last executing test programs: 5m38.115847412s ago: executing program 1 (id=181): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="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", 0xfb}, {&(0x7f0000000640)="a38ab2ee92b307ecae131ebfc57ad55b585237a5055bc53e8eeff94be3e7a5c233af3a6400b728e31d719c0047e34c85a0f0b50bb53a9aed47dfc85dc18efc7410473a75fba596a1ebcc48f754f1f99becc6c86524b60f69f919bd16818b8056c9cbed4dc3f517fe1a0d66169ebbfb810991a6bb1e01a6ded6c23e2c2526bd7a64e02dc8329f49e5b31235bea57bf437fe13efc2b8d113a7d04fd2dabe11e720e19f865fa96b3191fe2392cc7ba059ffef43f5f7f693dd5006a2c287bcff871fa3123aecce9712240d7594e46fcc201d941f838bb889cf963d7691", 0xdb}, {&(0x7f0000000040)="a4259b5906bfa8b4dd6baba1e8de51709f90", 0x12}, {&(0x7f00000000c0)="bd37977bebfd5442", 0x8}, {&(0x7f0000000140)="7801ec9eff3b1f411622341d3ff8c4e485c248a70287a0a412ec897f25e11ca906fa26d37c02f691201b34bafe04912f8fa4", 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e72c982b56a37a1c7", 0xf}, {&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e79936490023788174b7af0c760ea8723eed6912bd85156d534474c9e5629951d6e4287bd996f0f801217b1567d0a160a44f5c122d4512a0c8cde478f738110e77ae94c9add0b05940b7", 0xb3}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0) 5m36.504648915s ago: executing program 1 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001005c"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m36.203510013s ago: executing program 1 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) 5m35.834204244s ago: executing program 1 (id=193): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xfd, 0x2c3, &(0x7f0000000440)="$eJzs3NFLU2EYx/Ent9yc6RZEUFA91E3dHHT9ATVCIRoU5qS6CI55VmOnTc4ZxiJyN9Ftf4d02V1Q/QPeRDfddyeB0I0X0QnP2dFNp26m29LvB/S8O8/7833VozxH8Kw8ePe8mHeNvFmRgbjKgEhN1kRS66O6E/XjgD8elEY1uTb86/uF+w8f3clksxNTqpOZ6etpVR299OnFq/eXv1SGZz6MfozJcurxymr6x/LZ5XMrf6afFVwtuFoqV9TU2XK5Ys7als4V3KKhes+2TNfSQsm1nLAeqy84P19VszQ3kph3LNdVs1TVolXVSlkrTlXNp2ahpIZh6EhCjrdoG3NyS1NTZmbHshfZ6wPEOt0VDtVQq5OOk6m1LuaWurAnAADQZ3bv/4Nef+f+PzsTHA+4/xfZ3v/79bxdbr//b6cBPnZqTa/26P9xJDhOxkzUf35FGu/p6P8BAAAAAAAAAAAAAAAAAAAAAPgfrHle0vO8ZHgM32IiEheR8HWv94nD0fH331pdf3+jl3vGwWn4x724iP12IbeQC45BPZOXgthiyZgk5bd/PdQF48nb2Ykx9aXks71Yzy8u5CL+wyH8fCjVKn/x9HiQ1+b8SUk0rp+WpJxpvX66ZX5Qrl5pyBuSlK9PpCy2zPnX9Wb+9bjqrbvZLfkhfx4AAAAAAEeBoRu23b/7dX9CXLbXg3wHfx/Ycn8dlfM8oQcAAAAAgK5wqy+Lpm1bzj4GMRH5h7g9eyrYwz7j/TqISPMZifbDxm6KSB9so1uDuIgEZ3Q/8Z8b8bZSXhtzoutXeq+/LB0Mev2bCQAAAMBB22z6Owh9e3OIOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Php93lg4fymUlzcaljYJd6wXKTrnyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQR/4GAAD///fUGeI=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0xc40, 0x40) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) 5m35.201762771s ago: executing program 1 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5m33.632172473s ago: executing program 1 (id=204): socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 5m32.885646446s ago: executing program 32 (id=204): socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 3m44.964867127s ago: executing program 2 (id=818): r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000040)='./bus\x00', 0x60000726) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) unlink(&(0x7f0000000ac0)='./bus\x00') unlink(0x0) 3m44.718791531s ago: executing program 2 (id=820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0xffffffff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x1d, 0xffffffffffffffff, {0x4}}, './file0\x00'}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 3m43.737778668s ago: executing program 2 (id=825): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x206, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}, &(0x7f0000000040)=0x84) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000240)={@id={0x2, 0x0, @a}}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r3, 0x1800000}, 0xc) 3m43.494756072s ago: executing program 2 (id=826): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x2d) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m43.250557697s ago: executing program 2 (id=828): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3m42.911163067s ago: executing program 2 (id=832): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m42.590919315s ago: executing program 33 (id=832): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.61508358s ago: executing program 3 (id=1703): unshare(0x2c060000) unshare(0x24020400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 8.06832776s ago: executing program 3 (id=1708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 6.758632227s ago: executing program 3 (id=1709): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x9) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$inet(r4, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.588743726s ago: executing program 3 (id=1712): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x3007ffa) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x31a5ace94771a077) sendfile(r2, r0, 0x0, 0x1040000201005) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x145142, 0xc1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0xfffffbffa003e458, 0x700000000000000) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 6.331711241s ago: executing program 5 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa, 0x0, 0x2, 0x90ff}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 5.268142603s ago: executing program 4 (id=1717): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r3, &(0x7f0000004fc0)={0x2020}, 0x2020) 5.246433784s ago: executing program 0 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 5.159287049s ago: executing program 5 (id=1720): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.924310573s ago: executing program 4 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0x1a0, 0x98, 0x1a0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', {0xff}}, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0xffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 4.826189219s ago: executing program 5 (id=1722): sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.982314548s ago: executing program 0 (id=1723): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4400}, 0x8) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 3.579125651s ago: executing program 5 (id=1724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000480)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.478544097s ago: executing program 0 (id=1725): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 3.237219591s ago: executing program 4 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 3.191764124s ago: executing program 0 (id=1727): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000003c00), 0x4, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) gettimeofday(0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfee00}], 0x1, 0x1200, 0x30, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0x3052, 0x973f, 0x81, 0x1}) 2.183949573s ago: executing program 3 (id=1728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa, 0x0, 0x2, 0x90ff}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.095274017s ago: executing program 5 (id=1729): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x7, 0x2, r3}) write$eventfd(r3, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) read$eventfd(r3, &(0x7f0000000200), 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xff}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x20004004) 2.086691048s ago: executing program 4 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) 2.016434112s ago: executing program 0 (id=1731): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) setfsuid(0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) 1.696682961s ago: executing program 5 (id=1732): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(0x0, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) 306.479312ms ago: executing program 4 (id=1733): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 197.541638ms ago: executing program 0 (id=1734): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) socket$inet6(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r4], 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) 1.62042ms ago: executing program 4 (id=1735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) 0s ago: executing program 3 (id=1736): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x88001, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x408, 0x318, 0xd0, 0x200, 0x200, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xff], [0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x6, 0x0, 0x14}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x1c, 0x1}}, @common=@hl={{0x28}, {0x1, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xffffffffffffffff}, 0xfffffffc}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, [0xffffffff], [0xffffffff, 0x0, 0xffffff00], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x0, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000340)="e76b64859fd877f2"}) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): ing VLAN 0 to HW filter on device batadv0 [ 76.120442][ T5772] veth0_vlan: entered promiscuous mode [ 76.159626][ T5772] veth1_vlan: entered promiscuous mode [ 76.223619][ T5780] Bluetooth: hci0: command tx timeout [ 76.234650][ T5772] veth0_macvtap: entered promiscuous mode [ 76.249179][ T5772] veth1_macvtap: entered promiscuous mode [ 76.295318][ T5780] Bluetooth: hci1: command tx timeout [ 76.296116][ T5782] Bluetooth: hci2: command tx timeout [ 76.300763][ T5780] Bluetooth: hci3: command tx timeout [ 76.320271][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.417907][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.468919][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.480424][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.490065][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.499073][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.513226][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.579258][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.623637][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.713085][ T5769] veth0_vlan: entered promiscuous mode [ 76.730400][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.743669][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.760352][ T5769] veth1_vlan: entered promiscuous mode [ 76.780132][ T5774] veth0_vlan: entered promiscuous mode [ 76.815383][ T5774] veth1_vlan: entered promiscuous mode [ 76.852273][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.862638][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.907351][ T5774] veth0_macvtap: entered promiscuous mode [ 76.930983][ T5774] veth1_macvtap: entered promiscuous mode [ 76.943078][ T5769] veth0_macvtap: entered promiscuous mode [ 76.994190][ T5773] veth0_vlan: entered promiscuous mode [ 77.003556][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.017899][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.030530][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.042176][ T5769] veth1_macvtap: entered promiscuous mode [ 77.070787][ T5773] veth1_vlan: entered promiscuous mode [ 77.097185][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.108263][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.126977][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.157819][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.166799][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.184364][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.193132][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.261956][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.276453][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.289423][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.300665][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.313789][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.409106][ T5773] veth0_macvtap: entered promiscuous mode [ 77.431933][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.455296][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.472776][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.492129][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.507186][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.595654][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.609928][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.622542][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.635690][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.826483][ T5773] veth1_macvtap: entered promiscuous mode [ 77.916347][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.960504][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.972464][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.996724][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.007488][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.018193][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.030041][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.071061][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.088398][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.174425][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.185186][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.193046][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.208482][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.220662][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.231590][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.241915][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.252675][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.264772][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.295962][ T5780] Bluetooth: hci0: command tx timeout [ 78.334230][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.342980][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.353331][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.374262][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.374843][ T5780] Bluetooth: hci2: command tx timeout [ 78.383062][ T5782] Bluetooth: hci1: command tx timeout [ 78.388670][ T5780] Bluetooth: hci3: command tx timeout [ 78.457916][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.514241][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.571023][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.591909][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.619275][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.665262][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.704646][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.849446][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.868816][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.833956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.271983][ T5896] syz.0.19[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.298655][ T5898] netlink: 'syz.2.18': attribute type 1 has an invalid length. [ 80.350458][ T5896] loop0: detected capacity change from 0 to 2048 [ 80.374524][ T5780] Bluetooth: hci0: command tx timeout [ 80.410988][ T5896] loop0: p1 < > p4 [ 80.455839][ T5780] Bluetooth: hci3: command tx timeout [ 80.464077][ T5780] Bluetooth: hci1: command tx timeout [ 80.469536][ T5780] Bluetooth: hci2: command tx timeout [ 80.476428][ T5896] loop0: p4 size 8388608 extends beyond EOD, truncated [ 80.581647][ T5903] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 80.613154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.638630][ T5903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18'. [ 80.640811][ T5896] isofs_fill_super: bread failed, dev=loop0p1, iso_blknum=16, block=32 [ 80.670113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 80.696841][ T5903] dummy0: entered promiscuous mode [ 81.001718][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.094718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.279472][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.345980][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.601459][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.791856][ T5930] Illegal XDP return value 4294967294 on prog (id 7) dev syz_tun, expect packet loss! [ 82.298705][ T5941] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 82.567390][ T5949] loop0: detected capacity change from 0 to 256 [ 82.609223][ T5949] ======================================================= [ 82.609223][ T5949] WARNING: The mand mount option has been deprecated and [ 82.609223][ T5949] and is ignored by this kernel. Remove the mand [ 82.609223][ T5949] option from the mount to silence this warning. [ 82.609223][ T5949] ======================================================= [ 82.644108][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.656262][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 82.690087][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.923347][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.954505][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.987909][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.991542][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.050301][ T27] audit: type=1800 audit(1770228141.739:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 83.503355][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.527030][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.543260][ T5949] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 83.633482][ T5949] syz.0.36 (5949) used greatest stack depth: 20552 bytes left [ 83.878994][ T5968] netlink: 168 bytes leftover after parsing attributes in process `syz.0.43'. [ 83.888538][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'. [ 84.025221][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.172679][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 84.197966][ T5980] veth0_macvtap: left promiscuous mode [ 85.257148][ T6006] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 85.266679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.275295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.284422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.468131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.960217][ T6016] loop1: detected capacity change from 0 to 128 [ 87.121040][ T788] cfg80211: failed to load regulatory.db [ 87.629781][ T6026] netlink: 'syz.2.60': attribute type 9 has an invalid length. [ 87.638711][ T6026] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.60'. [ 87.717844][ T6028] netlink: 'syz.2.60': attribute type 9 has an invalid length. [ 87.733482][ T6028] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.60'. [ 88.316409][ T6037] tipc: Started in network mode [ 88.339727][ T6037] tipc: Node identity 4a71e4f124b9, cluster identity 4711 [ 88.348974][ T6037] tipc: Enabled bearer , priority 0 [ 88.440508][ T6037] syzkaller0: entered promiscuous mode [ 88.452271][ T6037] syzkaller0: entered allmulticast mode [ 88.460404][ T6037] tipc: Resetting bearer [ 88.473427][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 88.489657][ T6045] 8021q: VLANs not supported on xfrm0 [ 88.569004][ T6036] tipc: Resetting bearer [ 88.900308][ T42] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 89.121979][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.149894][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.166118][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.181912][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.470415][ T42] usb 4-1: usb_control_msg returned -32 [ 89.490202][ T42] usbtmc 4-1:16.0: can't read capabilities [ 90.109491][ T6067] Cannot find set identified by id 0 to match [ 90.305392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 90.818897][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 90.842990][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 91.098817][ T6075] ref_ctr increment failed for inode: 0x76 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807f10df00 [ 91.282740][ T6078] loop2: detected capacity change from 0 to 1024 [ 91.294387][ T6078] EXT4-fs: Ignoring removed nobh option [ 91.340077][ T6078] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.573300][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.880752][ T42] usb 4-1: USB disconnect, device number 2 [ 91.979190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.324846][ T6078] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.79: Allocating blocks 449-513 which overlap fs metadata [ 92.451351][ T6078] EXT4-fs (loop2): pa ffff8880793dd910: logic 64, phys. 193, len 20 [ 92.459977][ T6078] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 4 [ 92.676727][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.005447][ T6036] tipc: Disabling bearer [ 93.016591][ T8] tipc: Node number set to 1858659569 [ 93.028768][ T6093] netlink: 'syz.3.84': attribute type 10 has an invalid length. [ 93.078047][ T6093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.096730][ T6093] team0: Port device bond0 added [ 93.102570][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 93.276834][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 93.320575][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 93.355378][ T6094] team0 (unregistering): Port device bond0 removed [ 93.398368][ T6096] netlink: 14 bytes leftover after parsing attributes in process `syz.2.83'. [ 93.484709][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.526686][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.547557][ T6096] bond0 (unregistering): Released all slaves [ 93.563705][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 93.594323][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 94.812961][ T6130] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 94.873240][ T6130] vlan2: entered allmulticast mode [ 94.881610][ T6130] veth0_to_bond: entered allmulticast mode [ 95.504238][ T6134] loop1: detected capacity change from 0 to 512 [ 95.684864][ T6134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.796783][ T6134] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.050987][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.119099][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 96.204810][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 96.435222][ T6145] loop0: detected capacity change from 0 to 128 [ 96.480104][ T6145] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 98.607759][ T6184] loop0: detected capacity change from 0 to 128 [ 98.655414][ T6184] EXT4-fs: Ignoring removed nobh option [ 98.767714][ T6184] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.806687][ T6184] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.990640][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.831051][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 100.087890][ T6214] netlink: 156 bytes leftover after parsing attributes in process `syz.0.125'. [ 100.140092][ T6218] netlink: 156 bytes leftover after parsing attributes in process `syz.0.125'. [ 100.196517][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.125'. [ 100.711860][ T6224] process 'syz.0.128' launched './file2' with NULL argv: empty string added [ 101.247163][ T6229] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 101.352282][ T6229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.497433][ T6232] bond0: (slave macvlan0): making interface the new active one [ 101.542540][ T6232] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 101.571471][ T6235] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.617847][ T6229] bond0: entered promiscuous mode [ 101.633394][ T6229] macvlan0: entered promiscuous mode [ 101.691351][ T6228] bond0: left promiscuous mode [ 101.714069][ T6228] macvlan0: left promiscuous mode [ 102.483536][ T6233] loop1: detected capacity change from 0 to 40427 [ 102.517581][ T6233] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.543012][ T6233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.609138][ T6233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.659168][ T6253] loop0: detected capacity change from 0 to 128 [ 102.734920][ T6253] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 102.852465][ T6233] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 102.874426][ T6233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.907955][ T6284] loop1: detected capacity change from 0 to 256 [ 103.954066][ T6284] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.017292][ T6284] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 104.032938][ T6284] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 104.248923][ T6293] warning: `syz.3.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.358252][ T6284] exFAT-fs (loop1): invalid start cluster (2155889475) [ 104.877164][ T6312] syz_tun: entered allmulticast mode [ 104.918970][ T27] audit: type=1326 audit(1770228419.615:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.0.149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x0 [ 104.943396][ T6309] syz_tun: left allmulticast mode [ 106.736565][ T6354] loop1: detected capacity change from 0 to 128 [ 107.335945][ T27] audit: type=1804 audit(1770228422.015:4): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.171" name="/newroot/41/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1048599 res=1 errno=0 [ 107.390942][ T27] audit: type=1800 audit(1770228422.065:5): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.171" name="bus" dev="loop1" ino=1048599 res=0 errno=0 [ 107.593948][ T27] audit: type=1804 audit(1770228422.125:6): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.171" name="/newroot/41/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1048599 res=1 errno=0 [ 107.614403][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 107.901395][ T6364] loop3: detected capacity change from 0 to 1764 [ 108.081884][ T6367] loop1: detected capacity change from 0 to 1024 [ 108.106676][ T6367] EXT4-fs: Ignoring removed orlov option [ 108.204404][ T6367] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 108.297684][ T6367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.624081][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.962240][ T6398] loop3: detected capacity change from 0 to 131072 [ 111.031528][ T6398] F2FS-fs (loop3): invalid crc value [ 111.088430][ T6398] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.174215][ T6398] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 111.354582][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 111.877071][ T6412] loop2: detected capacity change from 0 to 8192 [ 112.019378][ T6424] loop1: detected capacity change from 0 to 128 [ 112.062656][ T6424] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.120199][ T6424] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.325099][ T27] audit: type=1800 audit(1770228427.015:7): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="bus" dev="loop1" ino=1048600 res=0 errno=0 [ 112.333606][ T6424] Trying to write to read-only block-device loop1 [ 112.541926][ T5773] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 112.559306][ T5773] FAT-fs (loop1): Filesystem has been set read-only [ 112.571432][ T5773] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 113.351724][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 113.978877][ T5773] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.235522][ T6449] loop0: detected capacity change from 0 to 32768 [ 114.296435][ T6449] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.202 (6449) [ 114.383090][ T6449] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.414095][ T6449] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 114.424149][ T6449] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.453988][ T6449] BTRFS info (device loop0): use zstd compression, level 3 [ 114.461275][ T6449] BTRFS info (device loop0): using free space tree [ 114.699031][ T6449] BTRFS info (device loop0): enabling ssd optimizations [ 114.711937][ T6449] BTRFS info (device loop0): auto enabling async discard [ 115.033048][ T27] audit: type=1800 audit(1770228429.725:8): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.202" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 115.124317][ T6449] BTRFS warning (device loop0): failed