last executing test programs: 10.082987166s ago: executing program 3 (id=134): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r2, r1, 0x0, 0x40001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9.104722937s ago: executing program 2 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 9.103629808s ago: executing program 0 (id=136): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r3, &(0x7f0000000800)="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", 0x551, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) fstat(0xffffffffffffffff, &(0x7f0000000440)) 7.930658295s ago: executing program 0 (id=138): openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '[:!/+/!$,'}}]}}) 7.75622356s ago: executing program 3 (id=139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) tee(r1, r0, 0x9, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f00000000c0)="0309207965b0ac", 0x7, 0x8186, 0x0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/23, 0x17, 0x62, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r7) fsmount(r6, 0x0, 0x2) 7.631282724s ago: executing program 2 (id=141): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.548330307s ago: executing program 0 (id=142): sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x20000001) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 7.493139689s ago: executing program 1 (id=143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) io_setup(0x2278, &(0x7f0000000180)) 7.114819541s ago: executing program 0 (id=144): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0000000000fd00000000001400050000000040"], 0x30}, 0x1, 0x11}, 0x0) 5.59208721s ago: executing program 2 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.397362907s ago: executing program 3 (id=146): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10000001, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x10, 0xfc, 0x8, 0x100000, 0x4e, 0x3}, 0xfffffffffffffcba) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) 5.203491832s ago: executing program 0 (id=147): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102376, 0x18fe8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) syz_open_dev$tty20(0xc, 0x4, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r7 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r7, &(0x7f0000000240), 0xb375) read$FUSE(r7, &(0x7f0000004340)={0x2020}, 0x2020) 5.100285586s ago: executing program 1 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x541b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x40, &(0x7f0000000900)='trans=tcp,') 5.090570466s ago: executing program 2 (id=149): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xe, 0x2) readv(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000500)=""/204, 0xcc}], 0x2) 4.827534534s ago: executing program 2 (id=150): r0 = msgget$private(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, r1, r2, 0x0, 0x0, 0x189}, 0x0, 0x0, 0x6b, 0x92d, 0x0, 0x0, 0x5, 0x0, 0x4, 0x101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x127080, 0x0) 3.654417252s ago: executing program 3 (id=151): gettid() timer_create(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$hid(0xfa, 0x36, &(0x7f0000000340)=ANY=[], 0x0) 2.425755132s ago: executing program 1 (id=152): sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x20000001) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.380334023s ago: executing program 2 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.185593879s ago: executing program 1 (id=154): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, 0x0, 0x0) 1.576709219s ago: executing program 1 (id=155): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) tee(r1, r0, 0x9, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f00000000c0)="0309207965b0ac", 0x7, 0x8186, 0x0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/23, 0x17, 0x62, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r7) fsmount(r6, 0x0, 0x2) 1.492372992s ago: executing program 3 (id=156): open_by_handle_at(0xffffffffffffffff, 0x0, 0x100) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 1.492184612s ago: executing program 0 (id=157): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0xc000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) r2 = dup3(r1, r0, 0x0) io_setup(0xd, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f0000000100)="6dd97f", 0x3, 0x69, 0x0, 0x0, r1}]) 86.659077ms ago: executing program 3 (id=158): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x10c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r3, &(0x7f0000000080)="cc", 0x1, 0x200980) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 0s ago: executing program 1 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x1000003e}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)="e164df8919831717e760ae2f460ffa8e04efa145", 0x14}], 0x1}, 0x81) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 72.650747][ T5763] cgroup: Unknown subsys name 'net' [ 72.784934][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.103677][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.661665][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.679338][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.687241][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.691413][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.698969][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.702801][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.709597][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.717268][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.731958][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.739565][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.747470][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.754776][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.763619][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.771849][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.773197][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.786379][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.787198][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.794490][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.801641][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.809045][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.818204][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.828986][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.829361][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.844206][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.261601][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.273762][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 