redirect_dir=nofollow. [ 384.891033][ T7375] overlayfs: ...falling back to index=off. [ 384.897037][ T7375] overlayfs: ...falling back to uuid=null. [ 384.969288][ T7375] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 385.246002][ T29] audit: type=1804 audit(1776083759.851:55): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.378" name="bus" dev="ramfs" ino=13637 res=1 errno=0 [ 385.380492][ T29] audit: type=1804 audit(1776083759.851:56): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.378" name="bus" dev="ramfs" ino=13637 res=1 errno=0 [ 385.743492][ T7374] fido_id[7374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 386.058797][ T7385] loop1: detected capacity change from 0 to 1024 [ 386.385603][ T7385] hfsplus: xattr searching failed [ 386.811390][ T7392] hfsplus: xattr searching failed [ 388.423335][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.431229][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.481078][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 389.578902][ T29] audit: type=1326 audit(1776083764.191:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 389.692190][ T29] audit: type=1326 audit(1776083764.241:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 389.890273][ T29] audit: type=1326 audit(1776083764.241:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 390.043107][ T29] audit: type=1326 audit(1776083764.251:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 390.201669][ T29] audit: type=1326 audit(1776083764.251:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 390.340548][ T29] audit: type=1326 audit(1776083764.251:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 390.390256][ T29] audit: type=1326 audit(1776083764.251:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 390.523190][ T29] audit: type=1326 audit(1776083764.261:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 390.630279][ T29] audit: type=1326 audit(1776083764.261:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 390.769117][ T29] audit: type=1326 audit(1776083764.261:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 391.049626][ T29] audit: type=1326 audit(1776083764.261:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 391.315107][ T29] audit: type=1326 audit(1776083764.261:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 391.403506][ T29] audit: type=1326 audit(1776083764.261:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 391.457865][ T29] audit: type=1326 audit(1776083764.271:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 392.107246][ T29] audit: type=1326 audit(1776083764.291:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7428 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f486859c819 code=0x7ffc0000 [ 394.966671][ T7466] loop1: detected capacity change from 0 to 4096 [ 395.330577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 395.595581][ T7470] loop3: detected capacity change from 0 to 32768 [ 395.647297][ T7470] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.409 (7470) [ 395.675457][ T7470] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 395.685882][ T7470] BTRFS info (device loop3): using sha256 checksum algorithm [ 396.338355][ T7470] BTRFS info (device loop3): enabling ssd optimizations [ 396.345736][ T7470] BTRFS info (device loop3): turning on async discard [ 396.358828][ T7470] BTRFS info (device loop3): enabling free space tree [ 399.225977][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.686713][ T7515] syzkaller0: entered promiscuous mode [ 405.753438][ T7515] syzkaller0: entered allmulticast mode [ 408.782030][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 408.872246][ T7552] loop0: detected capacity change from 0 to 256 [ 408.921174][ T7552] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.990655][ T7552] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 409.034776][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 409.129607][ T7552] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 409.212869][ T7552] exFAT-fs (loop0): failed to load alloc-bitmap [ 409.219347][ T7552] exFAT-fs (loop0): failed to recognize exfat type [ 409.661037][ T7552] capability: warning: `syz.0.428' uses deprecated v2 capabilities in a way that may be insecure [ 410.581706][ T7570] vlan2: entered promiscuous mode [ 410.626451][ T7570] veth0_virt_wifi: entered promiscuous mode [ 410.666202][ T7570] vlan2: entered allmulticast mode [ 410.703404][ T7570] veth0_virt_wifi: entered allmulticast mode [ 412.669717][ T7592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.799768][ T7597] loop1: detected capacity change from 0 to 32768 [ 413.845887][ T7597] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.443 (7597) [ 414.262126][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.503778][ T7597] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 414.514669][ T7597] BTRFS info (device loop1): using crc32c checksum algorithm [ 414.523521][ T7597] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 414.767157][ T7597] BTRFS info (device loop1): rebuilding free space tree [ 414.838093][ T7597] BTRFS info (device loop1): disabling free space tree [ 414.845473][ T7597] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 414.855731][ T7597] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 414.885110][ T7597] BTRFS info (device loop1): enabling ssd optimizations [ 414.896966][ T7597] BTRFS info (device loop1): turning on async discard [ 414.904251][ T7597] BTRFS info (device loop1): enabling disk space caching [ 414.911814][ T7597] BTRFS info (device loop1): force clearing of disk cache [ 414.919162][ T7597] BTRFS info (device loop1): use zstd compression, level 3 [ 417.785342][ T7625] loop5: detected capacity change from 0 to 