last executing test programs: 5m46.715762064s ago: executing program 1 (id=798): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 5m43.722499205s ago: executing program 1 (id=810): syz_open_dev$vcsa(0x0, 0x3, 0x4042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x208000, 0x0) 5m41.35759101s ago: executing program 1 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 5m39.722472121s ago: executing program 1 (id=821): socket$packet(0x11, 0x2, 0x300) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5m39.487019932s ago: executing program 1 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5m38.326690855s ago: executing program 1 (id=829): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x40000006, 0x3, 0x1, {0x1, 0x5, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x40003ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) 5m22.884964388s ago: executing program 32 (id=829): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x40000006, 0x3, 0x1, {0x1, 0x5, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x40003ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03) 5m0.213782066s ago: executing program 0 (id=936): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000077deff00850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m59.75111401s ago: executing program 0 (id=939): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$inet(r3, 0x0, 0x0) 4m57.576140231s ago: executing program 0 (id=948): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m51.693474081s ago: executing program 0 (id=962): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x43) r1 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x81, 0x0, &(0x7f0000000140)) 4m50.440723453s ago: executing program 0 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 4m47.999300118s ago: executing program 0 (id=978): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0x1}]) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {}]}) 4m46.635947351s ago: executing program 33 (id=978): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0x1}]) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {}]}) 2m41.576283935s ago: executing program 5 (id=1270): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x7) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r0, 0xe) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 2m41.368920441s ago: executing program 5 (id=1272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede4", 0x6d}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m38.967139351s ago: executing program 5 (id=1279): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x1, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$inet(0x2, 0x4000000000000001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x10001, 0xffffffff, 0xffff, 0xe49}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) 2m36.834478935s ago: executing program 5 (id=1286): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 2m36.456611868s ago: executing program 5 (id=1288): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = syz_clone(0x20000, 0x0, 0x31, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x2000000) 2m33.962904949s ago: executing program 5 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) unshare(0xa000400) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xc000000b}) signalfd4(r4, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x100, 0x100, 0x50000, 0x60001, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) 2m33.444777503s ago: executing program 34 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) unshare(0xa000400) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xc000000b}) signalfd4(r4, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x100, 0x100, 0x50000, 0x60001, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) 11.98422108s ago: executing program 3 (id=1560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], 0x9) setresgid(0xee00, 0xee01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0xffffffff, @mcast2, 0x5}, @in6={0xa, 0x4e23, 0x8, @private0, 0x3}, @in6={0xa, 0x4e20, 0x317, @local, 0x7}], 0x74) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x78001904, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0cac0f0002ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 10.941385493s ago: executing program 2 (id=1562): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8910, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$sndctrl(&(0x7f0000000140), 0x4, 0x10103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(r0) 10.842642873s ago: executing program 3 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 10.786793833s ago: executing program 2 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8b, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) unshare(0x2c020400) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x0, @empty, 'pimreg1\x00'}}, 0x1e) 8.187728945s ago: executing program 2 (id=1566): inotify_init1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) syz_open_dev$dri(0x0, 0x1, 0x48240) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x3a98c2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x10001, {}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 7.987676003s ago: executing program 3 (id=1568): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000, 0x7fff, 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = userfaultfd(0x100003) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x203}}, 0x2e) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) 6.981027469s ago: executing program 4 (id=1569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 6.935546262s ago: executing program 2 (id=1570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) 6.872074918s ago: executing program 3 (id=1571): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002d) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1, &(0x7f0000001600), 0xfc, 0x55b4, &(0x7f000000ac40)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x400, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_emit_ethernet(0x16, &(0x7f0000000040)={@multicast, @remote, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "1a0c65"}}}}}, 0x0) r3 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)="13646f32c27fda0add75229f897d037a78d8bbe30b120fbf8de58b72b5981bbcfb9133e4e0475bcee56de96a1140a0596aa6db92f4e176d856fc681d16eb8acf4346bcb8c31ef86afc272df135e33ad6578a6db90229300d9c061c3136d063411c", 0x61}], 0x1, 0x3000, 0x8, 0x207b699da890c4cb) 5.685449018s ago: executing program 4 (id=1572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) 4.384167278s ago: executing program 4 (id=1573): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x142) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 3.638913697s ago: executing program 3 (id=1574): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24000004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 3.416413283s ago: executing program 4 (id=1575): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xff, 0x55c, &(0x7f0000000440)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 3.291947868s ago: executing program 2 (id=1576): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e0c010320"], 0xf) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) setitimer(0x2, 0x0, 0x0) memfd_create(0x0, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) 2.218345864s ago: executing program 4 (id=1577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 1.214617022s ago: executing program 4 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x218, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xd0, 0xffffffc5}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f00000001c0)={0x20, r8, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) 1.203367549s ago: executing program 2 (id=1579): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) writev(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) 0s ago: executing program 3 (id=1580): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(0x0, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r3) kernel console output (not intermixed with test programs): ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.627" name="file0" dev="ramfs" ino=14943 res=1 errno=0 [ 233.829777][ T54] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 234.374774][ T8019] loop2: detected capacity change from 0 to 1024 [ 234.468467][ T8022] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 234.476443][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 235.401014][ T8019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.350920][ T54] rc_core: IR keymap rc-imon-pad not found [ 236.357564][ T54] Registered IR keymap rc-empty [ 236.363400][ T54] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 236.377070][ T54] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 236.380640][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 236.552983][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 236.564747][ T54] imon:send_packet: packet tx failed (-71) [ 236.624860][ T54] imon 6-1:0.0: remote input dev register failed [ 236.637597][ T54] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 236.968051][ T5839] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 237.276365][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 237.508269][ T8026] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 237.810310][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.810591][ T8028] bond3 (unregistering): (slave gretap0): Releasing backup interface [ 238.469883][ T5839] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 238.481029][ T5839] usb 3-1: can't read configurations, error -71 [ 238.502566][ T54] imon 6-1:0.0: unable to initialize intf0, err 0 [ 238.506603][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.509325][ T54] imon:imon_probe: failed to initialize context! [ 238.524933][ T8028] bond3 (unregistering): Released all slaves [ 238.531285][ T54] imon 6-1:0.0: unable to register, err -19 [ 238.555336][ T54] usb 6-1: USB disconnect, device number 4 [ 239.015270][ T5839] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 239.244820][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 239.489323][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.840745][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.852673][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.863667][ T5839] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.873653][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.888391][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.898265][ T5839] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.909598][ T5839] usb 3-1: Manufacturer: syz [ 239.922383][ T5839] usb 3-1: config 0 descriptor?? [ 241.094036][ T5839] rc_core: IR keymap rc-hauppauge not found [ 241.121724][ T5839] Registered IR keymap rc-empty [ 241.147869][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.228299][ T8056] loop5: detected capacity change from 0 to 32768 [ 241.285246][ T30] audit: type=1800 audit(1776653090.001:17): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.643" name="bus" dev="loop5" ino=9 res=0 errno=0 [ 241.366846][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 241.405835][ T5839] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 241.475498][ T5839] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 242.083311][ T30] audit: type=1326 audit(1776653090.211:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.1.651" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe03c99c819 code=0x0 [ 242.249529][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.333405][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 242.416340][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.179061][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.223306][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.329668][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.337753][ T8101] read_mapping_page failed! [ 243.337816][ T8101] ERROR: (device loop5): txCommit: [ 243.337816][ T8101] [ 243.353647][ T8101] ERROR: (device loop5): remounting filesystem as read-only [ 243.457523][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.478416][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 243.507563][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 243.517183][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.563752][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.624885][ T5839] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 243.670148][ T5839] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 243.719998][ T5839] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 243.787629][ T5839] usb 3-1: USB disconnect, device number 6 [ 245.917358][ T8136] warning: `syz.3.665' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 247.228848][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'. [ 247.734702][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 247.961976][ T5916] IPVS: starting estimator thread 0... [ 248.083371][ T8170] IPVS: using max 25 ests per chain, 60000 per kthread [ 248.137698][ T8172] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 249.913240][ T8198] loop5: detected capacity change from 0 to 40427 [ 249.973645][ T8198] F2FS-fs (loop5): invalid crc value [ 250.139487][ T8198] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 250.554166][ T8198] F2FS-fs (loop5): Start checkpoint disabled! [ 250.965118][ T8198] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 250.975508][ T8198] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 252.077031][ T13] kworker/u8:1: attempt to access beyond end of device [ 252.077031][ T13] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.152857][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 252.152890][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.152906][ T13] Workqueue: writeback wb_workfn (flush-7:5) [ 252.152951][ T13] Call Trace: [ 252.152960][ T13] [ 252.152971][ T13] dump_stack_lvl+0xe8/0x150 [ 252.153014][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 252.153059][ T13] f2fs_write_end_io+0x1273/0x1740 [ 252.153130][ T13] __submit_merged_bio+0x256/0x6a0 [ 252.153179][ T13] __submit_merged_write_cond+0x3c9/0x4e0 [ 252.153226][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 252.153278][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.153320][ T13] f2fs_write_data_pages+0x287e/0x34f0 [ 252.153407][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 252.153512][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 252.153578][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.153608][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 252.153669][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 252.153711][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 252.153752][ T13] do_writepages+0x32e/0x550 [ 252.153799][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.153827][ T13] ? reacquire_held_locks+0x104/0x190 [ 252.153853][ T13] ? writeback_sb_inodes+0x463/0x19d0 [ 252.153904][ T13] __writeback_single_inode+0x133/0x10e0 [ 252.153931][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 252.153971][ T13] writeback_sb_inodes+0x979/0x19d0 [ 252.154009][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 252.154072][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154113][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 252.154160][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.154247][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154276][ T13] ? rcu_is_watching+0x15/0xb0 [ 252.154302][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154343][ T13] wb_writeback+0x445/0xb00 [ 252.154389][ T13] ? queue_io+0x251/0x470 [ 252.154438][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 252.154475][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.154530][ T13] wb_workfn+0x3f8/0xf10 [ 252.154561][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154590][ T13] ? look_up_lock_class+0x57/0x110 [ 252.154654][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 252.154690][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154715][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.154741][ T13] ? lock_acquire+0x106/0x350 [ 252.154777][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 252.154808][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154837][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154852][ T5850] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 252.154873][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.154906][ T13] ? process_scheduled_works+0xa70/0x1860 [ 252.154938][ T13] ? process_scheduled_works+0xa70/0x1860 [ 252.154977][ T13] process_scheduled_works+0xb5d/0x1860 [ 252.155015][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.155088][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.155135][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.155172][ T13] ? assign_work+0x3d5/0x5e0 [ 252.155217][ T13] worker_thread+0xa53/0xfc0 [ 252.155280][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.155323][ T13] kthread+0x388/0x470 [ 252.155354][ T13] ? __pfx_worker_thread+0x10/0x10 [ 252.155388][ T13] ? __pfx_kthread+0x10/0x10 [ 252.155420][ T13] ret_from_fork+0x514/0xb70 [ 252.155463][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 252.155501][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.155529][ T13] ? __switch_to+0xc79/0x1410 [ 252.155567][ T13] ? __pfx_kthread+0x10/0x10 [ 252.155598][ T13] ret_from_fork_asm+0x1a/0x30 [ 252.155650][ T13] [ 252.167014][ T13] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 252.174822][ T5850] Bluetooth: hci4: connection err: -111 [ 253.558428][ T8251] batman_adv: batadv0: Adding interface: dummy0 [ 253.597572][ T8251] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.748359][ T8251] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 255.116814][ T8284] loop1: detected capacity change from 0 to 512 [ 255.121556][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.130177][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.159059][ T8284] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.705: corrupted in-inode xattr: invalid size in ea xattr [ 255.180883][ T8284] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.183245][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 255.200563][ C0] EXT4-fs (loop1): initial error at time 1776653103: ext4_iget_extra_inode:5128: inode 15 [ 255.210530][ C0] EXT4-fs (loop1): last error at time 1776653103: ext4_iget_extra_inode:5128: inode 15 [ 255.409534][ T8284] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.705: couldn't read orphan inode 15 (err -117) [ 255.873933][ T8284] loop1: lost filesystem error report for type 5 error -117 [ 255.913885][ T8284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.118745][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.200177][ T8309] loop5: detected capacity change from 0 to 512 [ 258.231949][ T8309] EXT4-fs: Ignoring removed orlov option [ 258.337740][ T8309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.488046][ T8309] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.891709][ T8316] loop2: detected capacity change from 0 to 4096 [ 259.339012][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.579024][ T8327] pim6reg: entered allmulticast mode [ 259.781632][ T8340] 9pnet_fd: p9_fd_create_tcp (8340): problem connecting socket to 127.0.0.1 [ 260.679930][ T8339] IPVS: Scheduler module ip_vs_sip not found [ 261.031594][ T30] audit: type=1326 audit(1776653109.731:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5bf99c819 code=0x0 [ 261.780694][ T8362] netlink: 63 bytes leftover after parsing attributes in process `syz.4.725'. [ 262.160674][ T8372] loop1: detected capacity change from 0 to 2048 [ 263.179839][ T8372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.248222][ T8372] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.935989][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.035197][ T8442] syzkaller0: entered promiscuous mode [ 266.040888][ T8442] syzkaller0: entered allmulticast mode [ 266.327564][ T30] audit: type=1804 audit(1776653115.041:20): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.742" name="bus" dev="ramfs" ino=16519 res=1 errno=0 [ 266.390045][ T30] audit: type=1804 audit(1776653115.071:21): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.742" name="bus" dev="ramfs" ino=16519 res=1 errno=0 [ 266.453378][ T5916] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 266.923464][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 266.943090][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.979141][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.155044][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.165484][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 267.182005][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.200225][ T5916] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 267.209445][ T5916] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 267.224892][ T5916] usb 3-1: Manufacturer: syz [ 267.944525][ T5916] usb 3-1: config 0 descriptor?? [ 269.929780][ T5916] rc_core: IR keymap rc-hauppauge not found [ 270.034522][ T5916] Registered IR keymap rc-empty [ 270.070101][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.082078][ T8471] loop0: detected capacity change from 0 to 256 [ 270.133573][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.154572][ T8471] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.184677][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 270.231078][ T30] audit: type=1800 audit(1776653118.941:22): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.748" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 270.268216][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 270.330477][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.356454][ T30] audit: type=1800 audit(1776653118.971:23): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.748" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 270.413375][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.456449][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.497699][ T8479] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 270.510425][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.543506][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.558517][ T8482] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 270.593750][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.622853][ T8479] FAT-fs (loop0): Filesystem has been set read-only [ 270.632915][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.671067][ T8482] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 270.684578][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.734346][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 270.996177][ T8479] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 271.028509][ T8487] loop5: detected capacity change from 0 to 32768 [ 271.038317][ T5916] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 271.038445][ T8487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.754 (8487) [ 271.070165][ T8487] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.081547][ T8487] BTRFS info (device loop5): using sha256 checksum algorithm [ 271.105763][ T5916] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 271.127149][ T5916] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 271.183757][ T5916] usb 3-1: USB disconnect, device number 7 [ 271.250755][ T8487] BTRFS info (device loop5): enabling ssd optimizations [ 271.258692][ T8487] BTRFS info (device loop5): turning on async discard [ 271.265551][ T8487] BTRFS info (device loop5): enabling free space tree [ 271.266542][ T8479] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 271.814216][ T5916] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 271.828186][ T8487] BTRFS info (device loop5): balance: start -d -m [ 271.891138][ T8487] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 272.013603][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 272.065870][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 272.102973][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.156101][ T5916] usb 3-1: Product: syz [ 272.175416][ T5916] usb 3-1: Manufacturer: syz [ 272.203896][ T5916] usb 3-1: SerialNumber: syz [ 272.244974][ T5916] usb 3-1: config 0 descriptor?? [ 272.273467][ T8512] netlink: 'syz.4.758': attribute type 39 has an invalid length. [ 272.416634][ T8487] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 273.340095][ T5916] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 273.348277][ T5916] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 273.431221][ T8487] BTRFS info (device loop5): found 11 extents, stage: move data extents [ 273.495305][ T8487] BTRFS info (device loop5): found 1 extents, stage: update data pointers [ 273.554979][ T8487] BTRFS info (device loop5): balance: ended with status: 0 [ 273.811555][ T8513] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 273.821054][ T8513] UDF-fs: Scanning with blocksize 512 failed [ 273.858828][ T8513] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 273.866776][ T8513] UDF-fs: Scanning with blocksize 1024 failed [ 273.894125][ T8513] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 273.904398][ T8513] UDF-fs: Scanning with blocksize 2048 failed [ 273.920634][ T8513] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 273.930240][ T8513] UDF-fs: Scanning with blocksize 4096 failed [ 274.304411][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 275.420959][ T8520] bond3: entered promiscuous mode [ 275.471379][ T8520] bond3: entered allmulticast mode [ 275.568544][ T8529] team0: left allmulticast mode [ 275.579569][ T5841] usb 3-1: USB disconnect, device number 8 [ 275.605344][ T8529] team_slave_0: left allmulticast mode [ 275.649036][ T8529] team_slave_1: left allmulticast mode [ 275.672998][ T8529] team0: left promiscuous mode [ 275.708056][ T8529] team_slave_0: left promiscuous mode [ 275.753020][ T8529] team_slave_1: left promiscuous mode [ 275.844093][ T8529] bridge0: port 3(team0) entered disabled state [ 276.397462][ T5837] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.585568][ T8529] bridge_slave_0: left allmulticast mode [ 276.732508][ T8529] bridge_slave_0: left promiscuous mode [ 276.747982][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.563109][ T8549] fuse: Bad value for 'fd' [ 277.596070][ T8529] bridge_slave_1: left allmulticast mode [ 277.617947][ T8529] bridge_slave_1: left promiscuous mode [ 277.651583][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.772825][ T8529] bond0: (slave bond_slave_0): Releasing backup interface [ 278.455597][ T8529] bond0: (slave bond_slave_1): Releasing backup interface [ 279.466668][ T8529] team0: Port device team_slave_0 removed [ 280.271023][ T8529] team0: Port device team_slave_1 removed [ 280.304719][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.316127][ T8529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.350976][ T8529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 280.447646][ T8530] team0: No ports can be present during mode change [ 281.431063][ T8587] fuse: Bad value for 'fd' [ 282.600098][ T8612] team0: entered promiscuous mode [ 282.629771][ T8612] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.696453][ T8612] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 282.821872][ T8615] fuse: Bad value for 'fd' [ 284.286216][ T8628] overlayfs: failed to clone upperpath [ 287.117169][ T8635] syz_tun: entered allmulticast mode [ 287.424314][ T8635] syz_tun: left allmulticast mode [ 287.454930][ T8630] syz_tun: entered allmulticast mode [ 288.195246][ T8664] loop1: detected capacity change from 0 to 1024 [ 289.040199][ T8672] loop0: detected capacity change from 0 to 512 [ 289.061321][ T8664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.116764][ T8672] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 289.204517][ T8681] syzkaller0: entered promiscuous mode [ 289.213795][ T8672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102] [ 289.232305][ T8681] syzkaller0: entered allmulticast mode [ 289.244323][ T8683] fuse: fd is not a fuse device [ 289.269375][ T8672] System zones: 1-12 [ 289.275552][ T8672] EXT4-fs (loop0): orphan cleanup on readonly fs [ 289.323930][ T8672] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.801: invalid indirect mapped block 2 (level 2) [ 289.341239][ T8672] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 289.343630][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 289.359447][ C0] EXT4-fs (loop0): initial error at time 1776653138: ext4_free_branches:1023: inode 11 [ 289.369203][ C0] EXT4-fs (loop0): last error at time 1776653138: ext4_free_branches:1023: inode 11 [ 289.389240][ T8672] EXT4-fs (loop0): Remounting filesystem read-only [ 289.425355][ T8672] EXT4-fs (loop0): 1 truncate cleaned up [ 289.455137][ T8672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 289.551022][ T8672] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 290.238867][ T8693] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 290.277653][ T8696] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 290.340669][ T8672] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 290.395417][ T8672] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 290.411252][ T8672] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 290.467097][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.487991][ T8672] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 290.743949][ T8693] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 291.568039][ T8672] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 291.601034][ T8672] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.801: error -117 reading directory block [ 292.100776][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 292.282389][ T8720] erofs (device nullb0): cannot find valid erofs superblock [ 292.738437][ T8724] SQUASHFS error: Failed to read block 0x0: -5 [ 294.546415][ T8733] input: syz0 as /devices/virtual/input/input11 [ 