to trim 3 block group(s), last error -1 [ 115.166993][ T6449] BTRFS warning (device loop0): failed to trim 1 device(s), last error -1 [ 115.433558][ T1081] Trying to write to read-only block-device loop0 [ 115.617519][ T5769] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.782681][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.794945][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.806533][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.818592][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.829508][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.846251][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.351917][ T6489] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 116.611408][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 116.877983][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.924480][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.931797][ T6483] bridge_slave_0: entered allmulticast mode [ 117.005524][ T6483] bridge_slave_0: entered promiscuous mode [ 117.016420][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.023668][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.054274][ T6483] bridge_slave_1: entered allmulticast mode [ 117.061788][ T6483] bridge_slave_1: entered promiscuous mode [ 117.078132][ T6514] loop3: detected capacity change from 0 to 512 [ 117.098436][ T6514] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.152597][ T6514] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.194493][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.216378][ T6514] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.215: bad orphan inode 16 [ 117.230220][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.246190][ T6514] ext4_test_bit(bit=15, block=4) = 0 [ 117.270085][ T6483] team0: Port device team_slave_0 added [ 117.282417][ T6483] team0: Port device team_slave_1 added [ 117.284885][ T6514] EXT4-fs (loop3): 1 orphan inode deleted [ 117.315028][ T6514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.315367][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.335017][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.384320][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.388692][ T6518] Set syz1 is full, maxelem 1021 reached [ 117.408198][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.418294][ T6514] EXT4-fs (loop3): shut down requested (0) [ 117.424289][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.467115][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.591241][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.599729][ T6483] hsr_slave_0: entered promiscuous mode [ 117.624640][ T6483] hsr_slave_1: entered promiscuous mode [ 117.660385][ T6483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.679888][ T6483] Cannot create hsr debugfs directory [ 117.829008][ T6520] syz.3.217 uses obsolete (PF_INET,SOCK_PACKET) [ 117.894202][ T5780] Bluetooth: hci2: command tx timeout [ 118.206159][ T6483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.225356][ T6483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.236734][ T6483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.249097][ T6483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.346745][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.369984][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.383548][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.390766][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.411321][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.418491][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.642877][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.966222][ T6483] veth0_vlan: entered promiscuous mode [ 119.005753][ T6483] veth1_vlan: entered promiscuous mode [ 119.061948][ T6483] veth0_macvtap: entered promiscuous mode [ 119.075091][ T6483] veth1_macvtap: entered promiscuous mode [ 119.103748][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.117093][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.134028][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.150362][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.160663][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.178409][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.192473][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.223443][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.237236][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.253892][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.273151][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.286857][ T6483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.298429][ T6483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.315077][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.329123][ T6483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.346515][ T6483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.361514][ T6483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.372486][ T6483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.582915][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.590954][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.666799][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.678111][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.974193][ T5780] Bluetooth: hci2: command tx timeout [ 120.080000][ T6565] tipc: Failed to remove unknown binding: 66,1,1/0:1990021752/1990021754 [ 120.104232][ T6565] tipc: Failed to remove unknown binding: 66,1,1/0:1990021752/1990021754 [ 120.646633][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 122.054190][ T5780] Bluetooth: hci2: command tx timeout [ 122.722391][ T6601] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 122.722391][ T6601] The task syz.4.239 (6601) triggered the difference, watch for misbehavior. [ 122.773701][ T6604] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.831256][ T6607] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 122.966402][ T6607] macvlan2: entered promiscuous mode [ 122.978700][ T6607] macvlan2: entered allmulticast mode [ 122.990106][ T6607] bond1: entered promiscuous mode [ 122.999341][ T6607] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.020558][ T6607] bond1: left promiscuous mode [ 124.207274][ T5780] Bluetooth: hci2: command tx timeout [ 125.185469][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 125.360429][ T6636] netlink: 'syz.2.251': attribute type 2 has an invalid length. [ 126.264632][ T6654] VFS: Mount too revealing [ 126.739899][ T6665] tipc: Started in network mode [ 126.747510][ T6665] tipc: Node identity 7e8826062014, cluster identity 4711 [ 126.761799][ T6665] tipc: Enabled bearer , priority 0 [ 126.832129][ T6665] syzkaller0: entered promiscuous mode [ 126.837930][ T6665] syzkaller0: entered allmulticast mode [ 126.846290][ T6665] tipc: Resetting bearer [ 126.931124][ T6664] tipc: Resetting bearer [ 128.340134][ T6680] loop2: detected capacity change from 0 to 1024 [ 130.479770][ T6664] tipc: Disabling bearer [ 130.492989][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 130.511139][ T6670] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.574127][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 130.621460][ T5855] tipc: Node number set to 1587291654 [ 131.344187][ T5855] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.523938][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 131.532514][ T5855] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 131.547798][ T5855] usb 4-1: config 0 has no interface number 0 [ 131.555261][ T5855] usb 4-1: config 0 interface 12 has no altsetting 0 [ 131.567652][ T5855] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 131.583255][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.591900][ T5855] usb 4-1: Product: syz [ 131.599754][ T5855] usb 4-1: Manufacturer: syz [ 131.614497][ T5855] usb 4-1: SerialNumber: syz [ 131.622366][ T5855] usb 4-1: config 0 descriptor?? [ 133.178464][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.185145][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.488104][ T5855] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 68 failed: -71 [ 133.514270][ T5855] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 133.521641][ T5855] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 133.540728][ T5855] f81534: probe of 4-1:0.12 failed with error -71 [ 133.589633][ T5855] usb 4-1: USB disconnect, device number 3 [ 133.712192][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 133.867940][ T6748] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 133.904958][ T6748] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 133.933966][ T6748] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 133.953319][ T6748] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 133.976038][ T6748] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 134.014382][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 134.125595][ T6749] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 134.153642][ T6749] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.184964][ T6749] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.202870][ T6749] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.219114][ T6749] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.245867][ T6749] bond1 (unregistering): Released all slaves [ 134.845403][ T6770] capability: warning: `syz.4.299' uses deprecated v2 capabilities in a way that may be insecure [ 134.895088][ T6770] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 134.914071][ T6770] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.003028][ T970] IPVS: starting estimator thread 0... [ 135.114232][ T6775] IPVS: using max 17 ests per chain, 40800 per kthread [ 139.116208][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 140.333163][ T6854] loop4: detected capacity change from 0 to 256 [ 140.361516][ T6854] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.591085][ T6858] loop3: detected capacity change from 0 to 128 [ 140.920523][ T6865] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 140.933149][ T6865] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 141.044219][ T6869] support for the xor transformation has been removed. [ 141.917156][ T6886] capability: warning: `syz.3.343' uses 32-bit capabilities (legacy support in use) [ 142.755119][ T6897] loop3: detected capacity change from 0 to 32768 [ 142.779238][ T6897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.348 (6897) [ 142.885754][ T6897] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.922058][ T6897] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 142.954275][ T6897] BTRFS error (device loop3): superblock checksum mismatch [ 142.980580][ T6897] BTRFS error (device loop3): open_ctree failed: -22 [ 143.083211][ T5761] udevd[5761]: incorrect btrfs checksum on /dev/loop3 [ 143.635708][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 143.706972][ T6922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.824213][ T6922] macvlan2: entered promiscuous mode [ 143.834069][ T6922] macvlan2: entered allmulticast mode [ 143.847656][ T6922] bond1: entered promiscuous mode [ 143.860022][ T6922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.925854][ T6922] bond1: left promiscuous mode [ 144.306805][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 144.691927][ T6944] loop4: detected capacity change from 0 to 512 [ 144.721779][ T6945] loop3: detected capacity change from 0 to 2048 [ 144.739610][ T6945] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.756564][ T6944] EXT4-fs (loop4): 1 truncate cleaned up [ 144.763673][ T6944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.819078][ T6945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.832422][ T5780] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 144.864291][ T6626] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.878677][ T6483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.070162][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.078319][ T6951] loop4: detected capacity change from 0 to 512 [ 145.084022][ T6626] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.095227][ T6951] EXT4-fs: Ignoring removed nobh option [ 145.101165][ T6626] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.101201][ T6626] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 145.154060][ T6626] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.176629][ T6626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.186698][ T6951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 145.223702][ T6626] usb 3-1: Product: syz [ 145.229729][ T6951] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.276123][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 145.288383][ T6626] usb 3-1: Manufacturer: syz [ 145.293053][ T6626] usb 3-1: SerialNumber: syz [ 145.321353][ T6951] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 145.368652][ T6951] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.368: Corrupt directory, running e2fsck is recommended [ 145.394302][ T6954] bond0: (slave bond_slave_0): Releasing backup interface [ 145.395297][ T6626] usb 3-1: selecting invalid altsetting 1 [ 145.420159][ T6951] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 145.428704][ T6951] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.368: corrupted in-inode xattr: invalid ea_ino [ 145.461108][ T6951] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.368: couldn't read orphan inode 15 (err -117) [ 145.478912][ T6951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.626408][ T6951] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.645427][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 145.657659][ T6951] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 145.673244][ T6951] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.368: Corrupt directory, running e2fsck is recommended [ 145.674220][ T6626] cdc_ncm 3-1:1.1: bind() failure [ 145.722772][ T6960] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.754211][ T6626] usb 3-1: USB disconnect, device number 2 [ 145.771419][ T6961] xt_hashlimit: max too large, truncated to 1048576 [ 145.797446][ T6960] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 145.859816][ T6960] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.368: Corrupt directory, running e2fsck is recommended [ 145.943033][ T6961] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 146.001262][ T6961] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 146.044044][ T6961] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.368: Corrupt directory, running e2fsck is recommended [ 146.117278][ T6951] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 146.205986][ T6483] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.099368][ T6993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 147.263953][ T970] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 147.446405][ T970] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.462403][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.483779][ T970] usb 5-1: config 0 descriptor?? [ 147.502033][ T970] cp210x 5-1:0.0: cp210x converter detected [ 147.651955][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 147.924612][ T970] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 147.984742][ T970] usb 5-1: cp210x converter now attached to ttyUSB0 [ 148.256143][ T6626] usb 5-1: USB disconnect, device number 2 [ 148.331843][ T6626] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.359488][ T6626] cp210x 5-1:0.0: device disconnected [ 148.378523][ T7019] pimreg: entered allmulticast mode [ 148.431510][ T7019] pimreg: left allmulticast mode [ 149.225946][ T7033] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 149.388121][ T7036] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 149.416387][ T7036] netlink: 55 bytes leftover after parsing attributes in process `syz.4.400'. [ 150.259686][ T7045] loop0: detected capacity change from 0 to 2048 [ 150.290074][ T7045] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.578767][ T7033] bond2: entered promiscuous mode [ 150.584212][ T7033] bond2: entered allmulticast mode [ 150.591960][ T7033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.625508][ T7041] bridge1: entered promiscuous mode [ 150.630955][ T7041] bridge1: entered allmulticast mode [ 150.640261][ T7041] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 150.650039][ T7036] syz.4.400 (7036) used greatest stack depth: 20488 bytes left [ 150.661286][ T7048] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.724838][ T74] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 150.864063][ T2967] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 150.899464][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 151.108467][ T7062] netlink: 1 bytes leftover after parsing attributes in process `syz.4.409'. [ 151.501175][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 152.106940][ T970] libceph: connect (1)[c::]:6789 error -101 [ 152.114291][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 152.238373][ T7081] ceph: No mds server is up or the cluster is laggy [ 152.637401][ T7094] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 152.809010][ T7096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.818399][ T7096] bond1: (slave bond2): making interface the new active one [ 152.826868][ T7096] bond1: (slave bond2): Enslaving as an active interface with an up link [ 152.855103][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.417'. [ 152.930018][ T7097] bond1: entered promiscuous mode [ 152.935243][ T7097] bond2: entered promiscuous mode [ 152.941475][ T7097] bond1: entered allmulticast mode [ 152.946737][ T7097] bond2: entered allmulticast mode [ 152.952078][ T7097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.372507][ T7106] loop0: detected capacity change from 0 to 32768 [ 154.602269][ T5761] udevd[5761]: incorrect btrfs checksum on /dev/loop0 [ 155.235241][ T7130] netlink: 168 bytes leftover after parsing attributes in process `syz.3.429'. [ 156.342598][ T7134] loop4: detected capacity change from 0 to 128 [ 156.583413][ T7138] loop3: detected capacity change from 0 to 2048 [ 156.619199][ T7138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.867247][ T8] libceph: connect (1)[c::]:6789 error -101 [ 156.884113][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 157.011473][ T7140] ceph: No mds server is up or the cluster is laggy [ 157.996039][ T7176] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 158.030027][ T7176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.038398][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 158.118592][ T7176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.125969][ T7176] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 158.139945][ T7176] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 158.160257][ T27] audit: type=1326 audit(1770228728.852:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.201601][ T7178] ip6erspan0: entered promiscuous mode [ 158.212574][ T27] audit: type=1326 audit(1770228728.852:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.217566][ T7178] bond3: (slave ip6erspan0): making interface the new active one [ 158.248398][ T7178] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 158.252532][ T27] audit: type=1326 audit(1770228728.892:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.303006][ T27] audit: type=1326 audit(1770228728.892:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.331744][ T27] audit: type=1326 audit(1770228728.892:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.364395][ T27] audit: type=1326 audit(1770228728.902:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.388831][ T27] audit: type=1326 audit(1770228728.902:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.414548][ T27] audit: type=1326 audit(1770228728.902:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.494618][ T27] audit: type=1326 audit(1770228728.902:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27de95b78e code=0x7ffc0000 [ 158.603690][ T27] audit: type=1326 audit(1770228728.902:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 158.883034][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 161.096361][ T5780] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 161.109431][ T5780] Bluetooth: hci0: Injecting HCI hardware error event [ 161.123754][ T5782] Bluetooth: hci0: hardware error 0x00 [ 162.759148][ T7252] binder: 7251:7252 unknown command 0 [ 162.781488][ T7252] binder: 7251:7252 ioctl c0306201 200000000080 returned -22 [ 163.174130][ T5782] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 163.215867][ T7261] kvm: pic: non byte read [ 163.221052][ T7261] kvm: pic: non byte read [ 163.275994][ T7261] kvm: pic: non byte read [ 163.284628][ T7261] kvm: pic: non byte read [ 163.294430][ T7261] kvm: pic: non byte read [ 163.299374][ T7261] kvm: pic: single mode not supported [ 163.299546][ T7261] kvm: pic: level sensitive irq not supported [ 163.316035][ T7261] kvm: pic: non byte read [ 163.344266][ T7261] kvm: pic: non byte read [ 163.349070][ T7261] kvm: pic: non byte read [ 163.364318][ T7261] kvm: pic: non byte read [ 163.514118][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.660468][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 163.660485][ T27] audit: type=1326 audit(1770228734.352:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x0 [ 163.714050][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 163.732741][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.743409][ T8] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 163.753053][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.762431][ T8] usb 5-1: Product: syz [ 163.768984][ T8] usb 5-1: Manufacturer: syz [ 163.773702][ T8] usb 5-1: SerialNumber: syz [ 163.795715][ T8] usb 5-1: config 0 descriptor?? [ 165.174955][ T8] gs_usb 5-1:0.0: Couldn't get device config: (err=-110) [ 165.197901][ T8] gs_usb: probe of 5-1:0.0 failed with error -110 [ 165.421040][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 165.442621][ T7289] lo: entered promiscuous mode [ 165.454217][ T7289] lo: entered allmulticast mode [ 165.569919][ T27] audit: type=1800 audit(1770228992.245:38): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.485" name="/" dev="fuse" ino=4 res=0 errno=0 [ 166.074026][ T970] usb 5-1: USB disconnect, device number 3 [ 166.127743][ T7311] loop2: detected capacity change from 0 to 512 [ 166.356068][ T7314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.383232][ T7311] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 167.081144][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 167.464778][ T7346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.602899][ T7346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.611228][ T7354] loop4: detected capacity change from 0 to 512 [ 167.800834][ T7346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.839416][ T7354] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 167.996313][ T7346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.225388][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 168.351496][ T7346] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.388579][ T7346] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.421988][ T7346] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.445206][ T7346] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.674774][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 168.751732][ T5782] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18 [ 169.437900][ T7404] sch_fq: defrate 7 ignored. [ 170.160671][ T7421] loop0: detected capacity change from 0 to 64 [ 170.216534][ T5761] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.774201][ T5782] Bluetooth: hci3: command tx timeout [ 170.852919][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.525'. [ 170.869898][ T7417] lo: entered promiscuous mode [ 170.875053][ T7417] lo: entered allmulticast mode [ 171.245586][ T7446] loop2: detected capacity change from 0 to 1024 [ 172.065142][ T7453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.508133][ T27] audit: type=1326 audit(1770228999.205:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3f19aeb9 code=0x0 [ 172.527501][ T7475] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 172.548812][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.547'. [ 173.129232][ T7489] bond3: entered allmulticast mode [ 173.281887][ T7489] bridge3: entered promiscuous mode [ 173.301866][ T7489] bridge3: entered allmulticast mode [ 173.322185][ T7489] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 173.688617][ T7508] netlink: 'syz.2.560': attribute type 11 has an invalid length. [ 173.718862][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 173.767071][ T7508] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.776434][ T7508] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.785261][ T7508] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.794036][ T7508] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.809738][ T7508] netlink: 'syz.2.560': attribute type 11 has an invalid length. [ 173.847966][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 173.894183][ T7508] Zero length message leads to an empty skb [ 174.109659][ T7519] loop2: detected capacity change from 0 to 736 [ 174.257172][ T7519] io-wq is not configured for unbound workers [ 174.600697][ T7531] loop4: detected capacity change from 0 to 256 [ 174.646571][ T7531] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 175.231368][ T7540] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 175.289171][ T7542] syz_tun: entered allmulticast mode [ 175.792476][ T7560] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 176.097624][ T7560] bond4: (slave gretap1): making interface the new active one [ 176.117348][ T7560] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 176.288373][ T7560] syz.0.577 (7560) used greatest stack depth: 19920 bytes left [ 176.404866][ T7580] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.852472][ T7541] syz_tun: left allmulticast mode [ 177.828162][ T7607] loop4: detected capacity change from 0 to 2048 [ 177.871235][ T7607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.095789][ T7618] Bluetooth: MGMT ver 1.22 [ 178.120878][ T7618] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 178.247750][ T7607] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 178.308572][ T7607] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 344 with error 28 [ 178.592438][ T7607] EXT4-fs (loop4): This should not happen!! Data will be lost [ 178.592438][ T7607] [ 178.694141][ T7607] EXT4-fs (loop4): Total free blocks count 0 [ 178.715590][ T7607] EXT4-fs (loop4): Free/Dirty block details [ 178.723378][ T7607] EXT4-fs (loop4): free_blocks=2415919504 [ 178.729447][ T7607] EXT4-fs (loop4): dirty_blocks=352 [ 178.734822][ T7607] EXT4-fs (loop4): Block reservation details [ 178.740940][ T7607] EXT4-fs (loop4): i_reserved_data_blocks=22 [ 178.818163][ T2985] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 179.206503][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 179.247236][ T7648] IPv6: addrconf: prefix option has invalid lifetime [ 180.925106][ T7674] overlayfs: failed to clone upperpath [ 182.692821][ T7682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.910737][ T7682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.040406][ T7682] bond0 (unregistering): Released all slaves [ 184.360693][ T7715] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 184.470250][ T7715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.752215][ T27] audit: type=1326 audit(1770229011.445:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 184.880364][ T27] audit: type=1326 audit(1770229011.445:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 184.958202][ T27] audit: type=1326 audit(1770229011.445:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.057478][ T27] audit: type=1326 audit(1770229011.445:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.114493][ T27] audit: type=1326 audit(1770229011.445:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.161697][ T27] audit: type=1326 