16 [ 417.795538][ T7625] erofs: Unknown parameter '' [ 418.679429][ T5773] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 421.555111][ T7637] loop5: detected capacity change from 0 to 32768 [ 421.565314][ T7637] btrfs: Deprecated parameter 'usebackuproot' [ 421.571843][ T7637] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 421.591323][ T7637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.453 (7637) [ 421.615840][ T7637] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 421.626397][ T7637] BTRFS info (device loop5): using crc32c checksum algorithm [ 421.634262][ T7637] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 421.824112][ T7637] BTRFS info (device loop5): rebuilding free space tree [ 421.872112][ T7637] BTRFS info (device loop5): disabling free space tree [ 421.879447][ T7637] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 421.889788][ T7637] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 421.982027][ T7637] BTRFS info (device loop5): setting nodatasum [ 421.988587][ T7637] BTRFS info (device loop5): setting nodatacow [ 421.995177][ T7637] BTRFS info (device loop5): enabling ssd optimizations [ 422.002517][ T7637] BTRFS info (device loop5): turning on async discard [ 422.009510][ T7637] BTRFS info (device loop5): enabling disk space caching [ 422.017001][ T7637] BTRFS info (device loop5): force clearing of disk cache [ 422.024548][ T7637] BTRFS info (device loop5): trying to use backup root at mount time [ 422.033021][ T7637] BTRFS info (device loop5): max_inline set to 4096 [ 422.325665][ T7664] overlayfs: missing 'lowerdir' [ 422.653753][ T7666] fuse: root generation should be zero [ 422.822993][ T6186] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.822394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 424.881975][ T7682] binder: BINDER_SET_CONTEXT_MGR already set [ 424.888366][ T7682] binder: 7680:7682 ioctl 4018620d 200000000100 returned -16 [ 426.400295][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 428.215139][ T5838] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.201222][ T5838] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 430.197898][ T5838] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 431.194882][ T5838] usb 4-1: string descriptor 0 read error: -71 [ 431.202298][ T5838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.212723][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.241201][ T5838] usb 4-1: can't set config #1, error -71 [ 431.252251][ T5838] usb 4-1: USB disconnect, device number 5 [ 432.154607][ T7720] netlink: 3 bytes leftover after parsing attributes in process `syz.1.473'. [ 432.230552][ T5838] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 432.275223][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'. [ 432.334535][ T7725] netlink: 'syz.0.474': attribute type 83 has an invalid length. [ 432.545690][ T5838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 432.593361][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.634303][ T5838] usb 4-1: Product: syz [ 432.649764][ T5838] usb 4-1: Manufacturer: syz [ 432.689315][ T5838] usb 4-1: SerialNumber: syz [ 432.817263][ T5838] usb 4-1: config 0 descriptor?? [ 432.899614][ T7728] bond2: entered promiscuous mode [ 432.962560][ T7728] bond2: entered allmulticast mode [ 433.090616][ T5838] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 433.337696][ T7732] ALSA: mixer_oss: invalid OSS volume '' [ 433.521015][ T7732] ALSA: mixer_oss: invalid OSS volume ' a=!˹=+LKWM:~' [ 433.561137][ T7732] ALSA: mixer_oss: invalid OSS volume '%wѺM#i6[NVLKK-' [ 433.586841][ T7732] ALSA: mixer_oss: invalid OSS volume 'ڶZ:3.F?Y^x1b' [ 433.617458][ T7732] ALSA: mixer_oss: invalid OSS volume ' $i.A_|#Xd#>z^a' [ 435.242168][ T5838] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 435.808918][ T5838] usb 4-1: USB disconnect, device number 6 [ 442.711914][ T7773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 443.511053][ T7773] block device autoloading is deprecated and will be removed. [ 443.774873][ T7771] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 445.859901][ T7771] block device autoloading is deprecated and will be removed. [ 447.762898][ T2142] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 447.851339][ T2142] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.258782][ T7808] SQUASHFS error: Failed to read block 0x0: -5 [ 449.534891][ T7808] unable to read squashfs_super_block [ 450.444128][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.451821][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.392944][ T7804] fido_id[7804]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 456.112714][ T7832] fuse: Bad value for 'fd' [ 456.959294][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.508'. [ 461.767000][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 467.290970][ T7913] 9pnet: p9_errstr2errno: server reported unknown error .