last executing test programs: 27.963298383s ago: executing program 2 (id=80): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x4003f, 0x0) close_range(r0, r0, 0x0) 27.376813751s ago: executing program 2 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x0) 26.284403567s ago: executing program 2 (id=86): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x200, 0x15b) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000480)='./file1\x00', 0x204200b, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRES32], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fremovexattr(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00657975726974792e29402fa0292e2e5df76678517016232f46fe002b6a00e8ac9c9cde533fd7871cd390a2394988097995467e2c2cd6e88db94476fcb4c10ac11adc4a7590a42c1b29dcf1b65084b42547a8002e25127274577ed73de17c09639eb6f9f8293bc94ed8cff25160d526ce30244f41e1491ed2b1c62fd1ac4816b779fa29695274d6e123e334bdf64043"]) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000002cd2b6710b645dc4d9e01562a95f187b88ab9b00a216a8c11883cbd19259bb6699367d62c4ac0b36015679117c8572fa5695ce43c0ab9fdeb06c6296c0b1cab71087ba67b37dc6da5d556605dfafdfe600000000000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf2507000000080002000600000008000400f0fc00000800040006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) 25.601740307s ago: executing program 2 (id=87): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x2000000000000002) 23.721421506s ago: executing program 2 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x4003f, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) close_range(r2, r2, 0x0) 22.700194221s ago: executing program 2 (id=93): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8800000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11.704099835s ago: executing program 1 (id=114): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x1, 0x2, 0x276, 0x3, 0x6}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1e1102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0xa, 0x800, 0x84) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x20000000) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed4040, &(0x7f0000001000)={[{@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@nolazytime}, {@noacl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noquota}, {@prjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@errors_remount}, {@dioread_nolock}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[], 0x1, 0x1f3, &(0x7f0000000680)="$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") 7.802862294s ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000100)=ANY=[], 0x9, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) 7.248667482s ago: executing program 1 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32], 0x68}}, 0x0) 6.74286008s ago: executing program 32 (id=93): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8800000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.646511911s ago: executing program 1 (id=126): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.576025087s ago: executing program 3 (id=127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e00003000000000000000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.967886266s ago: executing program 3 (id=129): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002700)=0x23, 0x1c) 3.980055391s ago: executing program 3 (id=131): socket(0x10, 0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="acdcfb23d8", 0x5}], 0x1) 3.979252741s ago: executing program 1 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb, 0x9, 0x5, '\x00', 0x381d5667}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 2.940526066s ago: executing program 1 (id=134): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xffffffffffffffff, @struct={0xfffffffd}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @usage=0x7fffffff, 0x4000, 0x80, [0xfffffffffffffffd, 0x8, 0x1000000000]}, {0xfffffffffffffffe, @usage=0x9, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x58a, @struct={0x2, 0xf136}, 0x3, 0xa, [0x10000000004, 0x1, 0x2, 0xfffffffffffffffc, 0x0, 0x1]}, {0x6, @struct={0x4, 0x8}, 0x0, 0x7, 0x800, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4a, @struct={0x0, 0x6}, 0xffffffff, 0x4, [0x80000000, 0x800004, 0x0, 0x3ff, 0x80]}}) mkdirat(r0, &(0x7f0000000340)='./bus\x00', 0x0) 2.819768858s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000100)=ANY=[], 0x9, 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) 2.642234531s ago: executing program 0 (id=136): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x200, 0x15b) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000480)='./file1\x00', 0x204200b, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRES32], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) fremovexattr(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00657975726974792e29402fa0292e2e5df76678517016232f46fe002b6a00e8ac9c9cde533fd7871cd390a2394988097995467e2c2cd6e88db94476fcb4c10ac11adc4a7590a42c1b29dcf1b65084b42547a8002e25127274577ed73de17c09639eb6f9f8293bc94ed8cff25160d526ce30244f41e1491ed2b1c62fd1ac4816b779fa29695274d6e123e334bdf64043"]) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000002cd2b6710b645dc4d9e01562a95f187b88ab9b00a216a8c11883cbd19259bb6699367d62c4ac0b36015679117c8572fa5695ce43c0ab9fdeb06c6296c0b1cab71087ba67b37dc6da5d556605dfafdfe600000000000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf2507000000080002000600000008000400f0fc00000800040006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) 2.348051246s ago: executing program 3 (id=137): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf", @ANYRESOCT, @ANYRESDEC=0x0], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x7142, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1.551645117s ago: executing program 0 (id=138): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e00003000000000000000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.275240881s ago: executing program 3 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x4003f, 0x0) waitid(0x1, 0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000500)) close_range(r2, r2, 0x0) 1.180053103s ago: executing program 0 (id=140): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2000000000000002) 940.022896ms ago: executing program 0 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32], 0x68}}, 0x0) 62.871469ms ago: executing program 3 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb, 0x9, 0x5, '\x00', 0x381d5667}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 0 (id=143): socket$inet6(0xa, 0xa, 0x400000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs(0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x402000, 0x2, 