294.581676][ T8745] Bluetooth: MGMT ver 1.23 [ 294.593521][ T8746] ªªªªªª: renamed from vlan0 (while UP) [ 294.815638][ T8754] tipc: Failed to remove unknown binding: 66,0,0/0:535470565/535470567 [ 294.865034][ T8754] tipc: Failed to remove unknown binding: 66,0,0/0:535470565/535470566 [ 294.932759][ T8754] tipc: Failed to remove unknown binding: 66,0,0/0:535470565/535470567 [ 294.945788][ T8754] tipc: Failed to remove unknown binding: 66,0,0/0:535470565/535470566 [ 295.909296][ T8766] netlink: 'syz.2.830': attribute type 1 has an invalid length. [ 296.760633][ T8766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.770724][ T8776] loop5: detected capacity change from 0 to 64 [ 297.197679][ T8786] netlink: 'syz.3.831': attribute type 8 has an invalid length. [ 297.252716][ T8778] netlink: 14 bytes leftover after parsing attributes in process `syz.2.830'. [ 298.523831][ T8770] bond1: (slave veth3): Enslaving as an active interface with a down link [ 300.324834][ T8766] bond1: (slave dummy0): making interface the new active one [ 300.372545][ T8766] dummy0: entered promiscuous mode [ 300.403881][ T8766] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 300.495666][ T8778] bond1: (slave dummy0): Releasing active interface [ 300.519112][ T8778] dummy0 (unregistering): left promiscuous mode [ 301.602058][ T5930] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 302.433386][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 302.693383][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 302.799963][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.906272][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.484169][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.511914][ T5930] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 303.515783][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 303.536416][ T5930] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 303.606583][ T8831] Invalid option length (57448) for dns_resolver key [ 304.173406][ T10] usb 3-1: Product: syz [ 304.267253][ T10] usb 3-1: Manufacturer: syz [ 304.304671][ T5930] usb 1-1: config 150 has no interface number 0 [ 304.307851][ T10] hub 3-1:4.0: USB hub found [ 304.348208][ T5930] usb 1-1: config 150 interface 204 has no altsetting 0 [ 304.385826][ T5930] usb 1-1: string descriptor 0 read error: -71 [ 304.408112][ T5930] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 304.439545][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.496515][ T10] hub 3-1:4.0: 2 ports detected [ 304.506742][ T5930] usb 1-1: can't set config #150, error -71 [ 304.547695][ T5930] usb 1-1: USB disconnect, device number 5 [ 304.897170][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'. [ 306.271738][ T10] hub 3-1:4.0: activate --> -90 [ 306.719115][ T5841] usb 3-1: USB disconnect, device number 9 [ 306.725301][ T10] usb 3-1-port2: cannot warm reset (err = -71) [ 306.746789][ T8862] syzkaller0: entered promiscuous mode [ 306.764220][ T8862] syzkaller0: entered allmulticast mode [ 306.771445][ T10] usb 3-1-port2: attempt power cycle [ 306.968197][ T8871] syzkaller0: entered promiscuous mode [ 306.983978][ T8871] syzkaller0: entered allmulticast mode [ 310.070246][ T8912] atomic_op ffff8880558bb998 conn xmit_atomic 0000000000000000 [ 315.480880][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 315.498476][ T8955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.508555][ T8955] IPv6: NLM_F_CREATE should be set when creating new route [ 315.525293][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.547096][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 315.598258][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 315.609746][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.664173][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 315.754477][ T8955] lo: entered allmulticast mode [ 315.804443][ T8955] tunl0: entered allmulticast mode [ 315.823344][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 315.830114][ T8955] gre0: entered allmulticast mode [ 315.846822][ T10] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 315.867387][ T10] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 315.891468][ T8955] gretap0: entered allmulticast mode [ 315.899628][ T10] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 315.917996][ T8955] erspan0: entered allmulticast mode [ 315.921164][ T10] usb 6-1: config 250 has no interface number 0 [ 315.935963][ T8955] ip_vti0: entered allmulticast mode [ 315.941880][ T10] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 315.955939][ T8955] ip6_vti0: entered allmulticast mode [ 315.967436][ T10] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 315.970215][ T8955] sit0: entered allmulticast mode [ 315.984553][ T8962] fuse: fd is not a fuse device [ 315.990145][ T10] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 28276, setting to 1024 [ 316.004963][ T8955] ip6tnl0: entered allmulticast mode [ 316.014280][ T8955] ip6gre0: entered allmulticast mode [ 316.017435][ T10] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 316.030672][ T10] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 316.030727][ T8955] ip6gretap0: entered allmulticast mode [ 316.044991][ T10] usb 6-1: config 250 interface 228 has no altsetting 0 [ 316.047150][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 316.059129][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.059811][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.078169][ T10] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 316.086335][ T8955] bridge0: entered allmulticast mode [ 316.106400][ T8955] vcan0: entered allmulticast mode [ 316.107368][ T10] usb 6-1: Product: syz [ 316.117141][ T8955] bond0: entered allmulticast mode [ 316.127135][ T10] usb 6-1: SerialNumber: syz [ 316.155179][ T10] hub 6-1:250.228: bad descriptor, ignoring hub [ 316.161679][ T10] hub 6-1:250.228: probe with driver hub failed with error -5 [ 316.169007][ T8955] bond_slave_0: entered allmulticast mode [ 316.179270][ T8955] bond_slave_1: entered allmulticast mode [ 316.189971][ T8955] team0: entered allmulticast mode [ 316.198086][ T8955] team_slave_0: entered allmulticast mode [ 316.206392][ T8955] team_slave_1: entered allmulticast mode [ 316.218863][ T8955] nlmon0: entered allmulticast mode [ 316.227045][ T8955] caif0: entered allmulticast mode [ 316.232741][ T8955] batadv0: entered allmulticast mode [ 316.245273][ T8955] vxcan0: entered allmulticast mode [ 316.252143][ T8955] vxcan1: entered allmulticast mode [ 316.259477][ T8955] veth0: entered allmulticast mode [ 316.268425][ T8955] veth1: entered allmulticast mode [ 316.278761][ T8955] wg0: entered allmulticast mode [ 316.289739][ T8955] wg1: entered allmulticast mode [ 316.300061][ T8955] wg2: entered allmulticast mode [ 316.309305][ T8955] veth0_to_bridge: entered allmulticast mode [ 316.323876][ T8955] veth1_to_bridge: entered allmulticast mode [ 316.336853][ T8955] veth0_to_bond: entered allmulticast mode [ 316.351797][ T8955] veth1_to_bond: entered allmulticast mode [ 316.362408][ T8955] veth0_to_team: entered allmulticast mode [ 316.383006][ T8955] veth1_to_team: entered allmulticast mode [ 316.407933][ T8955] veth0_to_batadv: entered allmulticast mode [ 316.437616][ T10] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 316.459613][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.466238][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.468692][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.489314][ T8955] batadv_slave_0: entered allmulticast mode [ 316.498879][ T8955] veth1_to_batadv: entered allmulticast mode [ 316.510763][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.664221][ T8955] batadv_slave_1: entered allmulticast mode [ 316.845699][ T8955] xfrm0: entered allmulticast mode [ 316.980552][ T8955] veth0_to_hsr: entered allmulticast mode [ 317.077862][ T8955] hsr_slave_0: entered allmulticast mode [ 317.102783][ T8955] veth1_to_hsr: entered allmulticast mode [ 317.122547][ T8955] hsr_slave_1: entered allmulticast mode [ 317.133000][ T8955] hsr0: entered allmulticast mode [ 317.141635][ T8955] veth1_virt_wifi: entered allmulticast mode [ 317.151716][ T8955] veth0_virt_wifi: entered allmulticast mode [ 317.160476][ T8955] virt_wifi0: entered allmulticast mode [ 317.167677][ T8955] veth1_vlan: entered allmulticast mode [ 317.184038][ T8955] veth0_vlan: entered allmulticast mode [ 317.198993][ T8955] vlan0: entered allmulticast mode [ 317.205956][ T8955] vlan1: entered allmulticast mode [ 317.211648][ T8955] macvlan0: entered allmulticast mode [ 317.215661][ T10] usb 6-1: USB disconnect, device number 5 [ 317.239905][ T10] usblp0: removed [ 317.240032][ T8955] macvlan1: entered allmulticast mode [ 317.260816][ T8955] ipvlan0: entered allmulticast mode [ 317.275967][ T8955] ipvlan1: entered allmulticast mode [ 317.282003][ T8955] veth1_macvtap: entered allmulticast mode [ 317.295067][ T8955] veth0_macvtap: entered allmulticast mode [ 317.306488][ T8955] macvtap0: entered allmulticast mode [ 317.317964][ T8955] macsec0: entered allmulticast mode [ 317.328885][ T8955] geneve0: entered allmulticast mode [ 317.346562][ T8955] geneve1: entered allmulticast mode [ 317.356604][ T8955] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 317.369889][ T8955] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 317.383290][ T8955] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 317.398704][ T8955] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 317.420560][ T8955] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 317.447534][ T8955] bond1: entered allmulticast mode [ 317.454069][ T8955] bond2: left promiscuous mode [ 317.459326][ T8955] dummy0: left promiscuous mode [ 317.469157][ T8955] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 317.476984][ T8955] veth2: entered allmulticast mode [ 317.482470][ T8955] veth3: entered allmulticast mode [ 317.488583][ T8955] bond3: left promiscuous mode [ 317.655728][ T5155] Bluetooth: hci6: command tx timeout [ 317.679949][ T8974] fuse: Bad value for 'fd' [ 317.722308][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.007303][ T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.196217][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.337416][ T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.564886][ T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.889683][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.962289][ T8990] syzkaller0: entered promiscuous mode [ 318.973231][ T8990] syzkaller0: entered allmulticast mode [ 319.737077][ T5155] Bluetooth: hci6: command tx timeout [ 320.305330][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.306707][ T9006] loop0: detected capacity change from 0 to 32768 [ 320.365359][ T9006] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 320.441498][ T9006] XFS (loop0): Ending clean mount [ 320.458352][ T9006] XFS (loop0): Quotacheck needed: Please wait. [ 320.516521][ T9006] XFS (loop0): Quotacheck: Done. [ 321.310702][ T5838] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 321.481547][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.845534][ T5155] Bluetooth: hci6: command tx timeout [ 322.595279][ T30] audit: type=1326 audit(1776653171.311:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 322.665470][ T30] audit: type=1326 audit(1776653171.331:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 322.698308][ T30] audit: type=1326 audit(1776653171.331:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 322.737739][ T30] audit: type=1326 audit(1776653171.331:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 322.760307][ T30] audit: type=1326 audit(1776653171.341:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 322.827690][ T30] audit: type=1326 audit(1776653171.341:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 322.927566][ T9063] netlink: 56 bytes leftover after parsing attributes in process `syz.3.909'. [ 323.426190][ T30] audit: type=1326 audit(1776653171.341:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 323.451542][ T30] audit: type=1326 audit(1776653171.341:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 323.515384][ T30] audit: type=1326 audit(1776653171.341:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 323.537828][ T30] audit: type=1326 audit(1776653171.341:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0c19c819 code=0x7ffc0000 [ 323.893581][ T5155] Bluetooth: hci6: command tx timeout [ 324.388817][ T9075] loop5: detected capacity change from 0 to 40427 [ 324.493242][ T9075] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 324.502046][ T9075] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 324.635002][ T9075] F2FS-fs (loop5): invalid crc value [ 324.860609][ T9075] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 324.877424][ T9075] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 324.884725][ T9075] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 327.910716][ T9110] fuse: fd is not a fuse device [ 330.635810][ T9161] capability: warning: `syz.5.920' uses deprecated v2 capabilities in a way that may be insecure [ 331.254828][ T13] team0: Port device bridge1 removed [ 331.372596][ T13] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 331.394404][ T13] team0: left promiscuous mode [ 331.408052][ T13] bond0 (unregistering): Released all slaves [ 331.431195][ T13] bond1 (unregistering): Released all slaves [ 331.610772][ T9165] loop5: detected capacity change from 0 to 32768 [ 331.656168][ T9165] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.930 (9165) [ 331.857624][ T9165] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 331.868073][ T9165] BTRFS info (device loop5): using crc32c checksum algorithm [ 331.875659][ T9165] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 332.407661][ T9147] bridge0: port 3(vlan3) entered blocking state [ 332.589775][ T9147] bridge0: port 3(vlan3) entered disabled state [ 332.597452][ T9147] vlan3: entered allmulticast mode [ 332.602903][ T9147] bond0: entered allmulticast mode [ 332.630677][ T9147] bond_slave_0: entered allmulticast mode [ 332.658062][ T9147] bond_slave_1: entered allmulticast mode [ 332.698780][ T9147] vlan3: entered promiscuous mode [ 332.776357][ T9147] bond0: entered promiscuous mode [ 332.805105][ T9147] bond_slave_0: entered promiscuous mode [ 332.820804][ T9165] BTRFS info (device loop5): rebuilding free space tree [ 332.827354][ T9147] bond_slave_1: entered promiscuous mode [ 332.923986][ T5499] 8021q: adding VLAN 0 to HW filter on device eth1 [ 333.034440][ T9165] BTRFS info (device loop5): disabling free space tree [ 333.041514][ T9165] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 333.051561][ T9165] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 333.071281][ T9165] BTRFS info (device loop5): enabling ssd optimizations [ 333.078504][ T9165] BTRFS info (device loop5): turning on async discard [ 333.085400][ T9165] BTRFS info (device loop5): enabling disk space caching [ 333.092438][ T9165] BTRFS info (device loop5): force clearing of disk cache [ 333.099669][ T9165] BTRFS info (device loop5): use zstd compression, level 3 [ 333.129599][ T9186] loop2: detected capacity change from 0 to 512 [ 333.176736][ T9186] msdos: Unknown parameter '/dev/comedi5' [ 334.136131][ T5837] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 334.162215][ T9200] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 334.162215][ T9200] The task syz.2.932 (9200) triggered the difference, watch for misbehavior. [ 334.685269][ T8949] chnl_net:caif_netlink_parms(): no params data found [ 335.806262][ T9229] tipc: Enabling of bearer rejected, failed to enable media [ 338.521278][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.949'. [ 339.392106][ T13] hsr_slave_0: left promiscuous mode [ 339.409902][ T13] hsr_slave_1: left promiscuous mode [ 339.736293][ T13] veth1_macvtap: left promiscuous mode [ 339.786322][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 339.789920][ T13] veth0_macvtap: left promiscuous mode [ 340.007752][ T13] veth1_vlan: left promiscuous mode [ 340.021753][ T13] veth0_vlan: left promiscuous mode [ 342.552558][ T9316] loop0: detected capacity change from 0 to 1024 [ 343.212091][ T9316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 343.436141][ T9316] loop0: detected capacity change from 1024 to 64 [ 344.563424][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.583684][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.592014][ T8949] bridge_slave_0: entered allmulticast mode [ 344.601518][ T8949] bridge_slave_0: entered promiscuous mode [ 344.610815][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.618613][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.626339][ T8949] bridge_slave_1: entered allmulticast mode [ 344.635077][ T8949] bridge_slave_1: entered promiscuous mode [ 344.782606][ T5499] 8021q: adding VLAN 0 to HW filter on device eth2 [ 344.887998][ T5838] syz_tun (unregistering): left allmulticast mode [ 345.777525][ T9361] overlayfs: failed to clone upperpath [ 345.801012][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.895626][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 345.900001][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.944311][ T9319] kmmpd-loop0: attempt to access beyond end of device [ 345.944311][ T9319] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 345.978493][ T9319] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 346.121225][ T8949] team0: Port device team_slave_0 added [ 346.226084][ T8949] team0: Port device team_slave_1 added [ 346.387319][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.403185][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.457208][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.091276][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.101469][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.147361][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.436909][ T8949] hsr_slave_0: entered promiscuous mode [ 347.445875][ T8949] hsr_slave_1: entered promiscuous mode [ 347.481278][ T8949] debugfs: 'hsr0' already exists in 'hsr' [ 347.487853][ T8949] Cannot create hsr debugfs directory [ 347.552055][ T13] IPVS: stop unused estimator thread 0... [ 348.494654][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 348.942787][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.968445][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.977476][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.986147][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.994361][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.751180][ T9412] netlink: 'syz.3.986': attribute type 39 has an invalid length. [ 349.921572][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.640308][ T5850] Bluetooth: hci1: command tx timeout [ 352.327310][ T5499] 8021q: adding VLAN 0 to HW filter on device eth3 [ 352.521187][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.830950][ T9430] loop5: detected capacity change from 0 to 32768 [ 352.840832][ T9430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.991 (9430) [ 352.859223][ T9430] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 352.869489][ T9430] BTRFS info (device loop5): using sha256 checksum algorithm [ 353.581609][ T9430] BTRFS info (device loop5): enabling ssd optimizations [ 353.589028][ T9430] BTRFS info (device loop5): turning on async discard [ 353.596031][ T9430] BTRFS info (device loop5): enabling free space tree [ 353.733631][ T5850] Bluetooth: hci1: command tx timeout [ 353.835126][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.547600][ T8949] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.561783][ T5837] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 354.628449][ T8949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.850108][ T9473] netlink: 'syz.3.998': attribute type 4 has an invalid length. [ 354.908920][ T9480] netlink: 'syz.3.998': attribute type 4 has an invalid length. [ 356.019238][ T5850] Bluetooth: hci1: command tx timeout [ 356.124589][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.460145][ T8949] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.839751][ T8949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.944494][ T8949] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.072462][ T8949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.122220][ T8949] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.136816][ T5850] Bluetooth: hci1: command tx timeout [ 358.280751][ T8949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.477962][ T9523] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 360.873870][ T5499] 8021q: adding VLAN 0 to HW filter on device eth4 [ 361.239378][ T9544] loop5: detected capacity change from 0 to 64 [ 361.276842][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 365.001470][ T13] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 366.525624][ T9597] fuse: Bad value for 'fd' [ 368.771201][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.802599][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.818706][ T13] bond0 (unregistering): Released all slaves [ 369.488893][ T13] bond1 (unregistering): Released all slaves [ 369.608767][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 371.480968][ T5499] 8021q: adding VLAN 0 to HW filter on device eth5 [ 371.514009][ T9616] team0: No ports can be present during mode change [ 372.022268][ T9621] team0 (unregistering): Port device team_slave_0 removed [ 372.045869][ T9621] team0 (unregistering): Port device team_slave_1 removed [ 372.316959][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.364950][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.376401][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.395385][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.420022][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.204690][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.538571][ T5850] Bluetooth: hci5: command tx timeout [ 374.979258][ T9668] loop2: detected capacity change from 0 to 512 [ 375.031500][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.039022][ T9399] bridge_slave_0: entered allmulticast mode [ 375.054721][ T9671] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 375.064048][ T9399] bridge_slave_0: entered promiscuous mode [ 375.074910][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.085069][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.092400][ T9399] bridge_slave_1: entered allmulticast mode [ 375.116115][ T9668] EXT4-fs (loop2): can't mount with both data=journal and dax [ 375.135380][ T9399] bridge_slave_1: entered promiscuous mode [ 375.232815][ T9668] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1039'. [ 375.306033][ T9665] bridge0: port 4(syz_tun) entered blocking state [ 375.352147][ T9665] bridge0: port 4(syz_tun) entered disabled state [ 375.379602][ T9665] syz_tun: entered allmulticast mode [ 375.461465][ T9665] syz_tun: entered promiscuous mode [ 375.829334][ T13] hsr_slave_0: left promiscuous mode [ 375.859307][ T13] hsr_slave_1: left promiscuous mode [ 375.882300][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.944603][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.997404][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.064530][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.784527][ T5850] Bluetooth: hci5: command tx timeout [ 376.914925][ T13] veth1_macvtap: left promiscuous mode [ 376.964683][ T13] veth0_macvtap: left promiscuous mode [ 376.989761][ T13] veth1_vlan: left promiscuous mode [ 377.018587][ T13] veth0_vlan: left promiscuous mode [ 377.538796][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 377.899764][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.906316][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.372472][ T13] team0 (unregistering): Port device team_slave_1 removed [ 378.425592][ T13] team0 (unregistering): Port device team_slave_0 removed [ 378.571218][ T13] veth0 (unregistering): left allmulticast mode [ 378.769583][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.786528][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.863365][ T5850] Bluetooth: hci5: command tx timeout [ 379.372875][ T9723] loop5: detected capacity change from 0 to 32768 [ 379.516823][ T5499] 8021q: adding VLAN 0 to HW filter on device eth6 [ 379.678490][ T9723] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 379.700494][ T9723] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 379.808318][ T9399] team0: Port device team_slave_0 added [ 379.871356][ T9399] team0: Port device team_slave_1 added [ 380.047953][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.055849][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.092993][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.123234][ T9748] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 380.146360][ T9723] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 380.195621][ T5930] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 380.206012][ T5930] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 380.231449][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.244991][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.909728][ T5930] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 703ms [ 380.927868][ T5930] gfs2: fsid=syz:syz.0: jid=0: Done [ 380.935051][ T9723] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 380.983270][ T5850] Bluetooth: hci5: command tx timeout [ 381.011715][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.076463][ T9748] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 382.523923][ T9723] gfs2: fsid=syz:syz.0: found 1 quota changes [ 383.522249][ T9399] hsr_slave_0: entered promiscuous mode [ 383.601319][ T9399] hsr_slave_1: entered promiscuous mode [ 383.630450][ T9399] debugfs: 'hsr0' already exists in 'hsr' [ 383.666464][ T9399] Cannot create hsr debugfs directory [ 383.673792][ T5837] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 383.689262][ T5837] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 383.698649][ T5837] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5837 [syz-executor] gfs2_quota_sync+0x370/0x470 [ 383.712346][ T5837] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 383.722882][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 383.722922][ T5837] Tainted: [L]=SOFTLOCKUP [ 383.722930][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.722944][ T5837] Call Trace: [ 383.722954][ T5837] [ 383.722964][ T5837] dump_stack_lvl+0xe8/0x150 [ 383.723015][ T5837] gfs2_withdraw+0xc3/0x1b0 [ 383.723049][ T5837] inode_go_instantiate+0xe69/0x12a0 [ 383.723080][ T5837] ? preempt_schedule_common+0x82/0xd0 [ 383.723131][ T5837] ? __pfx_inode_go_instantiate+0x10/0x10 [ 383.723162][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.723201][ T5837] gfs2_instantiate+0x168/0x220 [ 383.723234][ T5837] gfs2_glock_wait+0x1d4/0x2a0 [ 383.723269][ T5837] do_sync+0x49a/0xcb0 [ 383.723306][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.723334][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 383.723367][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.723395][ T5837] ? gfs2_quota_sync+0x370/0x470 [ 383.723441][ T5837] ? __pfx_do_sync+0x10/0x10 [ 383.723489][ T5837] ? gfs2_quota_sync+0x370/0x470 [ 383.723536][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.723565][ T5837] ? preempt_schedule_thunk+0x16/0x30 [ 383.723606][ T5837] gfs2_quota_sync+0x370/0x470 [ 383.723657][ T5837] gfs2_sync_fs+0x4c/0xb0 [ 383.723692][ T5837] sync_filesystem+0xee/0x230 [ 383.723728][ T5837] generic_shutdown_super+0x77/0x2d0 [ 383.723762][ T5837] kill_block_super+0x44/0x90 [ 383.723796][ T5837] deactivate_locked_super+0xbc/0x130 [ 383.723827][ T5837] cleanup_mnt+0x437/0x4d0 [ 383.723859][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.723900][ T5837] task_work_run+0x1d9/0x270 [ 383.723936][ T5837] ? __pfx_task_work_run+0x10/0x10 [ 383.723976][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.724004][ T5837] exit_to_user_mode_loop+0xed/0x480 [ 383.724041][ T5837] ? rcu_is_watching+0x15/0xb0 [ 383.724068][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.724095][ T5837] do_syscall_64+0x33e/0xf80 [ 383.724134][ T5837] ? trace_irq_disable+0x3b/0x140 [ 383.724174][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.724198][ T5837] RIP: 0033:0x7f323219da57 [ 383.724220][ T5837] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 383.724241][ T5837] RSP: 002b:00007ffd0da336a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 383.724267][ T5837] RAX: 0000000000000000 RBX: 00007f3232232048 RCX: 00007f323219da57 [ 383.724284][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0da33760 [ 383.724300][ T5837] RBP: 00007ffd0da33760 R08: 00007ffd0da34760 R09: 00000000ffffffff [ 383.724318][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0da347f0 [ 383.724333][ T5837] R13: 00007f3232232048 R14: 000000000005c542 R15: 00007ffd0da34830 [ 383.724373][ T5837] [ 384.009689][ T5837] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 385.247220][ T9647] chnl_net:caif_netlink_parms(): no params data found [ 387.963067][ T9816] batadv_slave_1: entered promiscuous mode [ 388.066084][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 391.270681][ T9812] batadv_slave_1: left promiscuous mode [ 391.331004][ T5499] 8021q: adding VLAN 0 to HW filter on device eth7 [ 391.721432][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.736541][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.767844][ T9647] bridge_slave_0: entered allmulticast mode [ 392.020556][ T9647] bridge_slave_0: entered promiscuous mode [ 392.451747][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 392.688878][ T9850] loop2: detected capacity change from 0 to 16 [ 392.779035][ T9850] erofs (device loop2): mounted with root inode @ nid 36. [ 393.627182][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.652743][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.676389][ T9647] bridge_slave_1: entered allmulticast mode [ 393.702087][ T9647] bridge_slave_1: entered promiscuous mode [ 394.142310][ T9647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.190447][ T9647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.622175][ T9647] team0: Port device team_slave_0 added [ 398.358540][ T9399] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.393693][ T9399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.443603][ T9647] team0: Port device team_slave_1 added [ 398.780732][ T9399] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.483859][ T9399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.472967][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.509958][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.853771][ T9917] capability: warning: `syz.5.1094' uses 32-bit capabilities (legacy support in use) [ 402.435203][ T9647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.447507][ T9399] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.504066][ T9399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.529697][ T9399] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.559206][ T9399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.651971][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.683288][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.931562][ T9647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.066947][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 404.685758][ T9647] hsr_slave_0: entered promiscuous mode [ 404.692801][ T9647] hsr_slave_1: entered promiscuous mode [ 404.702587][ T9647] debugfs: 'hsr0' already exists in 'hsr' [ 404.709190][ T9647] Cannot create hsr debugfs directory [ 404.836487][ T13] bridge_slave_1: left allmulticast mode [ 404.860786][ T13] bridge_slave_1: left promiscuous mode [ 404.878386][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.923738][ T13] bridge_slave_0: left allmulticast mode [ 404.939664][ T13] bridge_slave_0: left promiscuous mode [ 404.948376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.891549][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.910138][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.661457][ T13] bond0 (unregistering): Released all slaves [ 406.718784][ T5499] 8021q: adding VLAN 0 to HW filter on device eth8 [ 407.129118][ T13] hsr_slave_0: left promiscuous mode [ 407.151672][ T13] hsr_slave_1: left promiscuous mode [ 407.172436][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.255648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.542753][ T13] team0 (unregistering): Port device team_slave_1 removed [ 408.586641][ T13] team0 (unregistering): Port device team_slave_0 removed [ 408.668459][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 408.686638][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 408.695780][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 408.710242][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 408.723049][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.868149][ T5850] Bluetooth: hci6: command tx timeout [ 413.325090][ T5850] Bluetooth: hci6: command tx timeout [ 415.223918][T10080] fuse: Bad value for 'fd' [ 415.336418][ T5850] Bluetooth: hci6: command tx timeout [ 415.345732][T10083] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[10083] [ 417.494263][T10013] chnl_net:caif_netlink_parms(): no params data found [ 417.503265][ T5850] Bluetooth: hci6: command tx timeout [ 420.834423][T10156] loop5: detected capacity change from 0 to 1024 [ 420.910419][T10156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.961340][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.997313][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.019753][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 421.019769][ T30] audit: type=1800 audit(1776653525.740:38): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1142" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 421.059364][T10013] bridge_slave_0: entered allmulticast mode [ 421.077989][T10013] bridge_slave_0: entered promiscuous mode [ 421.627192][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.649813][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.690045][T10013] bridge_slave_1: entered allmulticast mode [ 421.717048][T10013] bridge_slave_1: entered promiscuous mode [ 421.763514][ T30] audit: type=1804 audit(1776653526.480:39): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1142" name="/newroot/178/file1/cgroup.controllers" dev="loop5" ino=18 res=1 errno=0 [ 421.971085][ T30] audit: type=1800 audit(1776653526.490:40): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1142" name="cgroup.controllers" dev="loop5" ino=18 res=0 errno=0 [ 422.040045][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.043491][ T9647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.668992][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.862769][ T9647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.904764][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.997968][ T9647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.030035][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.043246][ T5916] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 423.223263][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 423.251948][ T5916] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 423.278597][ T9647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.301911][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.302233][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 423.321932][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.950336][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.085821][ T5916] usb 3-1: Product: syz [ 424.093198][ T5916] usb 3-1: Manufacturer: syz [ 424.097841][ T5916] usb 3-1: SerialNumber: syz [ 424.123801][ T5916] usb 3-1: config 0 descriptor?? [ 424.148569][ T5916] gspca_main: sq905-2.14.0 probing 2770:9120 [ 424.240300][ T12] bridge_slave_1: left allmulticast mode [ 424.255889][ T12] bridge_slave_1: left promiscuous mode [ 424.270057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.300748][ T12] bridge_slave_0: left allmulticast mode [ 424.317695][ T12] bridge_slave_0: left promiscuous mode [ 424.337616][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.664839][ T5916] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 425.718177][ T5916] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 426.162220][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.174261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.185986][ T12] bond0 (unregistering): Released all slaves [ 426.287424][T10013] team0: Port device team_slave_0 added [ 426.297570][T10013] team0: Port device team_slave_1 added [ 426.988657][T10212] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1145'. [ 427.247804][ T5841] usb 3-1: USB disconnect, device number 14 [ 427.547719][ T12] hsr_slave_0: left promiscuous mode [ 428.579066][ T12] hsr_slave_1: left promiscuous mode [ 428.958659][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.974598][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.401818][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.456349][ T12] team0 (unregistering): Port device team_slave_0 removed [ 430.261989][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.269198][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.299629][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.373968][T10237] : entered promiscuous mode [ 430.459182][T10262] syzkaller0: entered promiscuous mode [ 430.474263][T10262] syzkaller0: entered allmulticast mode [ 430.495143][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.523600][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.553787][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.975427][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 431.348644][T10013] hsr_slave_0: entered promiscuous mode [ 431.356707][T10013] hsr_slave_1: entered promiscuous mode [ 431.368155][T10013] debugfs: 'hsr0' already exists in 'hsr' [ 431.382105][T10013] Cannot create hsr debugfs directory [ 431.551721][T10282] netlink: 'syz.4.1167': attribute type 12 has an invalid length. [ 431.564574][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 431.573890][T10282] bond0: option primary_reselect: invalid value (138) [ 431.612821][ T9647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.772533][T10295] netlink: 'syz.5.1172': attribute type 4 has an invalid length. [ 432.943509][T10298] netlink: 'syz.5.1172': attribute type 4 has an invalid length. [ 433.102758][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.116633][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.264199][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.301876][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.747466][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.821985][T10298] netlink: 'syz.5.1172': attribute type 4 has an invalid length. [ 435.895748][ T5850] Bluetooth: hci1: command tx timeout [ 438.528320][ T5850] Bluetooth: hci1: command tx timeout [ 439.481384][T10380] loop5: detected capacity change from 0 to 8 [ 439.573377][T10380] SQUASHFS error: lzo decompression failed, data probably corrupt [ 439.581648][T10380] SQUASHFS error: Failed to read block 0x91: -5 [ 439.588220][T10380] SQUASHFS error: Unable to read metadata cache entry [8f] [ 439.595636][T10380] SQUASHFS error: Unable to read inode 0x11f [ 439.916484][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.922979][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.934715][ T30] audit: type=1107 audit(1776653544.180:41): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 440.623781][ T5850] Bluetooth: hci1: command tx timeout [ 442.918190][ T5850] Bluetooth: hci1: command tx timeout [ 446.413614][T10260] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 446.623986][T10260] usb 6-1: Using ep0 maxpacket: 16 [ 446.695062][T10260] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 446.717459][T10260] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 446.751344][T10260] usb 6-1: Product: syz [ 446.762980][T10260] usb 6-1: Manufacturer: syz [ 446.782323][T10260] usb 6-1: SerialNumber: syz [ 446.809732][T10260] usb 6-1: config 0 descriptor?? [ 447.185542][T10297] chnl_net:caif_netlink_parms(): no params data found [ 448.001116][T10260] usb 6-1: USB disconnect, device number 6 [ 448.219159][T10469] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 449.399458][T10472] gretap1: entered promiscuous mode [ 449.416404][T10472] bond3: (slave gretap1): making interface the new active one [ 449.426115][T10472] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 449.448884][T10474] macvlan2: entered promiscuous mode [ 449.455974][T10474] macvlan2: entered allmulticast mode [ 449.462412][T10474] bond3: entered promiscuous mode [ 449.469249][T10474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 449.478922][T10474] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 449.496378][T10474] bond3: left promiscuous mode [ 449.556652][T10484] IPVS: Error connecting to the multicast addr [ 449.598107][T10013] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 449.663692][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.682889][T10013] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 449.716311][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.878655][T10494] overlayfs: failed to clone upperpath [ 449.914510][T10013] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 449.965582][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.000120][T10013] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 450.870108][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.895740][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.916868][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.924227][T10297] bridge_slave_0: entered allmulticast mode [ 450.932267][T10297] bridge_slave_0: entered promiscuous mode [ 451.003308][ T1162] bridge_slave_1: left allmulticast mode [ 451.030421][ T1162] bridge_slave_1: left promiscuous mode [ 451.256480][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.022652][ T1162] bridge_slave_0: left allmulticast mode [ 452.057339][ T1162] bridge_slave_0: left promiscuous mode [ 452.095133][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.811421][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.878071][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.026182][ T1162] bond0 (unregistering): Released all slaves [ 454.115990][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.131754][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.152961][T10297] bridge_slave_1: entered allmulticast mode [ 454.201433][T10297] bridge_slave_1: entered promiscuous mode [ 454.304167][T10526] batadv_slave_0: entered promiscuous mode [ 454.310436][T10526] batadv_slave_0: left promiscuous mode [ 454.317819][T10529] lo: entered allmulticast mode [ 454.452635][T10529] tunl0: entered allmulticast mode [ 454.482666][T10529] gre0: entered allmulticast mode [ 454.512710][T10529] gretap0: entered allmulticast mode [ 454.527945][T10529] erspan0: entered allmulticast mode [ 454.529706][T10536] fuse: fd is not a fuse device [ 454.559813][T10529] ip_vti0: entered allmulticast mode [ 454.580742][T10529] ip6_vti0: entered allmulticast mode [ 454.606069][T10529] sit0: entered allmulticast mode [ 454.623472][T10529] ip6tnl0: entered allmulticast mode [ 454.629184][T10529] ip6gre0: entered allmulticast mode [ 454.645186][T10529] syz_tun: entered allmulticast mode [ 454.655310][T10529] ip6gretap0: entered allmulticast mode [ 454.688884][T10529] bridge0: entered allmulticast mode [ 454.696020][T10529] bond0: entered allmulticast mode [ 454.703582][T10529] bond_slave_0: entered allmulticast mode [ 454.709471][T10529] bond_slave_1: entered allmulticast mode [ 454.717228][T10529] team0: entered allmulticast mode [ 454.723490][T10529] team_slave_0: entered allmulticast mode [ 454.730193][T10529] team_slave_1: entered allmulticast mode [ 454.737432][T10529] nlmon0: entered allmulticast mode [ 454.743901][T10529] caif0: entered allmulticast mode [ 454.749413][T10529] batadv0: entered allmulticast mode [ 454.757622][T10529] vxcan0: entered allmulticast mode [ 454.765821][T10529] vxcan1: entered allmulticast mode [ 454.771303][T10529] veth0: entered allmulticast mode [ 454.777207][T10529] veth1: entered allmulticast mode [ 454.787517][T10529] wg0: entered allmulticast mode [ 454.794197][T10529] wg1: entered allmulticast mode [ 454.800963][T10529] wg2: entered allmulticast mode [ 454.806675][T10529] veth0_to_bridge: entered allmulticast mode [ 454.813836][T10529] veth1_to_bridge: entered allmulticast mode [ 454.823794][T10529] veth0_to_bond: entered allmulticast mode [ 454.830760][T10529] veth1_to_bond: entered allmulticast mode [ 454.838279][T10529] veth0_to_team: entered allmulticast mode [ 454.844668][T10529] veth1_to_team: entered allmulticast mode [ 454.852374][T10529] veth0_to_batadv: entered allmulticast mode [ 454.859186][T10529] batadv_slave_0: entered allmulticast mode [ 454.868161][T10529] veth1_to_batadv: entered allmulticast mode [ 454.876492][T10529] batadv_slave_1: entered allmulticast mode [ 454.886485][T10529] xfrm0: entered allmulticast mode [ 454.899041][T10529] veth0_to_hsr: entered allmulticast mode [ 454.913408][T10529] hsr_slave_0: entered allmulticast mode [ 454.928367][T10529] veth1_to_hsr: entered allmulticast mode [ 454.943298][T10529] hsr_slave_1: entered allmulticast mode [ 454.955086][T10529] hsr0: entered allmulticast mode [ 454.967691][T10529] veth1_virt_wifi: entered allmulticast mode [ 454.976021][T10529] veth0_virt_wifi: entered allmulticast mode [ 454.982185][T10529] virt_wifi0: entered allmulticast mode [ 454.989411][T10529] veth1_vlan: entered allmulticast mode [ 454.998369][T10529] veth0_vlan: entered allmulticast mode [ 455.005797][T10529] vlan0: entered allmulticast mode [ 455.011228][T10529] vlan1: entered allmulticast mode [ 455.017751][T10529] macvlan0: entered allmulticast mode [ 455.023926][T10529] macvlan1: entered allmulticast mode [ 455.029578][T10529] ipvlan0: entered allmulticast mode [ 455.035761][T10529] ipvlan1: entered allmulticast mode [ 455.041496][T10529] veth1_macvtap: entered allmulticast mode [ 455.053438][T10529] veth0_macvtap: entered allmulticast mode [ 455.067122][T10529] macvtap0: entered allmulticast mode [ 455.089542][T10529] macsec0: entered allmulticast mode [ 455.108977][T10529] geneve0: entered allmulticast mode [ 455.124277][T10529] geneve1: entered allmulticast mode [ 455.129800][T10529] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 455.137791][T10529] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 455.146428][T10529] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 455.155045][T10529] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 455.162718][T10529] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 455.205528][T10529] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 455.315038][T10529] ip6gre1: left promiscuous mode [ 455.405003][T10529] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 457.403676][T10529] bond1: entered allmulticast mode [ 457.424154][T10529] veth2: entered allmulticast mode [ 457.521088][T10529] veth3: entered allmulticast mode [ 457.528796][T10529] ipip0: entered allmulticast mode [ 458.676823][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.743896][ T1162] hsr_slave_0: left promiscuous mode [ 458.768532][ T5930] IPVS: starting estimator thread 0... [ 458.817579][ T1162] hsr_slave_1: left promiscuous mode [ 458.843939][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.879430][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.954376][T10567] IPVS: using max 27 ests per chain, 64800 per kthread [ 458.964808][ T5850] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 459.056187][T10576] sctp: [Deprecated]: syz.4.1235 (pid 10576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.056187][T10576] Use struct sctp_sack_info instead [ 459.208970][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 459.220899][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 460.031751][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 460.066681][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 460.325269][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.400948][T10297] team0: Port device team_slave_0 added [ 460.610874][T10297] team0: Port device team_slave_1 added [ 461.341564][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.469397][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.536216][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.571238][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.595789][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.638181][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.888848][T10297] hsr_slave_0: entered promiscuous mode [ 461.903270][T10297] hsr_slave_1: entered promiscuous mode [ 461.954538][T10297] debugfs: 'hsr0' already exists in 'hsr' [ 461.971417][T10297] Cannot create hsr debugfs directory [ 465.659568][T10629] overlayfs: failed to clone upperpath [ 466.507471][T10013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.218406][T10671] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1258'. [ 469.361404][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.376959][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.389993][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.400411][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.409732][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 471.613216][ T5155] Bluetooth: hci5: command tx timeout [ 473.088894][T10676] chnl_net:caif_netlink_parms(): no params data found [ 473.663164][ T5155] Bluetooth: hci5: command tx timeout [ 474.988532][T10738] kAFS: unable to lookup cell '' [ 475.291436][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.298879][T10676] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.306821][T10676] bridge_slave_0: entered allmulticast mode [ 475.315141][T10676] bridge_slave_0: entered promiscuous mode [ 475.324545][T10676] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.331742][T10676] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.339485][T10676] bridge_slave_1: entered allmulticast mode [ 475.348072][T10676] bridge_slave_1: entered promiscuous mode [ 475.793511][ T5155] Bluetooth: hci5: command tx timeout [ 476.525607][T10759] ufs: You didn't specify the type of your ufs filesystem [ 476.525607][T10759] [ 476.525607][T10759] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 476.525607][T10759] [ 476.525607][T10759] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 476.556832][T10759] ufs: ufstype=old is supported read-only [ 477.229047][T10676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.475500][T10676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.695811][T10297] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.728772][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.934587][T10676] team0: Port device team_slave_0 added [ 478.393129][T10297] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 478.541458][ T5155] Bluetooth: hci5: command tx timeout [ 479.073127][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.081992][T10297] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 479.200038][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.270255][T10676] team0: Port device team_slave_1 added [ 479.566986][T10297] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 480.180977][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.289975][T10676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.316427][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.373276][T10676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.436587][T10676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.454057][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.522367][T10676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.730986][T10676] hsr_slave_0: entered promiscuous mode [ 480.739502][T10676] hsr_slave_1: entered promiscuous mode [ 480.746530][T10676] debugfs: 'hsr0' already exists in 'hsr' [ 480.757412][T10676] Cannot create hsr debugfs directory [ 481.043993][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.069967][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.080401][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.108194][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.116494][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.298526][ T1344] bridge_slave_1: left allmulticast mode [ 481.325894][ T1344] bridge_slave_1: left promiscuous mode [ 481.348690][ T1344] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.362594][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 481.388444][ T1344] bridge_slave_0: left allmulticast mode [ 481.414164][ T1344] bridge_slave_0: left promiscuous mode [ 481.432517][ T1344] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.213839][ T5850] Bluetooth: hci2: command tx timeout [ 483.796018][ T1344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.842733][ T1344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.874339][ T1344] bond0 (unregistering): Released all slaves [ 484.004981][T10830] tipc: Started in network mode [ 484.015103][T10830] tipc: Node identity -, cluster identity 4711 [ 484.138652][ T1344] hsr_slave_0: left promiscuous mode [ 484.158173][ T1344] hsr_slave_1: left promiscuous mode [ 484.175355][ T1344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.191507][ T1344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.254879][ T5850] Bluetooth: hci2: command tx timeout [ 485.719906][T10871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1306'. [ 486.057810][ T1344] team0 (unregistering): Port device team_slave_1 removed [ 486.104426][ T1344] team0 (unregistering): Port device team_slave_0 removed [ 486.338765][T10880] fuse: fd is not a fuse device [ 486.447236][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'. [ 486.456380][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1307'. [ 487.583229][ T5850] Bluetooth: hci2: command tx timeout [ 489.694132][ T5850] Bluetooth: hci2: command tx timeout [ 490.781372][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.062805][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.199322][ T30] audit: type=1800 audit(1776653595.920:42): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1319" name="nullb0" dev="tmpfs" ino=1642 res=0 errno=0 [ 491.206604][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.227279][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.270282][T10821] chnl_net:caif_netlink_parms(): no params data found [ 491.843716][T10933] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 492.873005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.880265][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.162947][T10821] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.180497][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.193805][T10821] bridge_slave_0: entered allmulticast mode [ 493.204746][T10821] bridge_slave_0: entered promiscuous mode [ 493.232972][T10821] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.240863][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.260571][T10821] bridge_slave_1: entered allmulticast mode [ 493.278596][T10821] bridge_slave_1: entered promiscuous mode [ 494.270253][T10821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.308202][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 494.328092][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 494.336182][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 494.344958][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 494.348171][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 494.354971][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 494.412073][T10821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.443844][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 494.565148][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 494.591457][T10821] team0: Port device team_slave_0 added [ 494.594874][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 494.634505][T10821] team0: Port device team_slave_1 added [ 496.238039][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 496.262975][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 496.491846][T10953] ceph: No mds server is up or the cluster is laggy [ 496.513647][ T5155] Bluetooth: hci6: command tx timeout [ 496.788943][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 496.798609][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 498.539626][ T5155] Bluetooth: hci6: command tx timeout [ 498.706496][T10821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.746749][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.807988][T10821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.825754][T10985] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 500.705559][ T5155] Bluetooth: hci6: command tx timeout [ 500.770497][T10821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.783044][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.783380][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.801657][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.828651][T10821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.891310][T10985] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 501.206802][T10985] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 502.161809][T10990] bond4: (slave bridge1): Enslaving as an active interface with a down link [ 502.187144][T10994] bond4: (slave gretap2): making interface the new active one [ 502.199262][T10994] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 502.803202][ T5155] Bluetooth: hci6: command tx timeout [ 503.030117][T11014] overlayfs: failed to clone upperpath [ 503.702063][T10676] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.719953][T10676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.842198][T10821] hsr_slave_0: entered promiscuous mode [ 504.027333][T10821] hsr_slave_1: entered promiscuous mode [ 504.034528][T10821] debugfs: 'hsr0' already exists in 'hsr' [ 504.040366][T10821] Cannot create hsr debugfs directory [ 504.054414][T10676] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 504.811276][T10676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.042643][T10676] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 505.057285][T10676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.140081][T10676] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 505.159181][T10676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.431724][T11093] overlayfs: failed to clone upperpath [ 513.511671][T10821] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 513.558575][T10821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.591349][T10821] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 513.652886][T10821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.717759][T10956] chnl_net:caif_netlink_parms(): no params data found [ 514.055590][T10821] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 514.744889][T11130] overlayfs: failed to clone lowerpath [ 515.047373][T11126] overlayfs: failed to clone lowerpath [ 515.067869][T10821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.079794][T10821] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 515.119632][T10821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.401486][T11134] overlayfs: failed to clone lowerpath [ 515.904230][ T1162] bridge_slave_1: left allmulticast mode [ 515.968486][ T1162] bridge_slave_1: left promiscuous mode [ 516.045024][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.108508][ T1162] bridge_slave_0: left allmulticast mode [ 516.132536][ T1162] bridge_slave_0: left promiscuous mode [ 516.192801][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.886148][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.920742][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.957741][ T1162] bond0 (unregistering): Released all slaves [ 518.017682][ T1162] hsr_slave_0: left promiscuous mode [ 518.029910][ T1162] hsr_slave_1: left promiscuous mode [ 