audit(1770229011.445:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.237116][ T7732] kvm: pic: non byte read [ 185.268289][ T7732] kvm: pic: level sensitive irq not supported [ 185.268379][ T7732] kvm: pic: non byte read [ 185.283108][ T27] audit: type=1326 audit(1770229011.445:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.334746][ T7732] kvm: pic: level sensitive irq not supported [ 185.335154][ T7732] kvm: pic: non byte read [ 185.354142][ T27] audit: type=1326 audit(1770229011.445:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.385840][ T7732] kvm: pic: level sensitive irq not supported [ 185.385903][ T7732] kvm: pic: non byte read [ 185.425434][ T7732] kvm: pic: level sensitive irq not supported [ 185.425523][ T7732] kvm: pic: non byte read [ 185.447420][ T27] audit: type=1326 audit(1770229011.445:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.482210][ T7732] kvm: pic: level sensitive irq not supported [ 185.482295][ T7732] kvm: pic: non byte read [ 185.501387][ T7732] kvm: pic: level sensitive irq not supported [ 185.501471][ T7732] kvm: pic: non byte read [ 185.515758][ T27] audit: type=1326 audit(1770229011.445:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 185.538647][ T7732] kvm: pic: level sensitive irq not supported [ 185.538730][ T7732] kvm: pic: non byte read [ 185.550716][ T7732] kvm: pic: level sensitive irq not supported [ 185.550799][ T7732] kvm: pic: non byte read [ 185.927823][ T7742] loop2: detected capacity change from 0 to 1024 [ 186.116456][ T7742] hfsplus: xattr search failed [ 186.174853][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 186.192317][ T7742] hfsplus: xattr searching failed [ 186.365342][ T5772] hfsplus: node 4:3 still has 1 user(s)! [ 187.741319][ T7777] batadv_slave_0: entered promiscuous mode [ 187.756866][ T7776] batadv_slave_0: left promiscuous mode [ 189.443065][ T7798] fuse: Bad value for 'fd' [ 189.894248][ T5780] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 189.902058][ T5780] Bluetooth: hci1: command 0x206a tx timeout [ 190.169521][ T7801] bridge0: entered promiscuous mode [ 190.186408][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 190.186593][ T7801] bridge0: port 3(macvlan2) entered blocking state [ 190.202554][ T7801] bridge0: port 3(macvlan2) entered disabled state [ 190.209621][ T7801] macvlan2: entered allmulticast mode [ 190.223207][ T7801] bridge0: entered allmulticast mode [ 190.236175][ T7801] macvlan2: left allmulticast mode [ 190.241605][ T7801] bridge0: left allmulticast mode [ 190.255369][ T7801] bridge0: left promiscuous mode [ 190.316349][ T7804] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 190.351331][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.455369][ T7808] bond0: (slave bridge3): making interface the new active one [ 190.509956][ T7808] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 190.689510][ T7817] bridge_slave_0: left allmulticast mode [ 190.723378][ T7817] bridge_slave_0: left promiscuous mode [ 190.754639][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.805830][ T7817] bridge_slave_1: left allmulticast mode [ 190.813732][ T7817] bridge_slave_1: left promiscuous mode [ 190.826835][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.963188][ T7817] team0: Port device team_slave_0 removed [ 191.006170][ T7817] team0: Port device team_slave_1 removed [ 191.032407][ T7817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.040799][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.063624][ T7817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.090889][ T7817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.152662][ T7817] bond0: (slave macvlan0): Releasing active interface [ 191.230225][ T7819] team0: Mode changed to "random" [ 192.762135][ T7851] 9pnet_fd: p9_fd_create_unix (7851): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 193.912601][ T7857] netlink: 76 bytes leftover after parsing attributes in process `syz.2.683'. [ 194.330682][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 194.631431][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.641530][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.739979][ T7881] loop2: detected capacity change from 0 to 256 [ 194.757761][ T7881] FAT-fs (loop2): Unrecognized mount option "utf8=1ŒG" or missing value [ 196.700557][ T51] Bluetooth: hci1: command 0x206a tx timeout [ 196.707050][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 197.097802][ T7903] netlink: 156 bytes leftover after parsing attributes in process `syz.3.697'. [ 197.151579][ T7903] netlink: 156 bytes leftover after parsing attributes in process `syz.3.697'. [ 197.200557][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 197.226414][ T7907] loop2: detected capacity change from 0 to 256 [ 197.238615][ T7907] exfat: Deprecated parameter 'utf8' [ 197.273709][ T7907] exfat: Deprecated parameter 'utf8' [ 197.280365][ T7907] exfat: Deprecated parameter 'utf8' [ 197.316533][ T7910] bridge_slave_0: left allmulticast mode [ 197.322257][ T7910] bridge_slave_0: left promiscuous mode [ 197.377114][ T7907] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 197.381943][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.446597][ T7910] bridge_slave_1: left allmulticast mode [ 197.484074][ T7910] bridge_slave_1: left promiscuous mode [ 197.501654][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.546543][ T7915] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 197.561202][ T7910] bond0: (slave bond_slave_0): Releasing backup interface [ 197.607237][ T7910] bond0: (slave bond_slave_1): Releasing backup interface [ 197.763711][ T7910] team0: Port device team_slave_0 removed [ 197.795341][ T7910] team0: Port device team_slave_1 removed [ 197.812696][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.823758][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.833225][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.843187][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.232991][ T7933] binder: BINDER_SET_CONTEXT_MGR already set [ 198.277768][ T7933] binder: 7932:7933 ioctl 4018620d 200000000100 returned -16 [ 198.311236][ T7939] binder: BINDER_SET_CONTEXT_MGR already set [ 198.326884][ T7939] binder: 7932:7939 ioctl 4018620d 2000000002c0 returned -16 [ 199.477858][ T7949] netlink: 'syz.3.713': attribute type 10 has an invalid length. [ 199.878735][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 199.914333][ T7962] bridge_slave_1: left allmulticast mode [ 199.920044][ T7962] bridge_slave_1: left promiscuous mode [ 199.947910][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.979552][ T7962] bridge_slave_0: left allmulticast mode [ 199.993145][ T7962] bridge_slave_0: left promiscuous mode [ 199.997101][ T7967] tipc: Failed to remove unknown binding: 66,0,0/0:3446955400/3446955401 [ 200.004088][ T7962] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.034233][ T7967] tipc: Failed to remove unknown binding: 66,0,0/0:3446955400/3446955401 [ 201.405187][ T7983] syz_tun: entered allmulticast mode [ 204.661397][ T8059] binder: 8058:8059 ioctl c0306201 0 returned -14 [ 205.061402][ T8066] netlink: 'syz.2.739': attribute type 4 has an invalid length. [ 205.087464][ T8066] netlink: 'syz.2.739': attribute type 4 has an invalid length. [ 209.795351][ T8147] netlink: 9 bytes leftover after parsing attributes in process `syz.2.763'. [ 209.817700][ T8147] netlink: 9 bytes leftover after parsing attributes in process `syz.2.763'. [ 209.935161][ T8147] loop2: detected capacity change from 0 to 2048 [ 209.987351][ T8147] Dev loop2: RDB in block 1 has bad checksum [ 211.525607][ T8163] binder: 8162:8163 ioctl c0306201 200000000480 returned -14 [ 211.733491][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'. [ 211.962963][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 213.684784][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 213.684801][ T27] audit: type=1326 audit(1770229040.385:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 213.792375][ T27] audit: type=1326 audit(1770229040.415:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 213.932678][ T27] audit: type=1326 audit(1770229040.435:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 213.955642][ T27] audit: type=1326 audit(1770229040.435:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 213.978923][ T27] audit: type=1326 audit(1770229040.435:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 214.001325][ T27] audit: type=1326 audit(1770229040.445:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 214.023493][ T27] audit: type=1326 audit(1770229040.445:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 214.046982][ T27] audit: type=1326 audit(1770229040.445:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27de95b78e code=0x7ffc0000 [ 214.070242][ T27] audit: type=1326 audit(1770229040.445:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 214.210094][ T27] audit: type=1326 audit(1770229040.445:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8191 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7ffc0000 [ 218.982741][ T8247] bridge0: entered promiscuous mode [ 222.040186][ T8300] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 222.119355][ T8303] bond5: (slave ip6gretap1): making interface the new active one [ 222.128465][ T8303] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 222.205691][ T8300] bond5: entered promiscuous mode [ 222.210974][ T8300] ip6gretap1: entered promiscuous mode [ 222.217260][ T8300] bond5: entered allmulticast mode [ 222.222547][ T8300] ip6gretap1: entered allmulticast mode [ 222.256019][ T8300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.209187][ T8336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.253467][ T8336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.279918][ T8336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.067220][ T8348] netlink: 76 bytes leftover after parsing attributes in process `syz.0.824'. [ 224.452681][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 225.776623][ T5855] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 225.984066][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 225.994368][ T5855] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 226.028597][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.052125][ T5855] usb 1-1: config 0 descriptor?? [ 226.063282][ T5855] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 226.077129][ T5855] usb 1-1: Detected FT2233HP [ 226.217412][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.239885][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.249370][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.258326][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.270377][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.278063][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.452715][ T5855] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 226.469958][ T5855] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 226.492726][ T5855] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 226.523950][ T5855] usb 1-1: USB disconnect, device number 2 [ 226.545441][ T5855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 226.559759][ T8380] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 226.569043][ T5855] ftdi_sio 1-1:0.0: device disconnected [ 226.574777][ T8380] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.838'. [ 226.727550][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 226.795738][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.802896][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.810836][ T8375] bridge_slave_0: entered allmulticast mode [ 226.818455][ T8375] bridge_slave_0: entered promiscuous mode [ 226.826960][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.834685][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.850819][ T8375] bridge_slave_1: entered allmulticast mode [ 226.858459][ T8375] bridge_slave_1: entered promiscuous mode [ 226.888284][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.897480][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 226.908765][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.943348][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.965035][ T8375] team0: Port device team_slave_0 added [ 226.974875][ T8375] team0: Port device team_slave_1 added [ 227.000176][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.008892][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.034879][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.048794][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.055874][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.084478][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.110405][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.123934][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 227.131692][ T8] usb 5-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 227.169548][ T8] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 227.192215][ T8] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.202154][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.202799][ T8375] hsr_slave_0: entered promiscuous mode [ 227.210802][ T8] usb 5-1: Product: syz [ 227.210823][ T8] usb 5-1: Manufacturer: syz [ 227.210839][ T8] usb 5-1: SerialNumber: syz [ 227.248483][ T8375] hsr_slave_1: entered promiscuous mode [ 227.266510][ T8375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.275775][ T8375] Cannot create hsr debugfs directory [ 227.834219][ T8375] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.908334][ T8375] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.968318][ T8375] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.018403][ T8375] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.064147][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.260309][ T8] usb 5-1: USB disconnect, device number 4 [ 228.374333][ T5782] Bluetooth: hci1: command tx timeout [ 228.411974][ T8375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.454303][ T8375] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.469130][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.476375][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.500239][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.507488][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.552787][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 228.552805][ T27] audit: type=1326 audit(1770229055.245:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.583860][ T27] audit: type=1326 audit(1770229055.245:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.607680][ T27] audit: type=1326 audit(1770229055.255:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.632524][ T27] audit: type=1326 audit(1770229055.255:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.637940][ T8375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.665759][ T27] audit: type=1326 audit(1770229055.255:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.689301][ T27] audit: type=1326 audit(1770229055.255:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.744173][ T27] audit: type=1326 audit(1770229055.255:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.770595][ T27] audit: type=1326 audit(1770229055.255:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.829339][ T27] audit: type=1326 audit(1770229055.255:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.872569][ T27] audit: type=1326 audit(1770229055.255:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f426279aeb9 code=0x7ffc0000 [ 228.969722][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.113258][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.227708][ T8375] veth0_vlan: entered promiscuous mode [ 229.242003][ T8375] veth1_vlan: entered promiscuous mode [ 229.290140][ T8375] veth0_macvtap: entered promiscuous mode [ 229.308350][ T8375] veth1_macvtap: entered promiscuous mode [ 229.349278][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.360088][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.369988][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.405700][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.430474][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.461256][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.472249][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.502515][ T8375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.519308][ T8375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.566272][ T8375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.609403][ T8375] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.643043][ T8375] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.662207][ T8375] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.681708][ T8375] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.700088][ T8438] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 229.778242][ T8438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.866111][ T8441] vlan0: entered allmulticast mode [ 229.874600][ T8441] veth0_to_bond: entered allmulticast mode [ 229.909495][ T8441] bond2: (slave vlan0): Enslaving as an active interface with a down link [ 230.144352][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.152516][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.196877][ T8041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.223842][ T8041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.328949][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.354996][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.454994][ T5782] Bluetooth: hci1: command tx timeout [ 231.224896][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.320379][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.376869][ T8481] netlink: 52 bytes leftover after parsing attributes in process `syz.5.868'. [ 232.434828][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.442630][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.516715][ T8484] netlink: 76 bytes leftover after parsing attributes in process `syz.5.868'. [ 232.534853][ T5782] Bluetooth: hci1: command tx timeout [ 232.558866][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.566168][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.573849][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.581199][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.602813][ T8484] netlink: 52 bytes leftover after parsing attributes in process `syz.5.868'. [ 232.619946][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.627316][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.204101][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.335216][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.496198][ T8507] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 233.582576][ T8510] tmpfs: Bad value for 'mpol' [ 233.596522][ T8510] mmap: syz.3.879 (8510): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 233.618552][ T8507] bond3: (slave veth5): Enslaving as an active interface with a down link [ 233.691004][ T8507] bond3: entered promiscuous mode [ 233.701896][ T8507] bond3: entered allmulticast mode [ 233.711796][ T8507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.138045][ T8519] netlink: 52 bytes leftover after parsing attributes in process `syz.4.883'. [ 234.258104][ T8519] netlink: 76 bytes leftover after parsing attributes in process `syz.4.883'. [ 234.313309][ T8519] netlink: 52 bytes leftover after parsing attributes in process `syz.4.883'. [ 234.389989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.614952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.624084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.633948][ T5782] Bluetooth: hci1: command tx timeout [ 235.415196][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.640445][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.873813][ C0] sched: RT throttling activated [ 237.378763][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.224435][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.5.892'. [ 238.454240][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.773248][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.892'. [ 238.864187][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 239.119771][ T8561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.128792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.157718][ T8561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.166981][ T8045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.204094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.224233][ T8566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.471179][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 239.471197][ T27] audit: type=1326 audit(1770229066.165:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3f19aeb9 code=0x7ffc0000 [ 239.510861][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.532025][ T27] audit: type=1326 audit(1770229066.165:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3f19aeb9 code=0x7ffc0000 [ 239.556558][ T27] audit: type=1326 audit(1770229066.165:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5a3f19aeb9 code=0x7ffc0000 [ 239.604013][ T27] audit: type=1326 audit(1770229066.165:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3f19aeb9 code=0x7ffc0000 [ 239.654873][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.683543][ T27] audit: type=1326 audit(1770229066.165:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a3f19c747 code=0x7ffc0000 [ 239.715977][ T27] audit: type=1326 audit(1770229066.165:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5a3f15b78e code=0x7ffc0000 [ 239.758466][ T27] audit: type=1326 audit(1770229066.165:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a3f15b78e code=0x7ffc0000 [ 239.787700][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 239.796886][ T27] audit: type=1326 audit(1770229066.165:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a3f15b78e code=0x7ffc0000 [ 239.828811][ T27] audit: type=1326 audit(1770229066.165:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a3f15b78e code=0x7ffc0000 [ 239.865716][ T27] audit: type=1326 audit(1770229066.195:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.4.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3f19aeb9 code=0x7ffc0000 [ 239.999225][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 240.018801][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.034204][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.055356][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.084185][ T42] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 240.114082][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.133621][ T42] usb 5-1: config 0 descriptor?? [ 240.615456][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.661331][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.676307][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.683529][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.693734][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.710488][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.718205][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.725774][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.732952][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.741613][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.749144][ T42] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0 [ 240.772163][ T42] hid-rmi 0003:06CB:81A7.0001: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 241.889072][ T8616] kernel profiling enabled (shift: 63) [ 241.914055][ T8616] profiling shift: 63 too large [ 242.448767][ T42] usb 5-1: USB disconnect, device number 5 [ 242.622167][ T5855] net_ratelimit: 2 callbacks suppressed [ 242.622184][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.704014][ T6626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.784129][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 243.306964][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 243.751039][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.774781][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.992947][ T8669] trusted_key: syz.0.927 sent an empty control message without MSG_MORE. [ 245.286818][ T8677] binder: 8676:8677 ioctl c0306201 2000000003c0 returned -14 [ 245.734778][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.815545][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.858153][ T8688] fuse: Bad value for 'fd' [ 245.934953][ T8691] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.374295][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.941'. [ 246.394449][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.941'. [ 246.517227][ T8712] Set syz0 is full, maxelem 0 reached [ 247.375891][ T8726] kvm: Disabled LAPIC found during irq injection [ 247.962674][ T8744] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.255657][ T8775] tipc: Failed to remove unknown binding: 66,0,0/1587291654:1307995342/1307995343 [ 250.275879][ T8775] tipc: Failed to remove unknown binding: 66,0,0/1587291654:1307995342/1307995343 [ 251.667833][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.782880][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.511053][ T8764] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.521675][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 252.521691][ T27] audit: type=1326 audit(1770229079.215:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x7fc00000 [ 252.574211][ T8764] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.583162][ T8764] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.602710][ T8764] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.760977][ T8798] loop5: detected capacity change from 0 to 40427 [ 252.787024][ T8798] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 252.799412][ T8798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 252.960169][ T8764] bond1: left promiscuous mode [ 252.976294][ T8764] bond2: left promiscuous mode [ 252.982494][ T8764] bond1: left allmulticast mode [ 253.013594][ T8764] bond2: left allmulticast mode [ 253.070577][ T8764] ip6erspan0: left promiscuous mode [ 253.184140][ T8764] bond5: left promiscuous mode [ 253.194314][ T8764] ip6gretap1: left promiscuous mode [ 253.205579][ T8764] bond5: left allmulticast mode [ 253.221096][ T8764] ip6gretap1: left allmulticast mode [ 253.304905][ T8812] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 253.423104][ T8812] bond4: entered promiscuous mode [ 253.437989][ T8812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.542874][ T8814] bond4: (slave veth7): making interface the new active one [ 253.586113][ T8814] veth7: entered promiscuous mode [ 253.613463][ T8814] bond4: (slave veth7): Enslaving as an active interface with an up link [ 255.244445][ T8875] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1000'. [ 255.266608][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 255.886863][ T8889] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.911132][ T8891] binder: BINDER_SET_CONTEXT_MGR already set [ 255.918846][ T8891] binder: 8890:8891 ioctl 4018620d 200000000100 returned -16 [ 255.956554][ T8891] binder: BINDER_SET_CONTEXT_MGR already set [ 255.977465][ T8891] binder: 8890:8891 ioctl 4018620d 200000004a80 returned -16 [ 256.058978][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.066667][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.507183][ T27] audit: type=1326 audit(1770229083.205:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8909 comm="syz.3.1015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x0 [ 257.278274][ T8920] sctp: [Deprecated]: syz.0.1019 (pid 8920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.278274][ T8920] Use struct sctp_sack_info instead [ 257.809503][ T8936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.897587][ T8936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.979111][ T8936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.123606][ T8959] gretap0: entered promiscuous mode [ 259.334255][ T8963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1032'. [ 259.367873][ T8964] syz_tun: left allmulticast mode [ 259.677402][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1037'. [ 