{>"K [ 468.219460][ T7926] netlink: 'syz.2.537': attribute type 13 has an invalid length. [ 468.251394][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 468.355619][ T7926] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 470.302405][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 471.420953][ T7942] binder: 7941:7942 ioctl c0306201 200000000240 returned -14 [ 479.848299][ T7980] loop1: detected capacity change from 0 to 64 [ 480.220489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 480.630119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 480.732527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 480.840237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 481.961372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 484.962078][ T8005] loop0: detected capacity change from 0 to 40427 [ 485.053596][ T8005] F2FS-fs (loop0): invalid crc value [ 485.481816][ T8005] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 485.516055][ T8005] F2FS-fs (loop0): Start checkpoint disabled! [ 485.552040][ T8005] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 485.571563][ T8005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 485.614605][ T7161] kworker/u8:31: attempt to access beyond end of device [ 485.614605][ T7161] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 485.717930][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: kworker/u8:31 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.718109][ T7161] Tainted: [L]=SOFTLOCKUP [ 485.718161][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.718289][ T7161] Workqueue: writeback wb_workfn (flush-7:0) [ 485.718643][ T7161] Call Trace: [ 485.718698][ T7161] [ 485.718749][ T7161] __dump_stack+0x26/0x30 [ 485.718946][ T7161] dump_stack_lvl+0x14c/0x1c0 [ 485.719117][ T7161] dump_stack+0x1e/0x25 [ 485.719291][ T7161] f2fs_handle_critical_error+0xa6f/0xc20 [ 485.719637][ T7161] f2fs_stop_checkpoint+0x65/0x80 [ 485.719824][ T7161] f2fs_write_end_io+0x12e6/0x2560 [ 485.720063][ T7161] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 485.720219][ T7161] bio_endio+0x1006/0x1160 [ 485.720450][ T7161] submit_bio_noacct+0x533/0x2960 [ 485.720712][ T7161] submit_bio+0x57a/0x620 [ 485.720889][ T7161] f2fs_submit_write_bio+0x115/0x350 [ 485.721108][ T7161] __submit_merged_bio+0x16f/0x780 [ 485.721312][ T7161] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.721531][ T7161] __submit_merged_write_cond+0x4ba/0xae0 [ 485.721785][ T7161] f2fs_write_data_pages+0x5073/0x5e10 [ 485.722063][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.722231][ T7161] ? __perf_event_task_sched_in+0x1f66/0x2060 [ 485.722475][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.722624][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.722757][ T7161] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 485.722975][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.723113][ T7161] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.723266][ T7161] ? finish_task_switch+0x145/0x8b0 [ 485.723533][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.723669][ T7161] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.723812][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.723949][ T7161] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.724087][ T7161] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 485.724245][ T7161] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 485.724409][ T7161] do_writepages+0x3f2/0x860 [ 485.724605][ T7161] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.724756][ T7161] ? writeback_sb_inodes+0x1/0x1d90 [ 485.724939][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.725098][ T7161] __writeback_single_inode+0x101/0x11c0 [ 485.725325][ T7161] writeback_sb_inodes+0xb3b/0x1d90 [ 485.725697][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.725839][ T7161] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 485.725999][ T7161] wb_writeback+0x4f1/0xcd0 [ 485.726220][ T7161] ? queue_io+0x411/0x800 [ 485.726411][ T7161] wb_workfn+0x3b9/0x19b0 [ 485.726586][ T7161] ? kmsan_get_metadata+0xf1/0x160 [ 485.726754][ T7161] ? __pfx_wb_workfn+0x10/0x10 [ 485.726919][ T7161] process_scheduled_works+0xb82/0x1e80 [ 485.727206][ T7161] worker_thread+0xee4/0x1590 [ 485.727410][ T7161] kthread+0x53f/0x600 [ 485.727624][ T7161] ? __pfx_worker_thread+0x10/0x10 [ 485.727802][ T7161] ? __pfx_kthread+0x10/0x10 [ 485.727984][ T7161] ret_from_fork+0x20f/0x910 [ 485.728209][ T7161] ? __switch_to+0x51c/0x750 [ 485.728444][ T7161] ? __pfx_kthread+0x10/0x10 [ 485.728626][ T7161] ret_from_fork_asm+0x1a/0x30 [ 485.728851][ T7161] [ 486.197266][ T7161] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 487.219133][ T8034] loop5: detected capacity change from 0 to 128 [ 487.371864][ T8034] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4673: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 487.467959][ T8034] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 487.578300][ T5930] udevd[5930]: incorrect jbd checksum on /dev/loop5 [ 488.730182][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 488.730264][ T29] audit: type=1326 audit(1776083863.191:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.5.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d499c819 code=0x7ffc0000 [ 488.910282][ T29] audit: type=1326 audit(1776083863.191:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.5.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f26d499c819 code=0x7ffc0000 [ 489.048040][ T29] audit: type=1326 audit(1776083863.191:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.5.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d499c819 code=0x7ffc0000 [ 489.177488][ T29] audit: type=1326 audit(1776083863.201:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.5.