0x29}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 64.178277][ T5775] cgroup: Unknown subsys name 'net' [ 64.310722][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.721380][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.343965][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.352249][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.360602][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.368917][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.376882][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.385055][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.395390][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.403223][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.410955][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.420730][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.423790][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.436341][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.437549][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.443606][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.451803][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.467440][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.476416][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.484130][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.491473][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.502353][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.510499][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.514964][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.517860][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.532424][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.912958][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 67.983312][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 68.089887][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 68.115385][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.123034][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.131960][ T5787] bridge_slave_0: entered allmulticast mode [ 68.139344][ T5787] bridge_slave_0: entered promiscuous mode [ 68.176480][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.183810][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.191743][ T5787] bridge_slave_1: entered allmulticast mode [ 68.199281][ T5787] bridge_slave_1: entered promiscuous mode [ 68.266753][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.292542][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 68.312046][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.321482][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.329128][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.336505][ T5784] bridge_slave_0: entered allmulticast mode [ 68.343668][ T5784] bridge_slave_0: entered promiscuous mode [ 68.401312][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.409094][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.417049][ T5784] bridge_slave_1: entered allmulticast mode [ 68.423742][ T5784] bridge_slave_1: entered promiscuous mode [ 68.441048][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.448206][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.456168][ T5786] bridge_slave_0: entered allmulticast mode [ 68.462869][ T5786] bridge_slave_0: entered promiscuous mode [ 68.472942][ T5787] team0: Port device team_slave_0 added [ 68.481657][ T5787] team0: Port device team_slave_1 added [ 68.511887][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.519221][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.526476][ T5786] bridge_slave_1: entered allmulticast mode [ 68.533168][ T5786] bridge_slave_1: entered promiscuous mode [ 68.588350][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.599363][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.607180][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.633858][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.647585][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.659921][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.673993][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.692966][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.700044][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.726903][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.794082][ T5786] team0: Port device team_slave_0 added [ 68.804052][ T5786] team0: Port device team_slave_1 added [ 68.822495][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.830178][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.837632][ T5785] bridge_slave_0: entered allmulticast mode [ 68.845102][ T5785] bridge_slave_0: entered promiscuous mode [ 68.853814][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.861035][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.868608][ T5785] bridge_slave_1: entered allmulticast mode [ 68.875500][ T5785] bridge_slave_1: entered promiscuous mode [ 68.905505][ T5784] team0: Port device team_slave_0 added [ 68.950867][ T5784] team0: Port device team_slave_1 added [ 68.983579][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.995221][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.002184][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.028654][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.058025][ T5787] hsr_slave_0: entered promiscuous mode [ 69.065278][ T5787] hsr_slave_1: entered promiscuous mode [ 69.074894][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.086210][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.093301][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.120063][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.132026][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.139078][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.165530][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.205896][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.212855][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.239457][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.287064][ T5785] team0: Port device team_slave_0 added [ 69.328479][ T5785] team0: Port device team_slave_1 added [ 69.349306][ T5786] hsr_slave_0: entered promiscuous mode [ 69.356491][ T5786] hsr_slave_1: entered promiscuous mode [ 69.362745][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.370748][ T5786] Cannot create hsr debugfs directory [ 69.423480][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.430800][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.457290][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.474045][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.481145][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.507661][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.507831][ T5793] Bluetooth: hci1: command tx timeout [ 69.529094][ T5784] hsr_slave_0: entered promiscuous mode [ 69.536024][ T5784] hsr_slave_1: entered promiscuous mode [ 69.542234][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.550185][ T5784] Cannot create hsr debugfs directory [ 69.568127][ T5793] Bluetooth: hci0: command tx timeout [ 69.644467][ T5793] Bluetooth: hci2: command tx timeout [ 69.650224][ T5793] Bluetooth: hci3: command tx timeout [ 69.699984][ T5785] hsr_slave_0: entered promiscuous mode [ 69.707720][ T5785] hsr_slave_1: entered promiscuous mode [ 69.713866][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.721767][ T5785] Cannot create hsr debugfs directory [ 69.945748][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.959691][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.981694][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.008672][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.060515][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.074138][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.088284][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.098454][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.186258][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.198917][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.242128][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.252250][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.295389][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.319951][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.334474][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.358370][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.453313][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.489104][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.522953][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.530428][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.550033][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.557197][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.585050][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.623552][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.644849][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.651987][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.667375][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.690860][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.698036][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.746580][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.769939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.777230][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.800597][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.825372][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.832529][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.881401][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.931595][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.939286][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.988517][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.995978][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.130755][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.329896][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.361039][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.460390][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.482832][ T5787] veth0_vlan: entered promiscuous mode [ 71.508094][ T5787] veth1_vlan: entered promiscuous mode [ 71.538052][ T5786] veth0_vlan: entered promiscuous mode [ 71.575454][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.582312][ T5793] Bluetooth: hci1: command tx timeout [ 71.583579][ T5786] veth1_vlan: entered promiscuous mode [ 71.588513][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.621900][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.636199][ T5787] veth0_macvtap: entered promiscuous mode [ 71.654904][ T5793] Bluetooth: hci0: command tx timeout [ 71.673871][ T5787] veth1_macvtap: entered promiscuous mode [ 71.688327][ T5784] veth0_vlan: entered promiscuous mode [ 71.719574][ T5784] veth1_vlan: entered promiscuous mode [ 71.726271][ T5793] Bluetooth: hci2: command tx timeout [ 71.739409][ T5793] Bluetooth: hci3: command tx timeout [ 71.762469][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.789118][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.813497][ T5785] veth0_vlan: entered promiscuous mode [ 71.828463][ T5786] veth0_macvtap: entered promiscuous mode [ 71.848890][ T5786] veth1_macvtap: entered promiscuous mode [ 71.865242][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.879258][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.889657][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.900983][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.917783][ T5785] veth1_vlan: entered promiscuous mode [ 71.988194][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.999838][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.012940][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.026771][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.037849][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.051169][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.081113][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.092463][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.101872][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.115628][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.139103][ T5784] veth0_macvtap: entered promiscuous mode [ 72.173124][ T5784] veth1_macvtap: entered promiscuous mode [ 72.209220][ T5785] veth0_macvtap: entered promiscuous mode [ 72.236510][ T5785] veth1_macvtap: entered promiscuous mode [ 