518.040479][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.055648][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.068042][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 519.116107][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 520.090530][T10956] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.098376][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.105980][T10956] bridge_slave_0: entered allmulticast mode [ 520.114177][T10956] bridge_slave_0: entered promiscuous mode [ 520.123702][T10956] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.131068][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.138469][T10956] bridge_slave_1: entered allmulticast mode [ 520.147121][T10956] bridge_slave_1: entered promiscuous mode [ 520.239706][T10956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.279952][T10956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.433830][T10956] team0: Port device team_slave_0 added [ 520.461363][T10676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.518735][T10676] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.548112][T10956] team0: Port device team_slave_1 added [ 520.722927][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.730312][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.729345][T10956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.745573][T10956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.703550][T10956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.748604][T10676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.849920][T10676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.883342][T10956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.901124][T10956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.949012][T10956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.988245][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.995423][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.081463][T11236] netlink: 'syz.2.1384': attribute type 3 has an invalid length. [ 524.600528][ T5499] 8021q: adding VLAN 0 to HW filter on device eth9 [ 525.336452][T10956] hsr_slave_0: entered promiscuous mode [ 525.454268][T10956] hsr_slave_1: entered promiscuous mode [ 525.582102][T10956] debugfs: 'hsr0' already exists in 'hsr' [ 525.597117][T10956] Cannot create hsr debugfs directory [ 526.878058][T10821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.662652][T10676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.274143][T10821] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.230511][T10821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.372305][T10821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.413327][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.420603][ T7692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.472449][T11317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 531.478398][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.486739][ T7692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.499328][T11317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 531.510255][T11317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 531.526316][T11317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 531.534580][T11317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.486785][ T5499] 8021q: adding VLAN 0 to HW filter on device eth10 [ 535.737768][ T5155] Bluetooth: hci1: command tx timeout [ 538.240233][ T5155] Bluetooth: hci1: command tx timeout [ 539.300648][T10821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.293523][ T5155] Bluetooth: hci1: command tx timeout [ 541.427759][T11315] chnl_net:caif_netlink_parms(): no params data found [ 541.470571][T10956] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 541.515430][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.526240][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 541.544548][T10956] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.581132][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.718921][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 541.729681][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 541.739965][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.748945][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.925693][T11417] bridge2: port 1(veth3) entered blocking state [ 541.938788][T11417] bridge2: port 1(veth3) entered disabled state [ 541.960963][T11417] veth3: entered allmulticast mode [ 541.979292][T11417] veth3: entered promiscuous mode [ 542.010075][T10956] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 542.209400][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.238237][T11418] bridge2: port 2(veth0_to_bond) entered blocking state [ 542.253831][T11418] bridge2: port 2(veth0_to_bond) entered disabled state [ 542.273388][T11418] veth0_to_bond: entered allmulticast mode [ 542.468907][T11418] veth0_to_bond: entered promiscuous mode [ 542.483188][ T5850] Bluetooth: hci1: command tx timeout [ 542.491970][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.277209][T11422] bridge2: port 3(veth5) entered blocking state [ 543.283920][T11422] bridge2: port 3(veth5) entered disabled state [ 543.290632][T11422] veth5: entered allmulticast mode [ 543.300227][T11422] veth5: entered promiscuous mode [ 543.361453][T10956] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 543.372824][T10956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.402473][ T1162] bridge_slave_1: left allmulticast mode [ 544.414797][ T1162] bridge_slave_1: left promiscuous mode [ 544.426653][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.449379][ T1162] bridge_slave_0: left allmulticast mode [ 544.533159][ T5850] Bluetooth: hci5: command tx timeout [ 544.544982][ T1162] bridge_slave_0: left promiscuous mode [ 544.553691][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.614353][ T5850] Bluetooth: hci5: command tx timeout [ 547.180423][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.192033][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.202458][ T1162] bond0 (unregistering): Released all slaves [ 548.150272][T11315] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.161179][T11315] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.178295][T11315] bridge_slave_0: entered allmulticast mode [ 548.228166][T11315] bridge_slave_0: entered promiscuous mode [ 548.395267][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.402931][T11315] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.414400][T11315] bridge_slave_1: entered allmulticast mode [ 548.430655][T11315] bridge_slave_1: entered promiscuous mode [ 548.462166][T11469] overlayfs: failed to resolve './file0': -2 [ 548.680182][ T1162] hsr_slave_0: left promiscuous mode [ 548.694888][ T5850] Bluetooth: hci5: command tx timeout [ 548.733610][ T1162] hsr_slave_1: left promiscuous mode [ 548.863418][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.892710][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.773222][ T5850] Bluetooth: hci5: command tx timeout [ 552.376659][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 552.629449][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 552.736902][T11492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.984200][T11315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.011887][T11487] lo speed is unknown, defaulting to 1000 [ 554.018001][T11487] lo speed is unknown, defaulting to 1000 [ 554.030448][T11487] lo speed is unknown, defaulting to 1000 [ 554.038385][T11487] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 554.048572][T11315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.055425][T11487] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 554.078853][T11487] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 554.093539][T11487] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 554.111039][T11487] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 554.150246][T11487] lo speed is unknown, defaulting to 1000 [ 554.156656][T11315] team0: Port device team_slave_0 added [ 554.187023][T11487] lo speed is unknown, defaulting to 1000 [ 554.195958][T11487] lo speed is unknown, defaulting to 1000 [ 554.203610][T11487] lo speed is unknown, defaulting to 1000 [ 554.211321][T11487] lo speed is unknown, defaulting to 1000 [ 554.219394][T11487] lo speed is unknown, defaulting to 1000 [ 554.227322][T11487] lo speed is unknown, defaulting to 1000 [ 554.241667][T11487] lo speed is unknown, defaulting to 1000 [ 554.381441][T11315] team0: Port device team_slave_1 added [ 556.005786][T11512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1439'. [ 556.014927][T11512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1439'. [ 556.024032][T11512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1439'. [ 557.067452][T11315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.095199][T11315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.130826][T11315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.154398][T11317] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 557.165892][T11315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.174269][T11315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.200769][T11317] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 557.209659][T11315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.564623][T11317] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.583796][T11317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.591694][T11317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 559.535819][T11419] chnl_net:caif_netlink_parms(): no params data found [ 559.587810][T11315] hsr_slave_0: entered promiscuous mode [ 559.621429][T11315] hsr_slave_1: entered promiscuous mode [ 559.639486][T11315] debugfs: 'hsr0' already exists in 'hsr' [ 559.648910][T11315] Cannot create hsr debugfs directory [ 560.763212][T11317] Bluetooth: hci2: command tx timeout [ 562.217689][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.224200][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.828059][T11317] Bluetooth: hci2: command tx timeout [ 563.061465][T11515] lo speed is unknown, defaulting to 1000 [ 563.232887][T11419] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.254766][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.272384][T11419] bridge_slave_0: entered allmulticast mode [ 563.293910][T11419] bridge_slave_0: entered promiscuous mode [ 564.799009][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.833319][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.843971][T11419] bridge_slave_1: entered allmulticast mode [ 564.853213][T11317] Bluetooth: hci2: command tx timeout [ 564.921059][T11419] bridge_slave_1: entered promiscuous mode [ 566.101718][T11582] tipc: Started in network mode [ 566.120081][T11582] tipc: Node identity 4, cluster identity 4711 [ 566.137189][T11582] tipc: Node number set to 4 [ 566.312003][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.361695][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.250059][T11317] Bluetooth: hci2: command tx timeout [ 567.595494][T11419] team0: Port device team_slave_0 added [ 567.620374][T11419] team0: Port device team_slave_1 added [ 567.866814][T11515] chnl_net:caif_netlink_parms(): no params data found [ 567.941739][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.949553][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.983720][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.897394][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.529128][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.593200][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.740971][T11419] hsr_slave_0: entered promiscuous mode [ 569.751261][T11419] hsr_slave_1: entered promiscuous mode [ 569.758504][T11419] debugfs: 'hsr0' already exists in 'hsr' [ 569.764599][T11419] Cannot create hsr debugfs directory [ 573.430936][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.994854][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.007413][T11515] bridge_slave_0: entered allmulticast mode [ 574.034035][T11515] bridge_slave_0: entered promiscuous mode [ 574.101448][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.108713][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.116281][T11515] bridge_slave_1: entered allmulticast mode [ 574.124854][T11515] bridge_slave_1: entered promiscuous mode [ 575.115474][T11670] fuse: fd is not a fuse device [ 575.329968][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.348153][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.657587][T11315] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 576.400879][T11315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 576.428922][T11315] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 576.441430][T11315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.462383][T11315] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 577.479363][T11315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.487814][T11315] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 577.498199][T11315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.893323][T11690] siw: device registration error -23 [ 578.465304][T11515] team0: Port device team_slave_0 added [ 578.480943][T11515] team0: Port device team_slave_1 added [ 578.923311][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 579.659439][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.706237][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.794619][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.842989][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.873238][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.082406][T11713] overlayfs: failed to clone lowerpath [ 581.485946][ T30] audit: type=1804 audit(1776653684.690:43): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1494" name="bus" dev="ramfs" ino=27612 res=1 errno=0 [ 581.835179][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.169957][T11515] hsr_slave_0: entered promiscuous mode [ 585.195882][T11515] hsr_slave_1: entered promiscuous mode [ 585.216208][T11515] debugfs: 'hsr0' already exists in 'hsr' [ 585.359309][T11515] Cannot create hsr debugfs directory [ 586.275216][ T1162] bridge_slave_1: left allmulticast mode [ 586.281034][ T1162] bridge_slave_1: left promiscuous mode [ 586.287617][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.309635][ T1162] bridge_slave_0: left allmulticast mode [ 586.353961][ T1162] bridge_slave_0: left promiscuous mode [ 586.361212][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.874597][ T1162] bridge_slave_1: left allmulticast mode [ 586.880522][ T1162] bridge_slave_1: left promiscuous mode [ 586.886852][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.303878][ T1162] bridge_slave_0: left allmulticast mode [ 587.309661][ T1162] bridge_slave_0: left promiscuous mode [ 587.318034][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.612961][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.625871][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.636941][ T1162] bond0 (unregistering): Released all slaves [ 588.341964][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.355220][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.365984][ T1162] bond0 (unregistering): Released all slaves [ 588.914790][T11748] overlay: Unknown parameter '/' [ 589.741568][ T1162] hsr_slave_0: left promiscuous mode [ 589.747950][T11751] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 589.764394][ T1162] hsr_slave_1: left promiscuous mode [ 589.784231][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.789126][T11754] netlink: 'syz.3.1504': attribute type 21 has an invalid length. [ 589.801882][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.805963][T11751] overlayfs: failed to set xattr on upper [ 589.824896][T11751] overlayfs: ...falling back to redirect_dir=nofollow. [ 589.824969][ T1162] hsr_slave_0: left promiscuous mode [ 589.838207][ T1162] hsr_slave_1: left promiscuous mode [ 589.845668][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.856230][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.877984][T11751] overlayfs: ...falling back to index=off. [ 589.893789][T11751] overlayfs: ...falling back to uuid=null. [ 590.880448][T11765] tipc: Failed to remove unknown binding: 66,0,0/0:2594491025/2594491027 [ 590.899822][T11763] tipc: Failed to remove unknown binding: 66,0,0/0:3715736779/3715736780 [ 590.923311][T11763] tipc: Failed to remove unknown binding: 66,0,0/0:3715736779/3715736780 [ 591.305479][T11317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 591.525551][T11317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 591.549461][T11317] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 591.581869][T11317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 591.610360][T11317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 592.053514][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 592.075545][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 593.733318][ T5850] Bluetooth: hci6: command tx timeout [ 595.245356][T11798] netlink: 'syz.4.1513': attribute type 10 has an invalid length. [ 595.483626][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 595.506758][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 595.815750][ T5850] Bluetooth: hci6: command tx timeout [ 595.869467][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.879713][T11798] batadv0: entered promiscuous mode [ 595.885154][T11798] batadv0: entered allmulticast mode [ 595.891062][T11798] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 597.898196][ T5850] Bluetooth: hci6: command tx timeout [ 598.398933][T11823] netlink: 'syz.3.1520': attribute type 3 has an invalid length. [ 598.407963][T11823] netlink: 'syz.3.1520': attribute type 3 has an invalid length. [ 598.416268][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 598.553682][T11770] lo speed is unknown, defaulting to 1000 [ 599.973165][ T5850] Bluetooth: hci6: command tx timeout [ 604.046573][T11317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 604.060491][T11317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 604.072509][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 604.141657][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 604.149955][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.306531][T11862] Bluetooth: hci1: command tx timeout [ 607.107302][T11855] lo speed is unknown, defaulting to 1000 [ 607.117913][T11876] fuse: Bad value for 'fd' [ 607.515326][T11770] chnl_net:caif_netlink_parms(): no params data found [ 608.373238][T11862] Bluetooth: hci1: command tx timeout [ 608.472811][T11419] netdevsim netdevsim8: probe with driver netdevsim failed with error -12 [ 610.574580][T11317] Bluetooth: hci1: command tx timeout [ 611.053263][T11770] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.082405][T11770] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.102643][T11770] bridge_slave_0: entered allmulticast mode [ 611.118888][T11770] bridge_slave_0: entered promiscuous mode [ 611.176670][T11770] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.223430][T11770] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.578955][T11770] bridge_slave_1: entered allmulticast mode [ 611.591754][T11770] bridge_slave_1: entered promiscuous mode [ 612.618515][T11862] Bluetooth: hci1: command tx timeout [ 613.958201][T11770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.213902][T11770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.478604][T11770] team0: Port device team_slave_0 added [ 615.490991][T11855] chnl_net:caif_netlink_parms(): no params data found [ 615.514319][T11770] team0: Port device team_slave_1 added [ 615.658029][T11770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.667623][T11770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.694806][T11770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.751835][T11770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.790001][T11770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.061728][T11770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.726863][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.752082][T11855] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.772070][T11317] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 617.788433][T11317] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 617.800987][T11317] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 617.813383][T11855] bridge_slave_0: entered allmulticast mode [ 617.819847][T11317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 617.834845][T11317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 617.856091][T11855] bridge_slave_0: entered promiscuous mode [ 618.045005][T11855] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.078515][T11855] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.209846][T11855] bridge_slave_1: entered allmulticast mode [ 618.301967][T11979] overlayfs: failed to clone lowerpath [ 618.408294][T11980] overlayfs: failed to clone lowerpath [ 618.888214][T11855] bridge_slave_1: entered promiscuous mode [ 619.037252][T11770] hsr_slave_0: entered promiscuous mode [ 619.050094][T11770] hsr_slave_1: entered promiscuous mode [ 619.058011][T11770] debugfs: 'hsr0' already exists in 'hsr' [ 619.080639][T11770] Cannot create hsr debugfs directory [ 620.144456][T11317] Bluetooth: hci5: command tx timeout [ 620.679000][T11855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.136785][T11855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.336028][T11966] lo speed is unknown, defaulting to 1000 [ 622.453180][T11317] Bluetooth: hci5: command tx timeout [ 623.308283][T11855] team0: Port device team_slave_0 added [ 623.340318][T11855] team0: Port device team_slave_1 added [ 623.702105][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.708618][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.697130][T11317] Bluetooth: hci5: command tx timeout [ 624.734024][ T1162] bridge_slave_1: left allmulticast mode [ 624.739997][ T1162] bridge_slave_1: left promiscuous mode [ 624.746525][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.721203][ T1162] bridge_slave_0: left allmulticast mode [ 625.727022][ T1162] bridge_slave_0: left promiscuous mode [ 625.732825][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.167201][T11317] Bluetooth: hci5: command tx timeout [ 627.822104][T12066] overlayfs: failed to clone lowerpath [ 627.928544][T12067] overlayfs: failed to clone lowerpath [ 629.581190][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.220271][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.247167][ T1162] bond0 (unregistering): Released all slaves [ 630.499334][T11855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.542148][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.665695][T11855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.550355][T12095] syz.2.1576 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 631.592205][ T1162] hsr_slave_0: left promiscuous mode [ 631.611093][ T1162] hsr_slave_1: left promiscuous mode [ 631.629979][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.658929][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.969848][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 632.005721][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 633.114696][T11855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.121802][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.267403][T11855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.314466][ T7689] ------------[ cut here ]------------ [ 634.322337][ T7689] time_after(jiffies, timeout) [ 634.322357][ T7689] WARNING: io_uring/io_uring.c:2352 at io_ring_exit_work+0x4c1/0x980, CPU#1: kworker/u8:12/7689 [ 634.337683][ T7689] Modules linked in: [ 634.341906][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.353219][ T7689] Tainted: [L]=SOFTLOCKUP [ 634.357574][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 634.367737][ T7689] Workqueue: iou_exit io_ring_exit_work [ 634.373446][ T7689] RIP: 0010:io_ring_exit_work+0x4c1/0x980 [ 634.379216][ T7689] Code: c6 05 0a 0f f2 0e 01 48 c7 c7 c0 33 27 8c be 25 00 00 00 48 c7 c2 e0 2e 27 8c e8 da f6 76 00 e9 7e fe ff ff e8 c0 af 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 634.399078][ T7689] RSP: 0018:ffffc900052df940 EFLAGS: 00010293 [ 634.405213][ T7689] RAX: ffffffff812b0f00 RBX: 000000010000822a RCX: ffff88801db7bd80 [ 634.413260][ T7689] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 634.421286][ T7689] RBP: ffffc900052dfad0 R08: ffffc900052df8c7 R09: 1ffff92000a5bf18 [ 634.429368][ T7689] R10: dffffc0000000000 R11: fffff52000a5bf19 R12: dffffc0000000000 [ 634.437411][ T7689] R13: 0000000100008227 R14: 0000000000002000 R15: ffff888033608000 [ 634.445514][ T7689] FS: 0000000000000000(0000) GS:ffff88812531e000(0000) knlGS:0000000000000000 [ 634.454636][ T7689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.461251][ T7689] CR2: 0000001b3191eff8 CR3: 0000000077553000 CR4: 0000000000350ef0 [ 634.469479][ T7689] Call Trace: [ 634.472774][ T7689] [ 634.475772][ T7689] ? trace_hrtimer_start+0x82/0x200 [ 634.481393][ T7689] ? __pfx_io_ring_exit_work+0x10/0x10 [ 634.486993][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.492661][ T7689] ? process_scheduled_works+0xa70/0x1860 [ 634.498467][ T7689] ? process_scheduled_works+0xa70/0x1860 [ 634.504276][ T7689] process_scheduled_works+0xb5d/0x1860 [ 634.509858][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.515623][ T7689] ? __pfx_process_scheduled_works+0x10/0x10 [ 634.521650][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.527651][ T7689] ? assign_work+0x3d5/0x5e0 [ 634.532520][ T7689] worker_thread+0xa53/0xfc0 [ 634.537353][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.544398][ T7689] kthread+0x388/0x470 [ 634.548752][ T7689] ? __pfx_worker_thread+0x10/0x10 [ 634.553946][ T7689] ? __pfx_kthread+0x10/0x10 [ 634.558585][ T7689] ret_from_fork+0x514/0xb70 [ 634.563300][ T7689] ? __pfx_ret_from_fork+0x10/0x10 [ 634.568439][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.574139][ T7689] ? __switch_to+0xc79/0x1410 [ 634.578919][ T7689] ? __pfx_kthread+0x10/0x10 [ 634.583589][ T7689] ret_from_fork_asm+0x1a/0x30 [ 634.588647][ T7689] [ 634.591674][ T7689] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 634.598956][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.610102][ T7689] Tainted: [L]=SOFTLOCKUP [ 634.614415][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 634.624463][ T7689] Workqueue: iou_exit io_ring_exit_work [ 634.630031][ T7689] Call Trace: [ 634.633298][ T7689] [ 634.636219][ T7689] vpanic+0x56c/0xa60 [ 634.640300][ T7689] ? __pfx__printk+0x10/0x10 [ 634.644894][ T7689] ? __pfx_vpanic+0x10/0x10 [ 634.649402][ T7689] ? is_bpf_text_address+0x292/0x2b0 [ 634.654691][ T7689] ? is_bpf_text_address+0x26/0x2b0 [ 634.659907][ T7689] panic+0xc5/0xd0 [ 634.663631][ T7689] ? __pfx_panic+0x10/0x10 [ 634.668059][ T7689] ? ret_from_fork_asm+0x1a/0x30 [ 634.673020][ T7689] __warn+0x315/0x4c0 [ 634.677028][ T7689] ? io_ring_exit_work+0x4c1/0x980 [ 634.682162][ T7689] ? io_ring_exit_work+0x4c1/0x980 [ 634.687326][ T7689] __report_bug+0x29a/0x540 [ 634.691848][ T7689] ? __pfx___mutex_trylock_common+0x10/0x10 [ 634.697768][ T7689] ? io_ring_exit_work+0x4c1/0x980 [ 634.702929][ T7689] ? __pfx___report_bug+0x10/0x10 [ 634.708010][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.713669][ T7689] ? __mutex_lock+0x319/0x1550 [ 634.718440][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.724086][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.729726][ T7689] ? io_ring_exit_work+0x42f/0x980 [ 634.734865][ T7689] ? io_ring_exit_work+0x4c1/0x980 [ 634.740004][ T7689] report_bug+0x16a/0x220 [ 634.744369][ T7689] ? io_ring_exit_work+0x4c1/0x980 [ 634.749539][ T7689] ? io_ring_exit_work+0x4c3/0x980 [ 634.754685][ T7689] handle_bug+0x9c/0x200 [ 634.758931][ T7689] exc_invalid_op+0x1a/0x50 [ 634.763436][ T7689] asm_exc_invalid_op+0x1a/0x20 [ 634.768315][ T7689] RIP: 0010:io_ring_exit_work+0x4c1/0x980 [ 634.774176][ T7689] Code: c6 05 0a 0f f2 0e 01 48 c7 c7 c0 33 27 8c be 25 00 00 00 48 c7 c2 e0 2e 27 8c e8 da f6 76 00 e9 7e fe ff ff e8 c0 af 9a 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9a c7 84 24 b0 00 00 00 [ 634.793876][ T7689] RSP: 0018:ffffc900052df940 EFLAGS: 00010293 [ 634.799957][ T7689] RAX: ffffffff812b0f00 RBX: 000000010000822a RCX: ffff88801db7bd80 [ 634.807943][ T7689] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 634.815990][ T7689] RBP: ffffc900052dfad0 R08: ffffc900052df8c7 R09: 1ffff92000a5bf18 [ 634.823988][ T7689] R10: dffffc0000000000 R11: fffff52000a5bf19 R12: dffffc0000000000 [ 634.831978][ T7689] R13: 0000000100008227 R14: 0000000000002000 R15: ffff888033608000 [ 634.839958][ T7689] ? io_ring_exit_work+0x4c0/0x980 [ 634.845118][ T7689] ? trace_hrtimer_start+0x82/0x200 [ 634.850428][ T7689] ? __pfx_io_ring_exit_work+0x10/0x10 [ 634.855918][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.861564][ T7689] ? process_scheduled_works+0xa70/0x1860 [ 634.867292][ T7689] ? process_scheduled_works+0xa70/0x1860 [ 634.873021][ T7689] process_scheduled_works+0xb5d/0x1860 [ 634.878578][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.884241][ T7689] ? __pfx_process_scheduled_works+0x10/0x10 [ 634.890247][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.895893][ T7689] ? assign_work+0x3d5/0x5e0 [ 634.900523][ T7689] worker_thread+0xa53/0xfc0 [ 634.905322][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.910967][ T7689] kthread+0x388/0x470 [ 634.915038][ T7689] ? __pfx_worker_thread+0x10/0x10 [ 634.920155][ T7689] ? __pfx_kthread+0x10/0x10 [ 634.924772][ T7689] ret_from_fork+0x514/0xb70 [ 634.929389][ T7689] ? __pfx_ret_from_fork+0x10/0x10 [ 634.934539][ T7689] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.940258][ T7689] ? __switch_to+0xc79/0x1410 [ 634.944944][ T7689] ? __pfx_kthread+0x10/0x10 [ 634.949627][ T7689] ret_from_fork_asm+0x1a/0x30 [ 634.954413][ T7689] [ 634.957762][ T7689] Kernel Offset: disabled [ 634.962082][ T7689] Rebooting in 86400 seconds..