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d499c819 code=0x7ffc0000 [ 491.172188][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 492.078709][ T8050] syzkaller0: entered promiscuous mode [ 492.122857][ T8050] syzkaller0: entered allmulticast mode [ 492.483916][ T8052] Cannot find del_set index 2 as target [ 495.338731][ C1] hrtimer: interrupt took 241235 ns [ 497.412721][ T8074] loop0: detected capacity change from 0 to 32768 [ 497.611858][ T8074] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.581 (8074) [ 498.065840][ T8077] loop5: detected capacity change from 0 to 1024 [ 498.299188][ T8079] fuse: Bad value for 'fd' [ 499.352489][ T8074] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 499.363231][ T8074] BTRFS info (device loop0): using crc32c checksum algorithm [ 499.380053][ T8074] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 499.506513][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 499.507326][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 499.517477][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 499.526999][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 499.538546][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 499.548701][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 499.558195][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 499.568392][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 499.581754][ T8074] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 499.609769][ T8074] BTRFS error (device loop0): open_ctree failed: -12 [ 501.047115][ T8110] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 501.771024][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.590'. [ 502.139007][ T8115] ip6gre1: entered promiscuous mode [ 502.180544][ T8115] ip6gre1: entered allmulticast mode [ 506.160972][ T8147] loop5: detected capacity change from 0 to 512 [ 506.966643][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.602'. [ 508.763017][ T29] audit: type=1326 audit(1776083883.381:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.2.606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7467b9c819 code=0x0 [ 511.295433][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.305079][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.308689][ T8185] overlayfs: failed to clone upperpath [ 516.637971][ T8201] netlink: 44 bytes leftover after parsing attributes in process `syz.5.619'. [ 516.727591][ T8204] netlink: 'syz.0.620': attribute type 11 has an invalid length. [ 516.811534][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.620'. [ 517.271530][ T8210] binder: 8205:8210 ioctl c0306201 200000004a40 returned -14 [ 520.717349][ T8236] loop3: detected capacity change from 0 to 32768 [ 520.921696][ T8236] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.629 (8236) [ 521.369516][ T8236] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 521.380634][ T8236] BTRFS info (device loop3): using crc32c checksum algorithm [ 521.390487][ T8236] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 521.656838][ T8260] loop5: detected capacity change from 0 to 1024 [ 521.751275][ T8236] BTRFS info (device loop3): rebuilding free space tree [ 521.819426][ T8236] BTRFS info (device loop3): disabling free space tree [ 521.827400][ T8236] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 521.837581][ T8236] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 521.878493][ T8236] BTRFS info (device loop3): enabling ssd optimizations [ 521.886233][ T8236] BTRFS info (device loop3): turning on async discard [ 521.893531][ T8236] BTRFS info (device loop3): enabling disk space caching [ 521.902894][ T8236] BTRFS info (device loop3): force clearing of disk cache [ 521.910725][ T8236] BTRFS info (device loop3): use zstd compression, level 3 [ 522.958222][ T8266] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 525.387464][ T5775] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 525.741559][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 530.738727][ T8315] loop5: detected capacity change from 0 to 16 [ 530.974447][ T8315] erofs (device loop5): mounted with root inode @ nid 36. [ 532.637837][ T8319] syzkaller0: entered promiscuous mode [ 532.682505][ T8319] syzkaller0: entered allmulticast mode [ 537.213836][ T8354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'. [ 537.270410][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'. [ 537.392263][ T8354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'. [ 538.350913][ T8363] xt_CT: No such helper "pptp" [ 542.317026][ T8378] syzkaller0: entered promiscuous mode [ 542.360657][ T8378] syzkaller0: entered allmulticast mode [ 546.247343][ T8409] loop3: detected capacity change from 0 to 1024 [ 546.278354][ T8409] hfsplus: Bad value for 'uid' [ 558.250020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 558.351682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 565.511609][ T5838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 566.264588][ T5782] Bluetooth: hci3: Unknown advertising packet type: 0x18 [ 566.264717][ T5782] Bluetooth: hci3: Unknown advertising packet type: 0x1e [ 566.272667][ T5782] Bluetooth: hci3: Unknown advertising packet type: 0x30 [ 566.921137][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 566.957796][ T5838] usb 6-1: too many configurations: 21, using maximum allowed: 8 [ 567.000585][ T5838] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 567.030529][ T5838] usb 6-1: can't read configurations, error -71 [ 568.644978][ T8502] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 572.397503][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.706'. [ 572.500215][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.706'. [ 572.657379][ T8516] dummy0: entered promiscuous mode [ 572.732988][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.741072][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.781840][ T8516] team0: entered promiscuous mode [ 572.787041][ T8516] team_slave_0: entered promiscuous mode [ 572.935813][ T8516] team_slave_1: entered promiscuous mode [ 573.758062][ T8530] binder_alloc: 8527: binder_alloc_buf, no vma [ 573.935421][ T8533] netlink: 'syz.5.713': attribute type 12 has an invalid length. [ 580.901080][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 586.888263][ T8589] capability: warning: `syz.5.730' uses 32-bit capabilities (legacy support in use) [ 588.500263][ T2142] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 588.715674][ T2142] usb 2-1: Using ep0 maxpacket: 32 [ 588.783120][ T2142] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 