72.271243][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.280540][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.300897][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.312524][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.322558][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.333099][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.344646][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.379807][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.392685][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.403183][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.414564][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.427565][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.480018][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.487299][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.494022][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.510381][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.512234][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.527634][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.540609][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.547966][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.559646][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.560203][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.577795][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.588633][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.598933][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.611756][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.625894][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.662638][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.673517][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.685232][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.696116][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.706602][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.717611][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.738363][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.773745][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.805622][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.855591][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.875090][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907104][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.918368][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.001127][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.013976][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.053374][ T5880] syz.3.4[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.181423][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.205481][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.232622][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.247963][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.274899][ T5880] loop3: detected capacity change from 0 to 1024 [ 73.358401][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.396811][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.414636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.423411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.465230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.644606][ T5793] Bluetooth: hci1: command tx timeout [ 73.724579][ T5793] Bluetooth: hci0: command tx timeout [ 73.804718][ T5790] Bluetooth: hci2: command tx timeout [ 73.810500][ T5793] Bluetooth: hci3: command tx timeout [ 74.125768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.516417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.027436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 75.097577][ T5889] xt_l2tp: v2 doesn't support IP mode [ 75.725736][ T5793] Bluetooth: hci1: command tx timeout [ 75.805334][ T5793] Bluetooth: hci0: command tx timeout [ 75.885399][ T5790] Bluetooth: hci2: command tx timeout [ 75.893149][ T5793] Bluetooth: hci3: command tx timeout [ 76.153996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.315936][ T5880] hfsplus: bad catalog entry type [ 76.398117][ T5894] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.553247][ T5898] loop2: detected capacity change from 0 to 64 [ 76.580314][ T5898] ======================================================= [ 76.580314][ T5898] WARNING: The mand mount option has been deprecated and [ 76.580314][ T5898] and is ignored by this kernel. Remove the mand [ 76.580314][ T5898] option from the mount to silence this warning. [ 76.580314][ T5898] ======================================================= [ 76.714540][ T5898] hfs: invalid extent max_key_len 0 [ 76.737988][ T5898] hfs: unable to open extent tree [ 76.754428][ T5898] hfs: can't find a HFS filesystem on dev loop2 [ 77.689957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.792368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.132180][ T3497] hfsplus: b-tree write err: -5, ino 4 [ 78.134589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.265226][ T5908] loop2: detected capacity change from 0 to 8 [ 78.881207][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 78.899704][ T5908] squashfs image failed sanity check [ 79.027334][ T5918] loop3: detected capacity change from 0 to 256 [ 79.049670][ T5918] exfat: Unknown parameter 'zero_size_dir' [ 80.207918][ T27] audit: type=1800 audit(1752355833.733:2): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="bus" dev="overlay" ino=41 res=0 errno=0 [ 80.449239][ T5918] loop3: detected capacity change from 0 to 4096 [ 80.549177][ T5927] loop2: detected capacity change from 0 to 256 [ 80.550571][ T5908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.609737][ T5926] loop1: detected capacity change from 0 to 256 [ 80.634129][ T5927] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 80.739611][ T5929] loop0: detected capacity change from 0 to 164 [ 80.890169][ T5926] FAT-fs (loop1): Directory bread(block 64) failed [ 80.928705][ T5926] FAT-fs (loop1): Directory bread(block 65) failed [ 80.963591][ T5926] FAT-fs (loop1): Directory bread(block 66) failed [ 81.004286][ T5926] FAT-fs (loop1): Directory bread(block 67) failed [ 81.044609][ T5926] FAT-fs (loop1): Directory bread(block 68) failed [ 81.062243][ T5926] FAT-fs (loop1): Directory bread(block 69) failed [ 81.100087][ T5926] FAT-fs (loop1): Directory bread(block 70) failed [ 81.133688][ T5926] FAT-fs (loop1): Directory bread(block 71) failed [ 81.156784][ T5926] FAT-fs (loop1): Directory bread(block 72) failed [ 81.163414][ T5926] FAT-fs (loop1): Directory bread(block 73) failed [ 81.230536][ T5933] Zero length message leads to an empty skb [ 83.082942][ T1189] cfg80211: failed to load regulatory.db [ 84.498448][ T5955] random: crng reseeded on system resumption [ 84.661727][ T5956] bond0: option ad_select: unable to set because the bond device is up [ 84.680529][ T5956] netlink: 212 bytes leftover after parsing attributes in process `syz.1.21'. [ 84.690705][ T5956] netlink: set zone limit has 8 unknown bytes [ 86.214925][ T1189] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 86.296772][ T5959] loop1: detected capacity change from 0 to 2048 [ 86.326050][ T5959] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 86.825479][ T5959] NILFS (loop1): mounting unchecked fs [ 86.833581][ T1189] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 86.843016][ T1189] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 86.853584][ T1189] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 86.867760][ T1189] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 86.890061][ T5957] udevd[5957]: incorrect nilfs2 checksum on /dev/loop1 [ 86.897750][ T1189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 