76.353363][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.384218][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.460821][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.468861][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.476157][ T5775] bridge_slave_0: entered allmulticast mode [ 76.483987][ T5775] bridge_slave_0: entered promiscuous mode [ 76.520792][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.527960][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.535467][ T5775] bridge_slave_1: entered allmulticast mode [ 76.542731][ T5775] bridge_slave_1: entered promiscuous mode [ 76.550357][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.557460][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.567646][ T5778] bridge_slave_0: entered allmulticast mode [ 76.574463][ T5778] bridge_slave_0: entered promiscuous mode [ 76.583148][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.590480][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.597745][ T5778] bridge_slave_1: entered allmulticast mode [ 76.604571][ T5778] bridge_slave_1: entered promiscuous mode [ 76.645663][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.687517][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.714810][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.722158][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.729605][ T5776] bridge_slave_0: entered allmulticast mode [ 76.736280][ T5776] bridge_slave_0: entered promiscuous mode [ 76.753199][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.765950][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.775420][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.783158][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.790377][ T5777] bridge_slave_0: entered allmulticast mode [ 76.797025][ T5777] bridge_slave_0: entered promiscuous mode [ 76.804522][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.812766][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.820169][ T5776] bridge_slave_1: entered allmulticast mode [ 76.826829][ T5776] bridge_slave_1: entered promiscuous mode [ 76.851774][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.858971][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.866096][ T5777] bridge_slave_1: entered allmulticast mode [ 76.873138][ T5777] bridge_slave_1: entered promiscuous mode [ 76.891551][ T5778] team0: Port device team_slave_0 added [ 76.909151][ T5778] team0: Port device team_slave_1 added [ 76.934588][ T5775] team0: Port device team_slave_0 added [ 76.943330][ T5775] team0: Port device team_slave_1 added [ 76.976353][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.004284][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.016440][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.027461][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.037503][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.044889][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.071056][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.083471][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.090961][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.116931][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.129775][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.136750][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.163450][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.191482][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.200647][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.228241][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.280199][ T5776] team0: Port device team_slave_0 added [ 77.296978][ T5777] team0: Port device team_slave_0 added [ 77.307189][ T5777] team0: Port device team_slave_1 added [ 77.314908][ T5776] team0: Port device team_slave_1 added [ 77.336798][ T5775] hsr_slave_0: entered promiscuous mode [ 77.343104][ T5775] hsr_slave_1: entered promiscuous mode [ 77.407177][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.414302][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.441153][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.465628][ T5778] hsr_slave_0: entered promiscuous mode [ 77.471920][ T5778] hsr_slave_1: entered promiscuous mode [ 77.478042][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.486214][ T5778] Cannot create hsr debugfs directory [ 77.492441][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.501821][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.530125][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.541839][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.548871][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.574911][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.616109][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.623225][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.649594][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.695558][ T5777] hsr_slave_0: entered promiscuous mode [ 77.701892][ T5777] hsr_slave_1: entered promiscuous mode [ 77.707855][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.715476][ T5777] Cannot create hsr debugfs directory [ 77.790075][ T5776] hsr_slave_0: entered promiscuous mode [ 77.796551][ T5776] hsr_slave_1: entered promiscuous mode [ 77.802754][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.811611][ T5776] Cannot create hsr debugfs directory [ 77.880672][ T5788] Bluetooth: hci3: command tx timeout [ 77.880685][ T51] Bluetooth: hci0: command tx timeout [ 77.880885][ T51] Bluetooth: hci2: command tx timeout [ 77.886325][ T5788] Bluetooth: hci1: command tx timeout [ 78.119588][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.138474][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.162480][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.172614][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.207289][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.225516][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.242708][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.252638][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.344253][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.355970][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.391813][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.429965][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.463167][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.475831][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.486229][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.495962][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.562894][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.610723][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.637306][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.677100][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.684401][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.713107][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.720273][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.733744][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.779864][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.787000][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.798753][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.806006][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.825912][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.866981][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.933104][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.949684][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.006683][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.013976][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.040299][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.047564][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.101645][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.108867][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.131694][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.138954][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.239419][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.400528][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.417852][ T5775] veth0_vlan: entered promiscuous mode [ 79.473584][ T5775] veth1_vlan: entered promiscuous mode [ 79.541821][ T5778] veth0_vlan: entered promiscuous mode [ 79.590624][ T5775] veth0_macvtap: entered promiscuous mode [ 79.604705][ T5778] veth1_vlan: entered promiscuous mode [ 79.626022][ T5775] veth1_macvtap: entered promiscuous mode [ 79.692523][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.708071][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.729763][ T5778] veth0_macvtap: entered promiscuous mode [ 79.741770][ T5778] veth1_macvtap: entered promiscuous mode [ 79.755479][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.775215][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.785328][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.798535][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807267][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.820681][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.858682][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.869979][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.882710][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.922597][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.934886][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.947021][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.958726][ T51] Bluetooth: hci2: command tx timeout [ 79.959590][ T5789] Bluetooth: hci1: command tx timeout [ 79.964228][ T51] Bluetooth: hci3: command tx timeout [ 79.970321][ T5788] Bluetooth: hci0: command tx timeout [ 80.003854][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.015083][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.025191][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.036175][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.136180][ T5776] veth0_vlan: entered promiscuous mode [ 80.136612][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.152963][ T5777] veth0_vlan: entered promiscuous mode [ 80.161121][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.233598][ T5777] veth1_vlan: entered promiscuous mode [ 80.243794][ T5776] veth1_vlan: entered promiscuous mode [ 80.257931][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.260977][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.282286][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.288596][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.325437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.339779][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.359579][ T5777] veth0_macvtap: entered promiscuous mode [ 80.387612][ T5777] veth1_macvtap: entered promiscuous mode [ 80.415830][ T5776] veth0_macvtap: entered promiscuous mode [ 80.443658][ T5776] veth1_macvtap: entered promiscuous mode [ 80.502164][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.557342][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.576051][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.587827][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.599757][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.683064][ T5845] ======================================================= [ 80.683064][ T5845] WARNING: The mand mount option has been deprecated and [ 80.683064][ T5845] and is ignored by this kernel. Remove the mand [ 80.683064][ T5845] option from the mount to silence this warning. [ 80.683064][ T5845] ======================================================= [ 81.401126][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.469404][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.508264][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.531725][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.544329][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.686230][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.716893][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.735105][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.743969][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.776738][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 82.394693][ T5788] Bluetooth: hci3: command tx timeout [ 82.400424][ T5788] Bluetooth: hci2: command tx timeout [ 82.405959][ T5789] Bluetooth: hci0: command tx timeout [ 82.411949][ T5788] Bluetooth: hci1: command tx timeout [ 82.599804][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.618762][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.635523][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.654640][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.678729][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.690984][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.703058][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.757065][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.800579][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.834137][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.857353][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.878325][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.904652][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.929792][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.015027][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.048220][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.056978][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.076008][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.119453][ T4893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.131927][ T4893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.201668][ T4893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.213793][ T4893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.295389][ T4893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.311627][ T4893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.724699][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.809544][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.140638][ T5871] syz.3.4[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.196723][ T5871] loop3: detected capacity change from 0 to 512 [ 84.233475][ T5871] EXT4-fs: Ignoring removed nobh option [ 84.285804][ T5875] loop2: detected capacity change from 0 to 1024 [ 84.317211][ T5875] hfsplus: failed to load root directory [ 84.415401][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 84.452557][ T5788] Bluetooth: hci1: command tx timeout [ 84.458012][ T5788] Bluetooth: hci0: command tx timeout [ 84.463587][ T51] Bluetooth: hci2: command tx timeout [ 84.469320][ T5789] Bluetooth: hci3: command tx timeout [ 84.521505][ T5871] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.4: iget: bad i_size value: 38620345925642 [ 84.588770][ T5871] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 84.637781][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.731097][ T5883] loop2: detected capacity change from 0 to 764 [ 84.933503][ T5883] Symlink component flag not implemented [ 84.939952][ T5883] Symlink component flag not implemented (15) [ 85.196287][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.461235][ T5887] tipc: Started in network mode [ 85.466540][ T5887] tipc: Node identity 12a26494507e, cluster identity 4711 [ 85.479743][ T5887] tipc: Enabled bearer , priority 0 [ 85.488417][ T5878] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 85.509514][ T5887] syzkaller0: entered promiscuous mode [ 85.515365][ T5887] syzkaller0: entered allmulticast mode [ 85.594886][ T5887] tipc: Resetting bearer [ 85.606748][ T5886] tipc: Resetting bearer [ 85.784198][ T5886] tipc: Disabling bearer [ 86.157803][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.183523][ T5897] loop0: detected capacity change from 0 to 512 [ 86.254600][ T5897] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.270122][ T5897] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 86.281752][ T5897] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.13: Corrupt directory, running e2fsck is recommended [ 86.302422][ T5897] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 86.384166][ T5897] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.13: corrupted in-inode xattr: e_name out of bounds [ 86.416316][ T5897] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.13: couldn't read orphan inode 15 (err -117) [ 86.474056][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.907959][ T5905] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.921154][ T5905] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 86.931564][ T5905] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.13: Corrupt directory, running e2fsck is recommended [ 87.528135][ C0] sched: RT throttling activated [ 87.530580][ T1201] cfg80211: failed to load regulatory.db [ 87.597134][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.972757][ T5912] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15'. [ 89.690076][ T5924] loop3: detected capacity change from 0 to 4096 [ 89.719811][ T5924] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.915116][ T5924] EXT4-fs error (device loop3): ext4_quota_enable:7144: inode #4: comm syz.3.19: casefold flag without casefold feature [ 89.943006][ T5924] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.19: Bad quota inode: 4, type: 1 [ 89.955390][ T5924] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.977147][ T5924] EXT4-fs (loop3): mount failed [ 90.149454][ T5780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.448477][ T5780] usb 2-1: Using ep0 maxpacket: 16 [ 90.687749][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.704116][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.714855][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.728206][ T5780] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.737361][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.785172][ T5780] usb 2-1: config 0 descriptor?? [ 90.847359][ T5933] loop2: detected capacity change from 0 to 1024 [ 90.874464][ T5933] hfsplus: failed to load root directory [ 91.006919][ T5940] loop2: detected capacity change from 0 to 1024 [ 91.035121][ T5940] EXT4-fs: Ignoring removed nobh option [ 91.078390][ T5940] EXT4-fs: inline encryption not supported [ 91.113675][ T5940] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.147677][ T5940] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 91.147677][ T5940] [ 92.835242][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.852067][ T5944] loop0: detected capacity change from 0 to 4096 [ 92.875703][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.888056][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.890178][ T5944] EXT4-fs (loop0): Test dummy encryption mode enabled [ 92.895674][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.909583][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.918017][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.925425][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.933653][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.941043][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 92.949729][ T5780] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 93.009877][ T5944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.039608][ T5780] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 93.116295][ T5780] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 93.227931][ T5780] usb 2-1: USB disconnect, device number 2 [ 93.280869][ T5958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.467389][ T5954] fido_id[5954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 94.149114][ T5944] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 95.931705][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.179767][ T5999] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 98.972372][ T5780] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 99.032079][ T5780] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.186388][ T6008] fido_id[6008]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.289066][ T6012] loop1: detected capacity change from 0 to 512 [ 99.324362][ T6012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.337524][ T6012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.390029][ T6012] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 99.398437][ T6012] EXT4-fs (loop1): orphan cleanup on readonly fs [ 99.409017][ T6012] EXT4-fs (loop1): 1 orphan inode deleted [ 99.415463][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.265742][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.438359][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.608726][ T6026] loop1: detected capacity change from 0 to 512 [ 100.680398][ T6026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.51: bg 0: block 5: invalid block bitmap [ 100.696992][ T5820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 100.714768][ T6026] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 100.737599][ T5820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 100.755471][ T6026] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.51: invalid indirect mapped block 3 (level 2) [ 100.786692][ T5820] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 100.796311][ T6026] EXT4-fs (loop1): 1 orphan inode deleted [ 100.808245][ T6026] EXT4-fs (loop1): 1 truncate cleaned up [ 100.819889][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.821484][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.863791][ T5820] usb 4-1: Product: syz [ 100.868018][ T5820] usb 4-1: Manufacturer: syz [ 100.883250][ T5820] usb 4-1: SerialNumber: syz [ 100.900205][ T5820] usb 4-1: config 0 descriptor?? [ 100.908614][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.916390][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.337934][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.389352][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.605881][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.673243][ T5820] Error reading MAC address [ 101.722071][ T5820] usb 4-1: USB disconnect, device number 2 [ 102.192182][ T6047] loop0: detected capacity change from 0 to 1024 [ 102.235666][ T6047] hfsplus: invalid extent btree flag [ 102.253963][ T6047] hfsplus: failed to load extents file [ 102.934204][ T6059] loop3: detected capacity change from 0 to 512 [ 102.957681][ T6060] tipc: Started in network mode [ 102.971603][ T6059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.997049][ T6060] tipc: Node identity 5e0df95d0485, cluster identity 4711 [ 103.048600][ T6060] tipc: Enabled bearer , priority 0 [ 103.104034][ T6059] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.119019][ T6063] syzkaller0: entered promiscuous mode [ 103.124527][ T6063] syzkaller0: entered allmulticast mode [ 103.139814][ T6059] EXT4-fs (loop3): 1 truncate cleaned up [ 103.155197][ T6059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.294948][ T6060] tipc: Resetting bearer [ 103.317185][ T6057] tipc: Resetting bearer [ 103.990571][ T6057] tipc: Disabling bearer [ 104.135511][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.159991][ T5780] tipc: Node number set to 1518926173 [ 104.489056][ T6075] loop1: detected capacity change from 0 to 2048 [ 104.569676][ T5768] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.737884][ T6079] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 107.248205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 107.663586][ T6101] tipc: Started in network mode [ 107.669820][ T6101] tipc: Node identity 366631b7a89, cluster identity 4711 [ 107.678657][ T6101] tipc: Enabled bearer , priority 0 [ 107.706235][ T6101] syzkaller0: entered promiscuous mode [ 107.748206][ T6101] syzkaller0: entered allmulticast mode [ 108.020019][ T6101] tipc: Resetting bearer [ 108.979224][ T6100] tipc: Resetting bearer [ 109.088104][ T6100] tipc: Disabling bearer [ 109.191336][ T1201] tipc: Node number set to 2666934711 [ 109.441730][ T6121] loop0: detected capacity change from 0 to 512 [ 109.486177][ T6121] EXT4-fs: Ignoring removed bh option [ 109.600970][ T6121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.798652][ T6121] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.912421][ T6121] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.81: iget: bad i_size value: 2533274857506816 [ 110.680420][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.557037][ T6149] loop1: detected capacity change from 0 to 128 [ 113.180247][ T6149] syz.1.88 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.921796][ T6161] tipc: Enabled bearer , priority 0 [ 114.938387][ T6161] syzkaller0: entered promiscuous mode [ 114.954186][ T6161] syzkaller0: entered allmulticast mode [ 115.031512][ T6161] tipc: Resetting bearer [ 115.064638][ T6159] tipc: Resetting bearer [ 115.203653][ T6159] tipc: Disabling bearer [ 115.948478][ T6168] loop3: detected capacity change from 0 to 512 [ 117.488201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 117.809814][ T6178] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.049738][ T6180] loop1: detected capacity change from 0 to 4096 [ 118.101253][ T6180] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.161791][ T6180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.474140][ T6180] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 120.212104][ T6180] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 120.410907][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.551756][ T6212] loop2: detected capacity change from 0 to 16 [ 120.580841][ T6212] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.614368][ T6212] process 'syz.2.105' launched './file1' with NULL argv: empty string added [ 120.657071][ T6210] loop0: detected capacity change from 0 to 2048 [ 120.774702][ T6210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.861332][ T6210] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.390934][ T6210] fs-verity: sha512 using implementation "sha512-avx2" [ 122.555277][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.625062][ T6232] loop2: detected capacity change from 0 to 2048 [ 122.700558][ T6232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.947312][ T6241] xt_hashlimit: max too large, truncated to 1048576 [ 122.999425][ T6244] syzkaller1: entered promiscuous mode [ 123.004960][ T6244] syzkaller1: entered allmulticast mode [ 125.683100][ T6263] input: syz0 as /devices/virtual/input/input6 [ 125.782867][ T6266] loop3: detected capacity change from 0 to 2048 [ 125.815165][ T6266] UDF-fs: error (device loop3): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 125.828103][ T6266] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 127.064771][ T6282] binder: 6281:6282 ioctl c0306201 200000000080 returned -14 [ 127.162544][ T6284] warning: `syz.3.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.232469][ T6286] tipc: Enabled bearer , priority 0 [ 127.253211][ T6286] syzkaller0: entered promiscuous mode [ 127.268330][ T6286] syzkaller0: entered allmulticast mode [ 127.303124][ T6286] tipc: Resetting bearer [ 127.348539][ T6285] tipc: Resetting bearer [ 127.468938][ T6295] loop3: detected capacity change from 0 to 512 [ 127.478093][ T6296] loop2: detected capacity change from 0 to 1024 [ 127.479527][ T6285] tipc: Disabling bearer [ 127.590847][ T6296] /dev/loop2: Can't open blockdev [ 127.619497][ T6295] EXT4-fs (loop3): 1 truncate cleaned up [ 127.645829][ T6295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.488281][ T28] audit: type=1804 audit(1780377689.732:2): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.134" name="/newroot/29/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 128.640428][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.649718][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.539193][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.546441][ T6314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.554114][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.561338][ T6314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.694210][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.711882][ T6314] bridge0: entered promiscuous mode [ 129.724954][ T6314] bridge0: entered allmulticast mode [ 132.121124][ T6334] tipc: Enabled bearer , priority 0 [ 132.143324][ T6334] syzkaller0: entered promiscuous mode [ 132.153349][ T6334] syzkaller0: entered allmulticast mode [ 132.177894][ T6334] tipc: Resetting bearer [ 132.198832][ T6333] tipc: Resetting bearer [ 132.242531][ T6333] tipc: Disabling bearer [ 133.400802][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.408080][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.982436][ T6365] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 137.437827][ T6377] loop3: detected capacity change from 0 to 128 [ 137.456839][ T6375] loop0: detected capacity change from 0 to 512 [ 137.523516][ T6377] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.552205][ T6377] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.678598][ T6381] syzkaller0: entered promiscuous mode [ 137.691387][ T6375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.704836][ T6381] syzkaller0: entered allmulticast mode [ 137.918184][ T28] audit: type=1800 audit(1780377699.162:3): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.157" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 137.952259][ T6377] BUG: unable to handle page fault for address: ffffffffffffffec [ 137.960063][ T6377] #PF: supervisor read access in kernel mode [ 137.966041][ T6377] #PF: error_code(0x0000) - not-present page [ 137.972106][ T6377] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 137.978098][ T6377] Oops: 0000 [#1] PREEMPT SMP KASAN [ 137.983304][ T6377] CPU: 1 PID: 6377 Comm: syz.3.158 Not tainted syzkaller #0 [ 137.990574][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.000622][ T6377] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 138.006355][ T6377] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 138.025970][ T6377] RSP: 0018:ffffc9000bff7638 EFLAGS: 00010246 [ 138.032034][ T6377] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 138.040003][ T6377] RDX: ffffc9000d8ea000 RSI: 0000000000004e79 RDI: ffffffffffffffec [ 138.047963][ T6377] RBP: ffffc9000bff7758 R08: ffff88823bc5e89f R09: 1ffff1104778bd13 [ 138.056031][ T6377] R10: dffffc0000000000 R11: ffffed104778bd14 R12: ffff88823bc5e930 [ 138.064007][ T6377] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 138.071990][ T6377] FS: 00007fa2d39fa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 138.080913][ T6377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.087496][ T6377] CR2: ffffffffffffffec CR3: 000000007995b000 CR4: 00000000003506e0 [ 138.095478][ T6377] Call Trace: [ 138.098857][ T6377] [ 138.101809][ T6377] finish_range+0x234/0x340 [ 138.106332][ T6377] ? update_tind_extent_range+0x3f0/0x3f0 [ 138.112057][ T6377] ? __ext4_sb_bread_gfp+0x14c/0x210 [ 138.117339][ T6377] update_ind_extent_range+0x2e3/0x520 [ 138.122797][ T6377] ext4_ext_migrate+0xb07/0x1080 [ 138.127734][ T6377] ? mb_regenerate_buddy+0x510/0x510 [ 138.133023][ T6377] ? down_read_killable+0x340/0x340 [ 138.138214][ T6377] ? sb_start_write+0x110/0x1c0 [ 138.143056][ T6377] ? mnt_want_write_file+0x16a/0x200 [ 138.148342][ T6377] ext4_ioctl+0x1ee3/0x3b80 [ 138.152850][ T6377] ? ext4_fileattr_set+0x16d0/0x16d0 [ 138.158133][ T6377] ? mark_lock+0x94/0x320 [ 138.162472][ T6377] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 138.168445][ T6377] ? do_vfs_ioctl+0x1573/0x1cc0 [ 138.173294][ T6377] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 138.178930][ T6377] ? tomoyo_path_number_perm+0x217/0x620 [ 138.184556][ T6377] ? __lock_acquire+0x7d40/0x7d40 [ 138.189568][ T6377] ? slab_free_freelist_hook+0x130/0x1a0 [ 138.195190][ T6377] ? tomoyo_path_number_perm+0x500/0x620 [ 138.200821][ T6377] ? __kmem_cache_free+0xba/0x1e0 [ 138.205866][ T6377] ? tomoyo_path_number_perm+0x5b4/0x620 [ 138.211487][ T6377] ? tomoyo_path_number_perm+0x217/0x620 [ 138.217107][ T6377] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 138.222563][ T6377] ? __fget_files+0x28/0x4b0 [ 138.227148][ T6377] ? __fget_files+0x28/0x4b0 [ 138.231744][ T6377] ? bpf_lsm_file_ioctl+0x9/0x10 [ 138.236666][ T6377] ? security_file_ioctl+0x80/0xa0 [ 138.241769][ T6377] ? ext4_fileattr_set+0x16d0/0x16d0 [ 138.247067][ T6377] __se_sys_ioctl+0xfd/0x170 [ 138.251647][ T6377] do_syscall_64+0x55/0xb0 [ 138.256061][ T6377] ? clear_bhb_loop+0x40/0x90 [ 138.260735][ T6377] ? clear_bhb_loop+0x40/0x90 [ 138.265404][ T6377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.271308][ T6377] RIP: 0033:0x7fa2d2b9ce59 [ 138.275718][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.295319][ T6377] RSP: 002b:00007fa2d39fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.303729][ T6377] RAX: ffffffffffffffda RBX: 00007fa2d2e15fa0 RCX: 00007fa2d2b9ce59 [ 138.311701][ T6377] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000007 [ 138.319666][ T6377] RBP: 00007fa2d2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 138.327625][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.335581][ T6377] R13: 00007fa2d2e16038 R14: 00007fa2d2e15fa0 R15: 00007fff8aa78db8 [ 138.343551][ T6377] [ 138.346555][ T6377] Modules linked in: [ 138.350451][ T6377] CR2: ffffffffffffffec [ 138.354682][ T6377] ---[ end trace 0000000000000000 ]--- [ 138.360143][ T6377] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 138.365855][ T6377] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 138.385482][ T6377] RSP: 0018:ffffc9000bff7638 EFLAGS: 00010246 [ 138.391547][ T6377] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 138.399508][ T6377] RDX: ffffc9000d8ea000 RSI: 0000000000004e79 RDI: ffffffffffffffec [ 138.407497][ T6377] RBP: ffffc9000bff7758 R08: ffff88823bc5e89f R09: 1ffff1104778bd13 [ 138.415478][ T6377] R10: dffffc0000000000 R11: ffffed104778bd14 R12: ffff88823bc5e930 [ 138.423443][ T6377] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 138.431419][ T6377] FS: 00007fa2d39fa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 138.440344][ T6377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.446915][ T6377] CR2: ffffffffffffffec CR3: 000000007995b000 CR4: 00000000003506e0 [ 138.454924][ T6377] Kernel panic - not syncing: Fatal exception [ 138.461232][ T6377] Kernel Offset: disabled [ 138.465546][ T6377] Rebooting in 86400 seconds..