588.810931][ T2142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.828286][ T2142] usb 2-1: Product: syz [ 588.844222][ T2142] usb 2-1: Manufacturer: syz [ 588.893575][ T2142] usb 2-1: SerialNumber: syz [ 588.933597][ T2142] usb 2-1: config 0 descriptor?? [ 588.966030][ T2142] ums_eneub6250 2-1:0.0: USB Mass Storage device detected [ 591.081163][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 591.279815][ T8607] loop1: detected capacity change from 0 to 8192 [ 592.063616][ T5834] usb 2-1: USB disconnect, device number 4 [ 593.207583][ T8634] input: syz0 as /devices/virtual/input/input6 [ 607.609432][ T8738] netlink: 'syz.5.772': attribute type 14 has an invalid length. [ 607.620889][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 607.647056][ T8738] bond0: option xmit_hash_policy: invalid value (172) [ 613.666458][ T8755] syzkaller0: entered promiscuous mode [ 613.700551][ T8755] syzkaller0: entered allmulticast mode [ 613.892045][ T8755] tipc: Started in network mode [ 613.897384][ T8755] tipc: Node identity 96a4dc1ad668, cluster identity 4711 [ 613.968946][ T8755] tipc: Enabled bearer , priority 0 [ 614.037481][ T8753] tipc: Resetting bearer [ 614.154462][ T8753] tipc: Disabling bearer [ 616.382562][ T8775] Bluetooth: MGMT ver 1.23 [ 621.200533][ T8789] loop5: detected capacity change from 0 to 512 [ 621.415416][ T8789] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.787: invalid indirect mapped block 256 (level 2) [ 621.976553][ T8789] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 621.980065][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 621.996419][ C0] EXT4-fs (loop5): initial error at time 1776083996: ext4_free_branches:1023: inode 11 [ 622.006516][ C0] EXT4-fs (loop5): last error at time 1776083996: ext4_free_branches:1023: inode 11 [ 622.052617][ T8789] EXT4-fs (loop5): 2 truncates cleaned up [ 622.171992][ T8789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.444924][ T8801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.236116][ T29] audit: type=1800 audit(1776083997.121:92): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.787" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 623.288542][ T8790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.238517][ T8787] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.787: bg 0: block 5: invalid block bitmap [ 624.282477][ T8787] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 624.296585][ T8787] EXT4-fs (loop5): This should not happen!! Data will be lost [ 624.296585][ T8787] [ 624.306783][ T8787] EXT4-fs (loop5): Total free blocks count 0 [ 624.313412][ T8787] EXT4-fs (loop5): Free/Dirty block details [ 624.319780][ T8787] EXT4-fs (loop5): free_blocks=0 [ 624.325373][ T8787] EXT4-fs (loop5): dirty_blocks=32 [ 624.331179][ T8787] EXT4-fs (loop5): Block reservation details [ 624.337608][ T8787] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 626.529276][ T6186] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 626.703043][ T6186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.698812][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054bfa800: rx timeout, send abort [ 633.028195][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 633.199841][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805486ea00: rx timeout, send abort [ 633.209626][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054bfa800: abort rx timeout. Force session deactivation [ 633.633944][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554ed800: rx timeout, send abort [ 633.650597][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880554ed800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 633.708595][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805486ea00: abort rx timeout. Force session deactivation [ 634.761515][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.779233][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.770529][ T8869] syzkaller0: entered promiscuous mode [ 636.780928][ T8869] syzkaller0: entered allmulticast mode [ 636.875222][ T8876] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 637.334181][ T8880] bond2: (slave gretap1): making interface the new active one [ 637.407417][ T8880] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 637.606309][ T8882] macvlan0: entered promiscuous mode [ 638.373929][ T8882] macvlan0: entered allmulticast mode [ 639.391540][ T29] audit: type=1326 audit(1776084013.081:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.0.817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f486859c819 code=0x0 [ 639.436267][ T8882] bond2: entered promiscuous mode [ 640.376748][ T8882] gretap1: entered promiscuous mode [ 640.794786][ T8882] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 641.094601][ T8882] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 641.200281][ T8882] bond2: left promiscuous mode [ 641.205289][ T8882] gretap1: left promiscuous mode [ 641.639458][ T8901] fuse: Bad value for 'fd' [ 657.129153][ T8961] netlink: 'syz.0.837': attribute type 17 has an invalid length. [ 657.209383][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 657.756780][ T8972] netlink: 'syz.5.842': attribute type 2 has an invalid length. [ 657.852595][ T8972] netlink: 'syz.5.842': attribute type 2 has an invalid length. [ 664.651061][ T9017] mmap: syz.1.852 (9017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 665.072631][ T9020] 9p: Bad value for 'rfdno' [ 668.000741][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 669.323438][ T29] audit: type=1326 audit(1776084043.901:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.1.866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cbef9c819 code=0x0 [ 680.879747][ T9097] bridge1: entered