259.722601][ T8969] veth0_vlan: entered allmulticast mode [ 259.964541][ T8973] bridge5: entered promiscuous mode [ 260.008413][ T8973] bridge5: entered allmulticast mode [ 260.132541][ T8973] geneve2: entered promiscuous mode [ 260.151475][ T8973] geneve2: entered allmulticast mode [ 261.976221][ T9005] loop5: detected capacity change from 0 to 7 [ 261.990081][ T5761] Dev loop5: unable to read RDB block 7 [ 261.998736][ T5761] loop5: unable to read partition table [ 262.007281][ T5761] loop5: partition table beyond EOD, truncated [ 262.030190][ T9005] Dev loop5: unable to read RDB block 7 [ 262.037759][ T9005] loop5: unable to read partition table [ 262.052979][ T9005] loop5: partition table beyond EOD, truncated [ 262.064663][ T9005] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 262.254618][ T9009] bridge_slave_1: left allmulticast mode [ 262.262361][ T9009] bridge_slave_1: left promiscuous mode [ 262.273654][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.305356][ T9009] bridge_slave_0: left allmulticast mode [ 262.323892][ T9009] bridge_slave_0: left promiscuous mode [ 262.344861][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.540058][ T9032] overlayfs: failed to clone upperpath [ 264.323341][ T9019] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.336558][ T9019] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.347236][ T9019] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.356244][ T9019] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.461415][ T9019] vlan0: left allmulticast mode [ 264.472734][ T9019] veth0_to_bond: left allmulticast mode [ 264.479504][ T9019] bond3: left promiscuous mode [ 264.484440][ T9019] bond3: left allmulticast mode [ 264.514826][ T9019] bond4: left promiscuous mode [ 264.519624][ T9019] veth7: left promiscuous mode [ 265.756881][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 265.785641][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 265.883986][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 266.452038][ T9076] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 266.508001][ T9076] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 266.555944][ T9076] netlink: 'syz.0.1071': attribute type 10 has an invalid length. [ 266.572012][ T9076] syz_tun: entered promiscuous mode [ 266.682827][ T9078] loop4: detected capacity change from 0 to 256 [ 266.758867][ T9078] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 266.797695][ T9078] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 267.125183][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1074'. [ 267.679854][ T9092] loop4: detected capacity change from 0 to 512 [ 267.831173][ T9099] loop0: detected capacity change from 0 to 128 [ 271.534365][ T9148] Set syz0 is full, maxelem 0 reached [ 271.693971][ T9033] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 272.204048][ T9033] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.615401][ T9033] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 272.644656][ T9033] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.655741][ T9156] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 272.678075][ T9033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.709706][ T9033] usb 5-1: config 0 descriptor?? [ 272.713391][ T9033] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 272.773447][ T9156] bond4: entered promiscuous mode [ 272.807934][ T9156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.929114][ T9160] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.929535][ T9160] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 272.929556][ T9160] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 272.956945][ T9160] bond4: (slave ip6gre1): making interface the new active one [ 272.956972][ T9160] ip6gre1: entered promiscuous mode [ 272.982440][ T9160] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 273.029218][ T9033] usb 5-1: USB disconnect, device number 6 [ 273.152496][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 273.249572][ T9165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1100'. [ 273.469299][ T9156] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 273.478721][ T9156] ip6gre1: left promiscuous mode [ 273.493079][ T9156] bond4 (unregistering): Released all slaves [ 273.512248][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 273.521350][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 273.664053][ T9170] netlink: 'syz.5.1102': attribute type 1 has an invalid length. [ 273.758209][ T9170] bond1: entered promiscuous mode [ 273.763320][ T9170] bond1: entered allmulticast mode [ 273.809970][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'. [ 273.867417][ T9172] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 273.888756][ T9172] bond1: (slave bridge0): making interface the new active one [ 273.897328][ T9172] bridge0: entered promiscuous mode [ 273.902968][ T9172] bridge0: entered allmulticast mode [ 273.910845][ T9172] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 273.947316][ T9178] bridge3: entered promiscuous mode [ 273.960278][ T9178] bridge3: entered allmulticast mode [ 273.972729][ T9178] team0: Port device bridge3 added [ 273.986659][ T9181] bridge0: port 1(team0) entered blocking state [ 274.013058][ T9181] bridge0: port 1(team0) entered disabled state [ 274.037905][ T9181] team0: entered allmulticast mode [ 274.086284][ T9181] team0: entered promiscuous mode [ 274.131820][ T9182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.151683][ T9182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.162356][ T9182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.179501][ T9182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.189288][ T9182] geneve3: entered promiscuous mode [ 274.196047][ T9182] geneve3: entered allmulticast mode [ 274.205235][ T9182] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.215020][ T9182] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.224534][ T9182] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.235552][ T9182] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.272190][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1102'. [ 274.285169][ T9170] bond1: left promiscuous mode [ 274.295134][ T9170] bridge0: left promiscuous mode [ 274.300647][ T9170] bond1: left allmulticast mode [ 274.316143][ T9170] bridge0: left allmulticast mode [ 274.325163][ T9170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.336935][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.344698][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.401399][ T9190] bridge_slave_1: left allmulticast mode [ 274.428980][ T9190] bridge_slave_1: left promiscuous mode [ 274.452658][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.515233][ T9190] bridge_slave_0: left allmulticast mode [ 274.526529][ T9190] bridge_slave_0: left promiscuous mode [ 274.539499][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.916209][ T8805] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 275.158050][ T8805] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.169603][ T8805] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.182434][ T8805] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.192312][ T8805] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.216191][ T8805] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.228338][ T8805] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.239597][ T8805] usb 5-1: Product: syz [ 275.251107][ T8805] usb 5-1: Manufacturer: syz [ 275.327082][ T8805] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 275.621251][ T8805] usb 5-1: USB disconnect, device number 7 [ 275.756617][ T9203] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1111'. [ 276.277563][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1114'. [ 276.353707][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1114'. [ 277.469585][ T9232] loop5: detected capacity change from 0 to 4096 [ 277.531600][ T9232] EXT4-fs (loop5): Test dummy encryption mode enabled [ 277.569821][ T9232] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 277.602482][ T9236] o2cb: This node has not been configured. [ 277.604120][ T9232] System zones: 0-5 [ 277.618882][ T9236] o2cb: Cluster check failed. Fix errors before retrying. [ 277.628777][ T9236] (syz.3.1123,9236,1):user_dlm_register:674 ERROR: status = -22 [ 277.637095][ T9236] (syz.3.1123,9236,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 277.671912][ T9232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.785293][ T9232] EXT4-fs (loop5): shut down requested (0) [ 277.889577][ T8375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.336299][ T9252] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1126'. [ 281.301860][ T9302] ip6t_REJECT: ECHOREPLY is not supported [ 282.284346][ T5782] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 282.292246][ T5782] Bluetooth: hci2: unexpected event for opcode 0x203e [ 282.545600][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 282.657129][ T9312] bond0: (slave bond_slave_1): Releasing backup interface [ 282.681963][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.690960][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.880635][ T9312] bond2: (slave bridge1): Removing an active aggregator [ 283.673168][ T11] bond2: Warning: Found an uninitialized port [ 283.716979][ T9312] bond2: (slave bridge1): Releasing backup interface [ 283.807394][ T9312] bridge1: left promiscuous mode [ 283.827124][ T9312] bridge1: left allmulticast mode [ 283.876451][ T9312] bond3: (slave bridge3): Releasing backup interface [ 284.048795][ T9325] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 285.330060][ T9341] SET target dimension over the limit! [ 286.294071][ T5782] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 286.302983][ T5782] Bluetooth: hci2: Injecting HCI hardware error event [ 286.312460][ T5780] Bluetooth: hci2: hardware error 0x00 [ 288.087535][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1166'. [ 288.133942][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1166'. [ 288.198156][ T9373] ip6gretap0: entered promiscuous mode [ 288.221870][ T9373] syz_tun: entered promiscuous mode [ 288.533925][ T5780] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 288.996365][ T9375] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1167'. [ 289.945696][ T5780] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 289.976864][ T9392] x_tables: duplicate underflow at hook 2 [ 292.436200][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 292.558026][ T9416] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.784132][ T9421] netlink: 'syz.0.1182': attribute type 15 has an invalid length. [ 292.971863][ T9424] macvlan2: entered promiscuous mode [ 293.168478][ T9424] macvlan2: entered allmulticast mode [ 293.566668][ T9424] bond4: entered promiscuous mode [ 293.609400][ T9424] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.671061][ T9424] bond4: left promiscuous mode [ 293.900046][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1186'. [ 293.944065][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1186'. [ 293.981213][ T9438] ip6gretap0: entered promiscuous mode [ 293.994664][ T9438] syz_tun: entered promiscuous mode [ 294.019197][ T9438] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 294.044030][ T9438] Cannot create hsr debugfs directory [ 294.051239][ T9438] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 294.061837][ T27] audit: type=1804 audit(1770229121.742:144): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1188" name="file0" dev="ramfs" ino=21149 res=1 errno=0 [ 294.093158][ T9438] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 300.073386][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1210'. [ 301.377609][ T27] audit: type=1326 audit(1770229129.072:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9514 comm="syz.3.1215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27de99aeb9 code=0x0 [ 302.488323][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1219'. [ 303.924008][ T9550] loop5: detected capacity change from 0 to 2048 [ 304.045344][ T9550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.114691][ T9550] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.303483][ T8375] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.970793][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 308.007466][ T9627] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.016356][ T9627] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.025193][ T9627] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.034008][ T9627] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.110823][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 308.167016][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.338362][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.426114][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.683056][ T9636] veth0_vlan: left allmulticast mode [ 309.813132][ T9636] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.829745][ T9636] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.838763][ T9636] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.847747][ T9636] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.892518][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1264'. [ 311.957768][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1264'. [ 316.471157][ T9733] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1285'. [ 317.506486][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.514614][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.095208][ T9778] team0: Port device team_slave_0 removed [ 322.103520][ T9778] team0: Port device team_slave_1 removed [ 322.109924][ T9778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.120862][ T9778] bond1: (slave bond2): Releasing backup interface [ 322.170556][ T9778] bond3: (slave ip6erspan0): Releasing active interface [ 322.182470][ T9778] bond4: (slave gretap1): Releasing active interface [ 322.228665][ T9778] bond0: (slave bridge3): Releasing active interface [ 322.238368][ T9778] bond5: (slave ip6gretap1): Releasing active interface [ 325.051787][ T9824] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.061406][ T9824] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.070633][ T9824] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.079592][ T9824] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.437469][ T9871] syz_tun: left promiscuous mode [ 332.196370][ T9892] syz_tun: entered allmulticast mode [ 332.205400][ T9891] syz_tun: left allmulticast mode [ 332.573860][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1344'. [ 334.030385][ T9919] IPVS: Scheduler module ip_vs_ not found [ 334.284447][ T9930] netlink: 'syz.0.1354': attribute type 1 has an invalid length. [ 334.334226][ T9930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.343572][ T9939] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 334.491852][ T9930] bond6: (slave ip6gretap2): making interface the new active one [ 334.527880][ T9930] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 335.689180][ T9964] Invalid ELF header magic: != ELF [ 336.426704][ T9975] 9pnet: p9_errstr2errno: server reported unknown error 3aK [ 337.253035][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 337.432506][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'. [ 337.794782][T10000] fuse: Bad value for 'fd' [ 337.805912][T10000] 9pnet_fd: Insufficient options for proto=fd [ 345.151836][T10048] netlink: 'syz.0.1386': attribute type 27 has an invalid length. [ 345.190321][T10048] netlink: 'syz.0.1386': attribute type 4 has an invalid length. [ 345.214536][T10048] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1386'. [ 347.395709][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 347.748509][T10096] team0: entered promiscuous mode [ 347.778201][T10096] team0: entered allmulticast mode [ 349.618302][T10121] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 349.676332][T10121] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.700285][T10128] bond5: entered allmulticast mode [ 349.890821][T10121] bond5: (slave ip6gretap1): no link monitoring support [ 349.906298][T10121] bond5: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 349.938679][T10121] bond5: (slave ip6gretap1): making interface the new active one [ 349.953944][T10121] ip6gretap1: entered allmulticast mode [ 349.968147][T10121] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 350.313820][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 359.165535][T10251] xt_TCPMSS: Only works on TCP SYN packets [ 359.807086][T10276] fuse: Bad value for 'fd' [ 359.892321][T10280] ip_vti0: Master is either lo or non-ether device [ 360.004941][T10281] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 361.177858][T10293] overlayfs: failed to clone upperpath [ 362.760384][ T5862] IPVS: starting estimator thread 0... [ 362.883928][T10319] IPVS: using max 17 ests per chain, 40800 per kthread [ 366.825337][T10365] fuse: Bad value for 'fd' [ 372.569981][T10427] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 372.596447][T10427] CIFS mount error: No usable UNC path provided in device string! [ 372.596447][T10427] [ 372.606995][T10427] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.947853][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.955554][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.410918][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 379.435941][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'. [ 379.611184][T10469] overlayfs: failed to clone upperpath [ 379.626222][T10469] overlayfs: failed to clone upperpath [ 383.145783][T10509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.332851][T10516] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 386.040704][T10535] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 386.732170][T10538] bond7: (slave gretap2): making interface the new active one [ 386.760678][T10538] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 386.806945][T10540] vlan0: entered allmulticast mode [ 386.824397][T10540] bond7: entered allmulticast mode [ 386.842081][T10540] gretap2: entered allmulticast mode [ 386.861742][T10540] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 392.074612][T10566] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 392.803109][T10569] netlink: get zone limit has 4 unknown bytes [ 393.807829][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 393.830201][T10579] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.838613][T10579] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.846999][T10579] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.855700][T10579] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.875735][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 393.942077][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 394.280219][T10583] syz_tun: entered allmulticast mode [ 394.326360][T10583] syz_tun: left allmulticast mode [ 397.662674][T10622] xt_socket: unknown flags 0x50 [ 401.525897][T10656] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 402.330288][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 402.701825][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 402.952583][T10670] xt_cgroup: invalid path, errno=-2 [ 405.884329][T10697] xt_bpf: check failed: parse error [ 407.860514][T10712] netlink: 'syz.5.1603': attribute type 11 has an invalid length. [ 408.028967][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 408.188351][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 411.229597][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 411.249465][T10735] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.258632][T10735] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.268565][T10735] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.277565][T10735] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.298848][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 414.497015][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1623'. [ 414.575740][T10778] veth1: entered promiscuous mode [ 414.584895][T10778] bridge2: entered promiscuous mode [ 414.598319][T10778] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 414.617014][T10778] Cannot create hsr debugfs directory [ 414.637650][T10778] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 414.672443][T10778] hsr1: entered promiscuous mode [ 415.059248][T10786] fuse: Bad value for 'fd' [ 417.295726][T10817] fuse: Bad value for 'fd' [ 417.564229][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 417.730671][T10819] bridge5: port 1(veth5) entered blocking state [ 417.745563][T10819] bridge5: port 1(veth5) entered disabled state [ 417.752083][T10819] veth5: entered allmulticast mode [ 417.895983][T10819] veth5: entered promiscuous mode [ 417.939772][T10820] bridge5: port 2(veth0_to_bond) entered blocking state [ 417.959711][T10820] bridge5: port 2(veth0_to_bond) entered disabled state [ 418.990943][T10820] veth0_to_bond: entered allmulticast mode [ 419.056676][T10828] xt_cgroup: invalid path, errno=-2 [ 419.794229][T10820] veth0_to_bond: entered promiscuous mode [ 420.301284][T10836] tipc: Enabling of bearer rejected, failed to enable media [ 422.787824][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1656'. [ 422.823380][T10874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.880932][T10874] macvlan2: entered promiscuous mode [ 422.886577][T10874] macvlan2: entered allmulticast mode [ 422.909982][T10874] bond2: (slave gtp0): refused to change device type [ 424.224156][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1658'. [ 424.426864][T10882] netlink: 'syz.5.1658': attribute type 5 has an invalid length. [ 424.452818][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1658'. [ 432.411468][T10965] netlink: 'syz.4.1681': attribute type 10 has an invalid length. [ 432.440562][T10965] team0: left allmulticast mode [ 432.464779][T10965] bridge3: left allmulticast mode [ 432.495233][T10965] team0: left promiscuous mode [ 432.500099][T10965] bridge3: left promiscuous mode [ 432.527126][T10965] bridge0: port 1(team0) entered disabled state [ 432.549721][T10965] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.566554][T10965] bond0: (slave team0): Enslaving as an active interface with an up link [ 432.580861][T10968] netlink: 'syz.4.1681': attribute type 10 has an invalid length. [ 432.623513][T10972] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 432.777914][T10972] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 432.803207][T10967] vxcan0: entered allmulticast mode [ 432.993658][T10983] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1684'. [ 435.874676][T11014] xt_socket: unknown flags 0x4c [ 436.904351][T11027] overlayfs: failed to resolve './file0': -2 [ 439.585406][T11057] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 439.645738][T11057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.807149][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 440.387404][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.395597][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.666083][T11098] netlink: 'syz.5.1720': attribute type 10 has an invalid length. [ 442.738028][T11098] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 444.887464][T11123] SET target dimension over the limit! [ 447.539446][T11143] overlayfs: failed to clone upperpath [ 447.955077][ T60] ------------[ cut here ]------------ [ 447.961264][ T60] WARNING: CPU: 1 PID: 60 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 447.970852][ T60] Modules linked in: [ 447.974877][ T60] CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 447.982288][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.992495][ T60] Workqueue: iou_exit io_ring_exit_work [ 447.998168][ T60] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 448.003980][ T60] Code: 78 23 e8 fc 5a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 e3 5a 0b f7 e9 b9 fd ff ff e8 d9 5a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 448.024096][ T60] RSP: 0018:ffffc900015b7a40 EFLAGS: 00010293 [ 448.030215][ T60] RAX: ffffffff8a7bb9d7 RBX: ffff888054850000 RCX: ffff88801f6c0000 [ 448.038427][ T60] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 448.046595][ T60] RBP: ffffc900015b7bb0 R08: ffffc900015b79c7 R09: 1ffff920002b6f38 [ 448.054808][ T60] R10: dffffc0000000000 R11: fffff520002b6f39 R12: dffffc0000000000 [ 448.062826][ T60] R13: ffff888054850288 R14: 00000001000038f0 R15: 00000001000038f6 [ 448.070978][ T60] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 448.080018][ T60] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.086727][ T60] CR2: 000000110c31df5c CR3: 0000000063bcf000 CR4: 00000000003506e0 [ 448.094851][ T60] Call Trace: [ 448.098157][ T60] [ 448.101141][ T60] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 448.107052][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.112309][ T60] ? process_scheduled_works+0x96f/0x15d0 [ 448.118135][ T60] ? process_scheduled_works+0x96f/0x15d0 [ 448.124660][ T60] process_scheduled_works+0xa5d/0x15d0 [ 448.130632][ T60] ? assign_work+0x430/0x430 [ 448.135447][ T60] ? assign_work+0x3d0/0x430 [ 448.140097][ T60] worker_thread+0xa55/0xfc0 [ 448.144799][ T60] kthread+0x2fa/0x390 [ 448.148918][ T60] ? pr_cont_work+0x560/0x560 [ 448.153643][ T60] ? kthread_blkcg+0xd0/0xd0 [ 448.158335][ T60] ret_from_fork+0x48/0x80 [ 448.162795][ T60] ? kthread_blkcg+0xd0/0xd0 [ 448.167499][ T60] ret_from_fork_asm+0x11/0x20 [ 448.172328][ T60] [ 448.175452][ T60] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.182754][ T60] CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 448.190151][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.200232][ T60] Workqueue: iou_exit io_ring_exit_work [ 448.205810][ T60] Call Trace: [ 448.209095][ T60] [ 448.212032][ T60] dump_stack_lvl+0x18c/0x250 [ 448.216730][ T60] ? show_regs_print_info+0x20/0x20 [ 448.221943][ T60] ? load_image+0x400/0x400 [ 448.226470][ T60] panic+0x2dc/0x730 [ 448.230386][ T60] ? bpf_jit_dump+0xd0/0xd0 [ 448.234911][ T60] ? ret_from_fork_asm+0x11/0x20 [ 448.239867][ T60] __warn+0x2e0/0x470 [ 448.243861][ T60] ? io_ring_exit_work+0x3a7/0x820 [ 448.248988][ T60] ? io_ring_exit_work+0x3a7/0x820 [ 448.254108][ T60] report_bug+0x2be/0x4f0 [ 448.258452][ T60] ? io_ring_exit_work+0x3a7/0x820 [ 448.263576][ T60] ? io_ring_exit_work+0x3a7/0x820 [ 448.268704][ T60] ? io_ring_exit_work+0x3a9/0x820 [ 448.273833][ T60] handle_bug+0xcf/0x120 [ 448.278106][ T60] exc_invalid_op+0x1a/0x50 [ 448.282716][ T60] asm_exc_invalid_op+0x1a/0x20 [ 448.287575][ T60] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 448.293311][ T60] Code: 78 23 e8 fc 5a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 e3 5a 0b f7 e9 b9 fd ff ff e8 d9 5a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 448.313015][ T60] RSP: 0018:ffffc900015b7a40 EFLAGS: 00010293 [ 448.319094][ T60] RAX: ffffffff8a7bb9d7 RBX: ffff888054850000 RCX: ffff88801f6c0000 [ 448.327077][ T60] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 448.335067][ T60] RBP: ffffc900015b7bb0 R08: ffffc900015b79c7 R09: 1ffff920002b6f38 [ 448.343047][ T60] R10: dffffc0000000000 R11: fffff520002b6f39 R12: dffffc0000000000 [ 448.351031][ T60] R13: ffff888054850288 R14: 00000001000038f0 R15: 00000001000038f6 [ 448.359030][ T60] ? io_ring_exit_work+0x3a7/0x820 [ 448.364169][ T60] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 448.369998][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.375265][ T60] ? process_scheduled_works+0x96f/0x15d0 [ 448.381001][ T60] ? process_scheduled_works+0x96f/0x15d0 [ 448.386732][ T60] process_scheduled_works+0xa5d/0x15d0 [ 448.392318][ T60] ? assign_work+0x430/0x430 [ 448.396925][ T60] ? assign_work+0x3d0/0x430 [ 448.401534][ T60] worker_thread+0xa55/0xfc0 [ 448.406158][ T60] kthread+0x2fa/0x390 [ 448.410235][ T60] ? pr_cont_work+0x560/0x560 [ 448.414926][ T60] ? kthread_blkcg+0xd0/0xd0 [ 448.419528][ T60] ret_from_fork+0x48/0x80 [ 448.423957][ T60] ? kthread_blkcg+0xd0/0xd0 [ 448.428555][ T60] ret_from_fork_asm+0x11/0x20 [ 448.433343][ T60] [ 448.436698][ T60] Kernel Offset: disabled [ 448.441105][ T60] Rebooting in 86400 seconds..