promiscuous mode [ 681.511043][ T9097] bridge1: entered allmulticast mode [ 683.706224][ T9097] team0: Port device bridge1 added [ 684.740868][ T9121] loop5: detected capacity change from 0 to 512 [ 684.973967][ T9121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.339137][ T6186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.113658][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 688.420869][ T9136] bond0: option lp_interval: invalid value (0) [ 688.476653][ T9136] bond0: option lp_interval: allowed values 1 - 2147483647 [ 689.990475][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 691.053919][ T9148] loop5: detected capacity change from 0 to 128 [ 692.188730][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 693.950909][ T9148] vivid-001: disconnect [ 694.554636][ T9140] vivid-001: reconnect [ 695.092074][ T5838] usb 4-1: device descriptor read/all, error -71 [ 695.592903][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.599593][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.682728][ T9153] tipc: Failed to remove unknown binding: 66,0,0/0:334440185/334440187 [ 695.691807][ T9153] tipc: Failed to remove unknown binding: 66,0,0/0:334440185/334440186 [ 695.750452][ T9153] tipc: Failed to remove unknown binding: 66,0,0/0:334440185/334440187 [ 695.758991][ T9153] tipc: Failed to remove unknown binding: 66,0,0/0:334440185/334440186 [ 695.834342][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 696.673910][ T9164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.698520][ T9164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.710417][ T9164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.727478][ T9164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.761470][ T9164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.805712][ T9171] loop3: detected capacity change from 0 to 512 [ 697.955051][ T9173] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 698.378873][ T9171] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 524322)! [ 698.940805][ T9171] EXT4-fs (loop3): group descriptors corrupted! [ 698.951170][ T5782] Bluetooth: hci5: command tx timeout [ 699.980296][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 699.989148][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 700.616052][ T9185] Cannot find add_set index 0 as target [ 700.711965][ T5782] Bluetooth: hci1: hardware error 0x00 [ 701.001276][ T9164] Bluetooth: hci5: command tx timeout [ 702.078044][ T9188] loop5: detected capacity change from 0 to 2048 [ 702.732225][ T9188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.096374][ T9164] Bluetooth: hci5: command tx timeout [ 703.320505][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 705.750104][ T5782] Bluetooth: hci5: command tx timeout [ 706.296164][ T9162] chnl_net:caif_netlink_parms(): no params data found [ 707.981042][ T9215] zonefs (nullb0) ERROR: Not a zoned block device [ 714.320238][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.363449][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.394976][ T9162] bridge_slave_0: entered allmulticast mode [ 714.454913][ T9162] bridge_slave_0: entered promiscuous mode [ 714.563708][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.612382][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.653287][ T9162] bridge_slave_1: entered allmulticast mode [ 714.799019][ T9162] bridge_slave_1: entered promiscuous mode [ 717.988852][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.536670][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.283835][ T9162] team0: Port device team_slave_0 added [ 720.435986][ T9162] team0: Port device team_slave_1 added [ 724.773273][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.864007][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.941546][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.820617][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.827790][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.114943][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.705665][ T6832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 730.108908][ T9285] loop3: detected capacity change from 0 to 32768 [ 730.172512][ T6832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.220737][ T9285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.930 (9285) [ 730.589768][ T9285] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 730.601287][ T9285] BTRFS info (device loop3): using crc32c checksum algorithm [ 731.066316][ T6832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 731.183710][ T9285] BTRFS info (device loop3): enabling ssd optimizations [ 731.191422][ T9285] BTRFS info (device loop3): turning on async discard [ 731.198455][ T9285] BTRFS info (device loop3): enabling free space tree [ 731.243841][ T6832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.857056][ T6832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 733.920698][ T6832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.211115][ T9162] hsr_slave_0: entered promiscuous mode [ 734.252244][ T9162] hsr_slave_1: entered promiscuous mode [ 734.309685][ T9162] debugfs: 'hsr0' already exists in 'hsr' [ 734.319765][ T9162] Cannot create hsr debugfs directory [ 734.424043][ T6832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 734.504626][ T6832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.791936][ T9324] loop5: detected capacity change from 0 to 512 [ 734.893082][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 735.893360][ T9324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.887489][ T9332] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 737.923469][ T9335] program syz.3.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.936714][ T6186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.820359][ T9346] loop3: detected capacity change from 0 to 2048 [ 739.833768][ T9351] tipc: Failed to remove unknown binding: 66,0,0/0:2722835610/2722835611 [ 739.844021][ T9351] tipc: Failed to remove unknown binding: 66,0,0/0:2722835610/2722835611 [ 739.889292][ T9346] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 740.003034][ T9346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 741.305387][ T6832] bridge_slave_1: left allmulticast mode [ 742.981131][ T6832] bridge_slave_1: left promiscuous mode [ 742.987788][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.117549][ T6832] bridge_slave_0: left allmulticast mode [ 743.158153][ T6832] bridge_slave_0: left promiscuous mode [ 743.716804][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.033916][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 749.743280][ T9393] netlink: 'syz.5.956': attribute type 3 has an invalid length. [ 749.752860][ T9393] netlink: 'syz.5.956': attribute type 1 has an invalid length. [ 749.778613][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.956'. [ 749.979068][ T6832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.037078][ T6832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.117085][ T6832] bond0 (unregistering): Released all slaves [ 751.639414][ T9162] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 752.117170][ T9162] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 752.337107][ T9162] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 752.669328][ T9162] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 753.416616][ T6832] hsr_slave_0: left promiscuous mode [ 753.500275][ T6832] hsr_slave_1: left promiscuous mode [ 753.518921][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.560218][ T6832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.669692][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.679187][ T6832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.939953][ T6832] veth1_macvtap: left promiscuous mode [ 753.971687][ T6832] veth0_macvtap: left promiscuous mode [ 753.988773][ T6832] veth1_vlan: left promiscuous mode [ 754.010331][ T6832] veth0_vlan: left promiscuous mode [ 754.322380][ T9428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 754.350932][ T9428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 754.357404][ T9428] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 754.501776][ T9428] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 754.508298][ T9428] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 754.588268][ T9428] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 754.704731][ T9434] netlink: 'syz.5.969': attribute type 1 has an invalid length. [ 755.855772][ T5838] IPVS: starting estimator thread 0... [ 755.976421][ T9453] IPVS: using max 288 ests per chain, 14400 per kthread [ 756.280473][ T5782] Bluetooth: hci4: command 0x0c1a tx timeout [ 756.443482][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 756.526567][ T5782] Bluetooth: hci5: command 0x0c1a tx timeout [ 756.720774][ T6832] team0 (unregistering): Port device team_slave_1 removed [ 756.897158][ T6832] team0 (unregistering): Port device team_slave_0 removed [ 757.030237][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.037006][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.320513][ T9164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.336230][ T9164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.426871][ T9164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.445890][ T9164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.495580][ T9164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 758.675946][ T9164] Bluetooth: hci3: command 0x0406 tx timeout [ 758.683556][ T9164] Bluetooth: hci5: command 0x0c1a tx timeout [ 759.695716][ T5782] Bluetooth: hci0: command tx timeout [ 760.760335][ T5782] Bluetooth: hci5: command 0x0c1a tx timeout [ 761.728842][ T5782] Bluetooth: hci0: command tx timeout [ 763.831393][ T5782] Bluetooth: hci0: command tx timeout [ 765.357576][ T9513] loop3: detected capacity change from 0 to 1024 [ 765.507748][ T9513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.664680][ T9526] loop5: detected capacity change from 0 to 16 [ 765.866813][ T9145] udevd[9145]: incorrect cramfs checksum on /dev/loop5 [ 765.910633][ T5782] Bluetooth: hci0: command tx timeout [ 766.305380][ T9465] chnl_net:caif_netlink_parms(): no params data found [ 766.542395][ T9145] udevd[9145]: incorrect cramfs checksum on /dev/loop5 [ 769.832973][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.353362][ T9544] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 773.515371][ T9558] loop5: detected capacity change from 0 to 128 [ 775.284285][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 775.448008][ T9565] nbd: socks must be embedded in a SOCK_ITEM attr [ 785.152310][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.225536][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.301724][ T9465] bridge_slave_0: entered allmulticast mode [ 785.386087][ T9465] bridge_slave_0: entered promiscuous mode [ 785.726844][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.846200][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.931116][ T9114] udevd[9114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 786.044422][ T9465] bridge_slave_1: entered allmulticast mode [ 786.069320][ T9465] bridge_slave_1: entered promiscuous mode [ 786.257826][ T9344] udevd[9344]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 791.518160][ T9465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.167526][ T9465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.565889][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.030915][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.503777][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.982708][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.242073][ T9617] bridge0: port 3(batadv0) entered disabled state [ 795.290774][ T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 795.597204][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 795.739270][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.820552][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.348892][ T30] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 796.586960][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.714666][ T30] usb 4-1: config 0 descriptor?? [ 796.768799][ T9465] team0: Port device team_slave_0 added [ 796.781335][ T30] usb 4-1: can't set config #0, error -71 [ 796.845979][ T30] usb 4-1: USB disconnect, device number 9 [ 796.916951][ T9465] team0: Port device team_slave_1 added [ 798.322001][ T152] bridge_slave_1: left allmulticast mode [ 798.328122][ T152] bridge_slave_1: left promiscuous mode [ 798.431074][ T9648] trusted_key: encrypted_key: insufficient parameters specified [ 799.305527][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.340272][ T152] bridge_slave_0: left allmulticast mode [ 799.346261][ T152] bridge_slave_0: left promiscuous mode [ 799.353154][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.853132][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.884384][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.563148][ T9669] overlayfs: failed to clone upperpath [ 805.897192][ T5838] ===================================================== [ 805.905073][ T5838] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 [ 805.913730][ T5838] vidtv_ts_null_write_into+0x43e/0x5c0 [ 805.919558][ T5838] vidtv_mux_tick+0x3480/0x3e30 [ 805.925880][ T5838] process_scheduled_works+0xb82/0x1e80 [ 805.931941][ T5838] worker_thread+0xee4/0x1590 [ 805.936976][ T5838] kthread+0x53f/0x600 [ 805.941606][ T5838] ret_from_fork+0x20f/0x910 [ 805.946908][ T5838] ret_from_fork_asm+0x1a/0x30 [ 805.955656][ T5838] [ 805.958140][ T5838] Uninit was stored to memory at: [ 805.965602][ T5838] vidtv_ts_null_write_into+0x437/0x5c0 [ 805.971939][ T5838] vidtv_mux_tick+0x3480/0x3e30 [ 805.977288][ T5838] process_scheduled_works+0xb82/0x1e80 [ 805.983674][ T5838] worker_thread+0xee4/0x1590 [ 805.988816][ T5838] kthread+0x53f/0x600 [ 805.993433][ T5838] ret_from_fork+0x20f/0x910 [ 805.998316][ T5838] ret_from_fork_asm+0x1a/0x30 [ 806.003769][ T5838] [ 806.006290][ T5838] Local variable args.i132 created at: [ 806.013421][ T5838] vidtv_mux_tick+0x3119/0x3e30 [ 806.018770][ T5838] process_scheduled_works+0xb82/0x1e80 [ 806.024981][ T5838] [ 806.027484][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.039222][ T5838] Tainted: [L]=SOFTLOCKUP [ 806.044455][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 806.055939][ T5838] Workqueue: events vidtv_mux_tick [ 806.061802][ T5838] ===================================================== [ 806.069445][ T5838] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 806.497942][ T152] bond0 (unregistering): Released all slaves [ 807.061551][ T5838] Kernel panic - not syncing: kmsan.panic set ... [ 807.068468][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/0:5 Tainted: G B L syzkaller #0 PREEMPT(full) [ 807.080021][ T5838] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 807.085918][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.096464][ T5838] Workqueue: events vidtv_mux_tick [ 807.101977][ T5838] Call Trace: [ 807.105601][ T5838] [ 807.108694][ T5838] __dump_stack+0x26/0x30 [ 807.113539][ T5838] dump_stack_lvl+0x50/0x1c0 [ 807.118481][ T5838] ? dump_stack+0x12/0x25 [ 807.123163][ T5838] dump_stack+0x1e/0x25 [ 807.128010][ T5838] vpanic+0x7b4/0x1430 [ 807.132380][ T5838] panic+0x15d/0x160 [ 807.136657][ T5838] kmsan_report+0x31a/0x320 [ 807.141368][ T5838] ? __msan_warning+0x1b/0x30 [ 807.146285][ T5838] ? vidtv_ts_null_write_into+0x43e/0x5c0 [ 807.152226][ T5838] ? vidtv_mux_tick+0x3480/0x3e30 [ 807.157518][ T5838] ? process_scheduled_works+0xb82/0x1e80 [ 807.163675][ T5838] ? worker_thread+0xee4/0x1590 [ 807.168760][ T5838] ? kthread+0x53f/0x600 [ 807.173241][ T5838] ? ret_from_fork+0x20f/0x910 [ 807.178233][ T5838] ? ret_from_fork_asm+0x1a/0x30 [ 807.183436][ T5838] ? ret_from_fork_asm+0x1a/0x30 [ 807.188634][ T5838] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 807.194757][ T5838] ? preempt_schedule_irq+0x79/0xa0 [ 807.200349][ T5838] ? kmsan_get_metadata+0xf1/0x160 [ 807.205676][ T5838] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 807.211698][ T5838] ? vidtv_ts_null_write_into+0x11/0x5c0 [ 807.217725][ T5838] ? filter_irq_stacks+0x49/0x190 [ 807.223280][ T5838] ? stack_depot_save_flags+0x35/0x790 [ 807.229103][ T5838] ? kmsan_get_metadata+0xf1/0x160 [ 807.234413][ T5838] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 807.241019][ T5838] ? kmsan_get_metadata+0xf1/0x160 [ 807.246346][ T5838] __msan_warning+0x1b/0x30 [ 807.251108][ T5838] vidtv_ts_null_write_into+0x43e/0x5c0 [ 807.257000][ T5838] vidtv_mux_tick+0x3480/0x3e30 [ 807.262345][ T5838] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 807.267893][ T5838] process_scheduled_works+0xb82/0x1e80 [ 807.273775][ T5838] worker_thread+0xee4/0x1590 [ 807.278727][ T5838] kthread+0x53f/0x600 [ 807.283043][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 807.288399][ T5838] ? __pfx_kthread+0x10/0x10 [ 807.293241][ T5838] ret_from_fork+0x20f/0x910 [ 807.298057][ T5838] ? __switch_to+0x51c/0x750 [ 807.302941][ T5838] ? __pfx_kthread+0x10/0x10 [ 807.307793][ T5838] ret_from_fork_asm+0x1a/0x30 [ 807.312851][ T5838] [ 807.316717][ T5838] Kernel Offset: disabled [ 807.321228][ T5838] Rebooting in 86400 seconds..