86.937290][ T5779] udevd[5779]: incorrect nilfs2 checksum on /dev/loop1 [ 86.944328][ T1189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 86.964334][ T1189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 86.987535][ T1189] usb 4-1: string descriptor 0 read error: -22 [ 87.003643][ T5779] udevd[5779]: incorrect nilfs2 checksum on /dev/loop1 [ 87.010997][ T1189] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 87.020579][ T1189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.102299][ T1189] usb 4-1: config 0 descriptor?? [ 87.142290][ T5959] NILFS (loop1): recovery complete [ 87.152872][ T1189] hub 4-1:0.0: bad descriptor, ignoring hub [ 87.166844][ T1189] hub: probe of 4-1:0.0 failed with error -5 [ 87.178738][ T5964] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.180770][ T1189] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 87.363977][ T1189] usb 4-1: USB disconnect, device number 2 [ 87.488578][ T27] audit: type=1800 audit(1752355841.783:3): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.24" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 87.522023][ T5966] loop3: detected capacity change from 0 to 4096 [ 87.663681][ T5972] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.607726][ T5981] cgroup: Bad value for 'name' [ 88.617505][ T5981] tipc: Started in network mode [ 88.622812][ T5981] tipc: Node identity ac1414aa, cluster identity 4711 [ 88.631492][ T5981] tipc: Enabled bearer , priority 10 [ 88.925727][ T5966] syz.3.25 (5966) used greatest stack depth: 19760 bytes left [ 89.763922][ T8] tipc: Node number set to 2886997162 [ 90.173477][ T5988] loop3: detected capacity change from 0 to 256 [ 90.308345][ T5988] FAT-fs (loop3): Directory bread(block 64) failed [ 90.414919][ T5988] FAT-fs (loop3): Directory bread(block 65) failed [ 90.656137][ T5988] FAT-fs (loop3): Directory bread(block 66) failed [ 90.782201][ T5988] FAT-fs (loop3): Directory bread(block 67) failed [ 90.845119][ T5988] FAT-fs (loop3): Directory bread(block 68) failed [ 90.851760][ T5988] FAT-fs (loop3): Directory bread(block 69) failed [ 90.866958][ T5988] FAT-fs (loop3): Directory bread(block 70) failed [ 90.873730][ T5988] FAT-fs (loop3): Directory bread(block 71) failed [ 90.880439][ T5988] FAT-fs (loop3): Directory bread(block 72) failed [ 90.887079][ T5988] FAT-fs (loop3): Directory bread(block 73) failed [ 91.649855][ T5997] random: crng reseeded on system resumption [ 92.722808][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 92.866453][ T6005] loop2: detected capacity change from 0 to 2048 [ 92.884838][ T5797] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 92.898862][ T6005] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 92.914482][ T6005] NILFS (loop2): mounting unchecked fs [ 92.955374][ T5791] udevd[5791]: incorrect nilfs2 checksum on /dev/loop2 [ 92.973156][ T6005] NILFS (loop2): recovery complete [ 92.997095][ T6007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.073942][ T27] audit: type=1800 audit(1752355847.383:4): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.35" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 93.110593][ T5797] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 93.137934][ T6006] warning: `syz.3.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.160198][ T5797] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 93.263182][ T5797] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 93.398986][ T5797] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 93.418220][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 93.431182][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 93.442771][ T5797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 94.755943][ T5797] usb 2-1: string descriptor 0 read error: -22 [ 94.784709][ T5797] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 94.799504][ T6011] 9pnet: Found fid 0 not clunked [ 94.804067][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.837984][ T5797] usb 2-1: config 0 descriptor?? [ 94.868416][ T5797] hub 2-1:0.0: bad descriptor, ignoring hub [ 94.892150][ T5797] hub: probe of 2-1:0.0 failed with error -5 [ 95.483926][ T5797] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 95.803974][ T6020] loop1: detected capacity change from 0 to 128 [ 95.812799][ T6020] befs: (loop1): No write support. Marking filesystem read-only [ 96.881221][ T5999] sched: RT throttling activated [ 96.914656][ T6020] befs: (loop1): invalid magic header [ 97.034113][ T5777] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.816288][ T1189] usb 2-1: USB disconnect, device number 2 [ 97.833910][ T6029] random: crng reseeded on system resumption [ 99.173875][ T6033] loop0: detected capacity change from 0 to 256 [ 99.267277][ T6033] FAT-fs (loop0): Directory bread(block 64) failed [ 99.273910][ T6033] FAT-fs (loop0): Directory bread(block 65) failed [ 99.357769][ T6033] FAT-fs (loop0): Directory bread(block 66) failed [ 99.386111][ T6033] FAT-fs (loop0): Directory bread(block 67) failed [ 99.408248][ T6033] FAT-fs (loop0): Directory bread(block 68) failed [ 99.429828][ T6033] FAT-fs (loop0): Directory bread(block 69) failed [ 99.457688][ T6033] FAT-fs (loop0): Directory bread(block 70) failed [ 99.634039][ T6033] FAT-fs (loop0): Directory bread(block 71) failed [ 99.647386][ T6033] FAT-fs (loop0): Directory bread(block 72) failed [ 99.655142][ T6033] FAT-fs (loop0): Directory bread(block 73) failed [ 100.848056][ T6048] bond0: option ad_select: unable to set because the bond device is up [ 100.865627][ T6048] netlink: 212 bytes leftover after parsing attributes in process `syz.2.46'. [ 100.874987][ T6048] netlink: set zone limit has 8 unknown bytes [ 101.737510][ T6053] loop2: detected capacity change from 0 to 256 [ 101.834551][ T6053] exfat: Unknown parameter 'zero_size_dir' [ 102.378609][ T6055] loop2: detected capacity change from 0 to 4096 [ 102.928281][ T6049] loop1: detected capacity change from 0 to 1024 [ 103.651037][ T6049] hfsplus: bad catalog entry type [ 103.723529][ T6057] xt_l2tp: v2 doesn't support IP mode [ 104.691581][ T6073] random: crng reseeded on system resumption [ 104.855618][ T6075] loop2: detected capacity change from 0 to 4096 [ 104.916585][ T6077] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.250106][ T6079] cgroup: Bad value for 'name' [ 105.265479][ T6079] tipc: Started in network mode [ 105.270507][ T6079] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.281457][ T6079] tipc: Enabled bearer , priority 10 [ 105.959557][ T1143] hfsplus: b-tree write err: -5, ino 4 [ 106.553595][ T5788] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 106.564459][ T5905] tipc: Node number set to 2886997162 [ 106.876973][ T5788] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 106.952908][ T5788] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 107.339017][ T5788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 107.359275][ T5788] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 107.386222][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 107.412196][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.484356][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 107.515639][ T5788] usb 1-1: string descriptor 0 read error: -22 [ 107.522162][ T5788] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 107.541050][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.570026][ T5788] usb 1-1: config 0 descriptor?? [ 107.587216][ T5788] hub 1-1:0.0: bad descriptor, ignoring hub [ 107.602833][ T6096] loop1: detected capacity change from 0 to 256 [ 107.609301][ T5788] hub: probe of 1-1:0.0 failed with error -5 [ 107.620813][ T6096] exfat: Unknown parameter 'zero_size_dir' [ 107.630014][ T5788] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 109.430181][ T6103] loop1: detected capacity change from 0 to 4096 [ 109.449380][ T6102] bond0: option ad_select: unable to set because the bond device is up [ 109.466789][ T6102] netlink: 212 bytes leftover after parsing attributes in process `syz.3.58'. [ 109.476097][ T6102] netlink: set zone limit has 8 unknown bytes [ 109.761828][ T5788] usb 1-1: USB disconnect, device number 2 [ 109.827088][ T5779] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.937002][ T6117] loop3: detected capacity change from 0 to 8 [ 111.067556][ T6117] squashfs image failed sanity check [ 111.082610][ T6121] random: crng reseeded on system resumption [ 112.317768][ T6126] loop3: detected capacity change from 0 to 256 [ 112.318550][ T6117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.305236][ T6126] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 115.139837][ T6154] random: crng reseeded on system resumption [ 115.675577][ T6157] loop1: detected capacity change from 0 to 2048 [ 115.696078][ T6157] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.710130][ T6157] NILFS (loop1): mounting unchecked fs [ 115.811897][ T6157] NILFS (loop1): recovery complete [ 115.997893][ T6162] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.837602][ T6166] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 116.908862][ T6166] veth0_vlan: left promiscuous mode [ 116.917250][ T6166] veth0_vlan: entered promiscuous mode [ 116.926807][ T6166] team0: Device veth0_vlan failed to register rx_handler [ 117.727011][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 118.583154][ T6183] loop3: detected capacity change from 0 to 512 [ 118.816645][ T6185] loop3: detected capacity change from 0 to 16 [ 118.848755][ T6185] erofs: (device loop3): mounted with root inode @ nid 36. [ 119.432172][ T6192] loop1: detected capacity change from 0 to 8 [ 119.496597][ T6192] squashfs image failed sanity check [ 119.533128][ T6194] random: crng reseeded on system resumption [ 120.282407][ T6193] loop3: detected capacity change from 0 to 2048 [ 120.385606][ T6193] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.414356][ T6193] NILFS (loop3): mounting unchecked fs [ 120.449034][ T6193] NILFS (loop3): recovery complete [ 120.462107][ T6199] loop1: detected capacity change from 0 to 256 [ 120.473560][ T6198] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.505165][ T6200] loop2: detected capacity change from 0 to 512 [ 120.512983][ T6192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.657115][ T6199] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 121.024866][ T6200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.104547][ T6200] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.154121][ T6200] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.93: corrupted inode contents [ 123.074885][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 123.106776][ T6200] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.93: mark_inode_dirty error [ 123.185472][ T6200] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.93: corrupted inode contents [ 123.279080][ T6200] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.93: mark_inode_dirty error [ 123.594142][ T6224] netlink: 'syz.0.100': attribute type 10 has an invalid length. [ 123.639263][ T6224] veth0_vlan: left promiscuous mode [ 123.647518][ T6224] veth0_vlan: entered promiscuous mode [ 123.655889][ T6224] team0: Device veth0_vlan failed to register rx_handler [ 123.773843][ T6227] random: crng reseeded on system resumption [ 124.798860][ T6235] loop0: detected capacity change from 0 to 512 [ 125.043716][ T6237] loop0: detected capacity change from 0 to 16 [ 126.174071][ T6237] erofs: (device loop0): mounted with root inode @ nid 36. [ 126.811796][ T6239] loop1: detected capacity change from 0 to 64 [ 126.822591][ T6239] hfs: unable to parse mount options [ 127.215718][ T6197] syz.2.93: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 127.598320][ T6197] CPU: 0 PID: 6197 Comm: syz.2.93 Not tainted 6.6.97-syzkaller #0 [ 127.606268][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.616346][ T6197] Call Trace: [ 127.619637][ T6197] [ 127.622596][ T6197] dump_stack_lvl+0x16c/0x230 [ 127.627316][ T6197] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 127.632976][ T6197] ? show_regs_print_info+0x20/0x20 [ 127.638199][ T6197] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 127.643873][ T6197] warn_alloc+0x210/0x300 [ 127.648221][ T6197] ? zone_watermark_ok_safe+0x230/0x230 [ 127.653761][ T6197] ? _raw_spin_unlock+0x28/0x40 [ 127.658630][ T6197] __vmalloc_node_range+0x662/0x1320 [ 127.663977][ T6197] ? free_vm_area+0x50/0x50 [ 127.668594][ T6197] ? _raw_spin_unlock+0x28/0x40 [ 127.673568][ T6197] ? __kasan_kmalloc+0x8f/0xa0 [ 127.678366][ T6197] __vmalloc_node_range+0x568/0x1320 [ 127.683691][ T6197] ? hash_netiface_create+0x361/0xff0 [ 127.689083][ T6197] ? __asan_memset+0x22/0x40 [ 127.693702][ T6197] ? free_vm_area+0x50/0x50 [ 127.698207][ T6197] ? kvmalloc_node+0x70/0x180 [ 127.702889][ T6197] ? rcu_is_watching+0x15/0xb0 [ 127.707656][ T6197] ? kvmalloc_node+0x70/0x180 [ 127.712338][ T6197] ? trace_kmalloc+0x1f/0xa0 [ 127.716922][ T6197] kvmalloc_node+0x13f/0x180 [ 127.721514][ T6197] ? hash_netiface_create+0x361/0xff0 [ 127.726886][ T6197] hash_netiface_create+0x361/0xff0 [ 127.732102][ T6197] ? __lock_acquire+0x7c80/0x7c80 [ 127.737147][ T6197] ? __nla_parse+0x40/0x50 [ 127.741581][ T6197] ? hash_netport6_gc+0x570/0x570 [ 127.746621][ T6197] ip_set_create+0xa87/0x18e0 [ 127.751307][ T6197] ? ip_set_create+0x4b2/0x18e0 [ 127.756176][ T6197] ? ip_set_protocol+0x5d0/0x5d0 [ 127.761125][ T6197] ? trace_contention_end+0x39/0xe0 [ 127.766343][ T6197] nfnetlink_rcv_msg+0xb49/0x1130 [ 127.771365][ T6197] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.777604][ T6197] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 127.782814][ T6197] ? nfnetlink_unbind+0x160/0x160 [ 127.787849][ T6197] ? __dev_queue_xmit+0x1a64/0x35a0 [ 127.793039][ T6197] ? __netlink_deliver_tap+0x5ab/0x830 [ 127.798491][ T6197] ? netlink_deliver_tap+0x19c/0x1b0 [ 127.803770][ T6197] ? netlink_unicast+0x72b/0x8c0 [ 127.808706][ T6197] ? netlink_sendmsg+0x8c1/0xbe0 [ 127.813635][ T6197] ? ____sys_sendmsg+0x5bf/0x950 [ 127.818561][ T6197] ? ___sys_sendmsg+0x220/0x290 [ 127.823416][ T6197] ? __se_sys_sendmsg+0x1a5/0x270 [ 127.828429][ T6197] ? do_syscall_64+0x55/0xb0 [ 127.833022][ T6197] netlink_rcv_skb+0x216/0x480 [ 127.837785][ T6197] ? nfnetlink_unbind+0x160/0x160 [ 127.842802][ T6197] ? netlink_ack+0x1110/0x1110 [ 127.847569][ T6197] ? apparmor_capable+0x137/0x1a0 [ 127.852587][ T6197] ? bpf_lsm_capable+0x9/0x10 [ 127.857256][ T6197] ? security_capable+0x89/0xb0 [ 127.862107][ T6197] nfnetlink_rcv+0x274/0x2180 [ 127.866788][ T6197] ? __local_bh_enable_ip+0x12e/0x1c0 [ 127.872152][ T6197] ? lockdep_hardirqs_on+0x98/0x150 [ 127.877354][ T6197] ? __local_bh_enable_ip+0x12e/0x1c0 [ 127.882722][ T6197] ? _local_bh_enable+0xa0/0xa0 [ 127.887579][ T6197] ? __dev_queue_xmit+0x245/0x35a0 [ 127.892691][ T6197] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 127.898244][ T6197] ? __dev_queue_xmit+0x245/0x35a0 [ 127.903380][ T6197] ? ref_tracker_free+0x634/0x7d0 [ 127.908410][ T6197] ? __copy_skb_header+0xa7/0x550 [ 127.913443][ T6197] ? refcount_inc+0x70/0x70 [ 127.918041][ T6197] ? __skb_clone+0x63/0x790 [ 127.922541][ T6197] ? __skb_clone+0x480/0x790 [ 127.927133][ T6197] ? __netlink_deliver_tap+0x7e8/0x830 [ 127.932588][ T6197] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.937870][ T6197] ? __lock_acquire+0x7c80/0x7c80 [ 127.942894][ T6197] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.948187][ T6197] netlink_unicast+0x750/0x8c0 [ 127.952954][ T6197] netlink_sendmsg+0x8c1/0xbe0 [ 127.957722][ T6197] ? netlink_getsockopt+0x580/0x580 [ 127.962916][ T6197] ? aa_sock_msg_perm+0x94/0x150 [ 127.967851][ T6197] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.973136][ T6197] ? security_socket_sendmsg+0x80/0xa0 [ 127.978611][ T6197] ? netlink_getsockopt+0x580/0x580 [ 127.983832][ T6197] ____sys_sendmsg+0x5bf/0x950 [ 127.988606][ T6197] ? __asan_memset+0x22/0x40 [ 127.993199][ T6197] ? __sys_sendmsg_sock+0x30/0x30 [ 127.998217][ T6197] ? __import_iovec+0x5f2/0x860 [ 128.003080][ T6197] ? import_iovec+0x73/0xa0 [ 128.007578][ T6197] ___sys_sendmsg+0x220/0x290 [ 128.012346][ T6197] ? __sys_sendmsg+0x270/0x270 [ 128.017135][ T6197] __se_sys_sendmsg+0x1a5/0x270 [ 128.021978][ T6197] ? __x64_sys_sendmsg+0x80/0x80 [ 128.026921][ T6197] ? lockdep_hardirqs_on+0x98/0x150 [ 128.032112][ T6197] do_syscall_64+0x55/0xb0 [ 128.036532][ T6197] ? clear_bhb_loop+0x40/0x90 [ 128.041224][ T6197] ? clear_bhb_loop+0x40/0x90 [ 128.045917][ T6197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.051825][ T6197] RIP: 0033:0x7ff4e7f8e929 [ 128.056254][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.075871][ T6197] RSP: 002b:00007ff4e8de2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.084284][ T6197] RAX: ffffffffffffffda RBX: 00007ff4e81b5fa0 RCX: 00007ff4e7f8e929 [ 128.092346][ T6197] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.100480][ T6197] RBP: 00007ff4e8010b39 R08: 0000000000000000 R09: 0000000000000000 [ 128.108535][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.116498][ T6197] R13: 0000000000000000 R14: 00007ff4e81b5fa0 R15: 00007ffc49de6f88 [ 128.124478][ T6197] [ 128.127503][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.211120][ T6197] Mem-Info: [ 128.251010][ T6197] active_anon:8571 inactive_anon:0 isolated_anon:0 [ 128.251010][ T6197] active_file:1394 inactive_file:39879 isolated_file:0 [ 128.251010][ T6197] unevictable:768 dirty:296 writeback:5 [ 128.251010][ T6197] slab_reclaimable:10140 slab_unreclaimable:94723 [ 128.251010][ T6197] mapped:27409 shmem:4315 pagetables:589 [ 128.251010][ T6197] sec_pagetables:0 bounce:0 [ 128.251010][ T6197] kernel_misc_reclaimable:0 [ 128.251010][ T6197] free:1328726 free_pcp:8907 free_cma:0 [ 128.451671][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 128.501838][ T6197] Node 0 active_anon:34084kB inactive_anon:0kB active_file:5576kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98136kB dirty:1184kB writeback:20kB shmem:15424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11416kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no [ 128.703523][ T6197] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 128.733796][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.805974][ T6260] random: crng reseeded on system resumption [ 128.878124][ T6197] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.092212][ T6197] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 129.155435][ T6197] Node 0 DMA32 free:1419184kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:22812kB inactive_anon:0kB active_file:5576kB inactive_file:157996kB unevictable:1536kB writepending:1192kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:9072kB local_pcp:2140kB free_cma:0kB [ 129.481005][ T6197] lowmem_reserve[]: 0 0 1 1 1 [ 129.514958][ T6197] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.602771][ T6197] lowmem_reserve[]: 0 0 0 0 0 [ 129.632292][ T6197] Node 1 Normal free:3900672kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17504kB local_pcp:7616kB free_cma:0kB [ 129.665115][ T6197] lowmem_reserve[]: 0 0 0 0 0 [ 129.669943][ T6197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.683064][ T6197] Node 0 DMA32: 386*4kB (UME) 263*8kB (UME) 188*16kB (ME) 148*32kB (UME) 103*64kB (UME) 67*128kB (ME) 21*256kB (M) 5*512kB (ME) 2*1024kB (M) 3*2048kB (ME) 336*4096kB (UM) = 1418944kB [ 129.707587][ T6197] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 129.721259][ T6197] Node 1 Normal: 204*4kB (UME) 68*8kB (UME) 33*16kB (UME) 41*32kB (UME) 14*64kB (UE) 8*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3900672kB [ 129.743521][ T6197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.821247][ T6270] random: crng reseeded on system resumption [ 129.831842][ T6271] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 130.593870][ T6197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.603501][ T6197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.613629][ T6197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.623133][ T6197] 42675 total pagecache pages [ 130.628209][ T6197] 0 pages in swap cache [ 130.632810][ T6197] Free swap = 124996kB [ 130.637250][ T6197] Total swap = 124996kB [ 130.641743][ T6197] 2097051 pages RAM [ 130.645654][ T6197] 0 pages HighMem/MovableOnly [ 130.650425][ T6197] 416139 pages reserved [ 130.659674][ T6197] 0 pages cma reserved [ 131.136937][ T6271] veth0_vlan: left promiscuous mode [ 131.186817][ T6271] veth0_vlan: entered promiscuous mode [ 131.207935][ T6271] team0: Device veth0_vlan failed to register rx_handler [ 131.587740][ T6281] loop1: detected capacity change from 0 to 512 [ 131.852914][ T6283] loop1: detected capacity change from 0 to 16 [ 132.992352][ T6283] erofs: (device loop1): mounted with root inode @ nid 36. [ 133.225771][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.241707][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.357419][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 136.439811][ T6305] loop3: detected capacity change from 0 to 8 [ 136.451210][ T6305] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 136.530874][ T5791] udevd[5791]: incorrect cramfs checksum on /dev/loop3 [ 136.672617][ T6308] cramfs: Error -5 while decompressing! [ 136.690309][ T6308] cramfs: ffffffff96fdb6c8(26)->ffff888058571000(4096) [ 136.714226][ T6308] cramfs: Error -3 while decompressing! [ 136.717164][ T5791] udevd[5791]: incorrect cramfs checksum on /dev/loop3 [ 136.729088][ T6308] cramfs: ffffffff96fdb6e2(26)->ffff88805af60000(4096) [ 136.736989][ T6308] cramfs: Error -3 while decompressing! [ 136.743579][ T6308] cramfs: ffffffff96fdb6fc(16)->ffff88805855f000(4096) [ 136.754220][ T6308] cramfs: Error -5 while decompressing! [ 136.764521][ T6308] cramfs: ffffffff96fdb6c8(26)->ffff888058571000(4096) [ 136.790947][ T27] audit: type=1800 audit(1752355891.083:5): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.125" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 137.198162][ T5791] udevd[5791]: incorrect cramfs checksum on /dev/loop3 [ 138.198955][ T6380] loop0: detected capacity change from 0 to 1024 [ 138.320870][ T6197] warn_alloc: 1 callbacks suppressed [ 138.320886][ T6197] syz.2.93: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 138.838185][ T6197] CPU: 1 PID: 6197 Comm: syz.2.93 Not tainted 6.6.97-syzkaller #0 [ 138.846050][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.856218][ T6197] Call Trace: [ 138.859511][ T6197] [ 138.862450][ T6197] dump_stack_lvl+0x16c/0x230 [ 138.867169][ T6197] ? show_regs_print_info+0x20/0x20 [ 138.872456][ T6197] ? load_image+0x3b0/0x3b0 [ 138.876995][ T6197] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 138.883440][ T6197] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 138.890068][ T6197] warn_alloc+0x210/0x300 [ 138.894433][ T6197] ? zone_watermark_ok_safe+0x230/0x230 [ 138.900003][ T6197] ? _raw_spin_unlock+0x28/0x40 [ 138.904884][ T6197] __vmalloc_node_range+0x662/0x1320 [ 138.910239][ T6197] ? free_vm_area+0x50/0x50 [ 138.914785][ T6197] ? _raw_spin_unlock+0x28/0x40 [ 138.917605][ T6380] hfsplus: b-tree write err: -5, ino 3 [ 138.919642][ T6197] ? __kmem_cache_free+0xba/0x1f0 [ 138.930431][ T6197] __vmalloc_node_range+0x568/0x1320 [ 138.935754][ T6197] ? hash_netiface_create+0x361/0xff0 [ 138.941165][ T6197] ? __asan_memset+0x22/0x40 [ 138.945817][ T6197] ? free_vm_area+0x50/0x50 [ 138.950352][ T6197] ? kvmalloc_node+0x70/0x180 [ 138.955056][ T6197] ? rcu_is_watching+0x15/0xb0 [ 138.959849][ T6197] ? kvmalloc_node+0x70/0x180 [ 138.964724][ T6197] ? trace_kmalloc+0x1f/0xa0 [ 138.969338][ T6197] kvmalloc_node+0x13f/0x180 [ 138.973958][ T6197] ? hash_netiface_create+0x361/0xff0 [ 138.979370][ T6197] hash_netiface_create+0x361/0xff0 [ 138.984944][ T6197] ? __lock_acquire+0x7c80/0x7c80 [ 138.989993][ T6197] ? __nla_parse+0x40/0x50 [ 138.994432][ T6197] ? hash_netport6_gc+0x570/0x570 [ 138.999480][ T6197] ip_set_create+0xa87/0x18e0 [ 139.004176][ T6197] ? ip_set_create+0x4b2/0x18e0 [ 139.009051][ T6197] ? ip_set_protocol+0x5d0/0x5d0 [ 139.014003][ T6197] ? trace_contention_end+0x39/0xe0 [ 139.019340][ T6197] nfnetlink_rcv_msg+0xb49/0x1130 [ 139.024390][ T6197] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.030486][ T6197] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 139.035761][ T6197] ? nfnetlink_unbind+0x160/0x160 [ 139.040839][ T6197] ? __dev_queue_xmit+0x1a64/0x35a0 [ 139.046070][ T6197] ? __netlink_deliver_tap+0x5ab/0x830 [ 139.051652][ T6197] ? netlink_deliver_tap+0x19c/0x1b0 [ 139.056992][ T6197] ? netlink_unicast+0x72b/0x8c0 [ 139.062394][ T6197] ? netlink_sendmsg+0x8c1/0xbe0 [ 139.067458][ T6197] ? ____sys_sendmsg+0x5bf/0x950 [ 139.072504][ T6197] ? ___sys_sendmsg+0x220/0x290 [ 139.077387][ T6197] ? __se_sys_sendmsg+0x1a5/0x270 [ 139.082438][ T6197] ? do_syscall_64+0x55/0xb0 [ 139.087078][ T6197] netlink_rcv_skb+0x216/0x480 [ 139.091878][ T6197] ? nfnetlink_unbind+0x160/0x160 [ 139.096940][ T6197] ? netlink_ack+0x1110/0x1110 [ 139.101740][ T6197] ? apparmor_capable+0x137/0x1a0 [ 139.106799][ T6197] ? bpf_lsm_capable+0x9/0x10 [ 139.111491][ T6197] ? security_capable+0x89/0xb0 [ 139.116387][ T6197] nfnetlink_rcv+0x274/0x2180 [ 139.121098][ T6197] ? __local_bh_enable_ip+0x12e/0x1c0 [ 139.126490][ T6197] ? lockdep_hardirqs_on+0x98/0x150 [ 139.131715][ T6197] ? __local_bh_enable_ip+0x12e/0x1c0 [ 139.137106][ T6197] ? _local_bh_enable+0xa0/0xa0 [ 139.141985][ T6197] ? __dev_queue_xmit+0x245/0x35a0 [ 139.147127][ T6197] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 139.152708][ T6197] ? __dev_queue_xmit+0x245/0x35a0 [ 139.157856][ T6197] ? ref_tracker_free+0x634/0x7d0 [ 139.162901][ T6197] ? __copy_skb_header+0xa7/0x550 [ 139.167944][ T6197] ? refcount_inc+0x70/0x70 [ 139.172523][ T6197] ? __skb_clone+0x63/0x790 [ 139.177055][ T6197] ? __skb_clone+0x480/0x790 [ 139.181674][ T6197] ? __netlink_deliver_tap+0x7e8/0x830 [ 139.185137][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.187312][ T6197] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.187345][ T6197] ? __lock_acquire+0x7c80/0x7c80 [ 139.197190][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.199692][ T6197] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.207188][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.211782][ T6197] netlink_unicast+0x750/0x8c0 [ 139.219556][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.223937][ T6197] netlink_sendmsg+0x8c1/0xbe0 [ 139.230222][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.235705][ T6197] ? netlink_getsockopt+0x580/0x580 [ 139.235741][ T6197] ? aa_sock_msg_perm+0x94/0x150 [ 139.235765][ T6197] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.235789][ T6197] ? security_socket_sendmsg+0x80/0xa0 [ 139.235810][ T6197] ? netlink_getsockopt+0x580/0x580 [ 139.235833][ T6197] ____sys_sendmsg+0x5bf/0x950 [ 139.235857][ T6197] ? __asan_memset+0x22/0x40 [ 139.235883][ T6197] ? __sys_sendmsg_sock+0x30/0x30 [ 139.235899][ T6197] ? __import_iovec+0x5f2/0x860 [ 139.235925][ T6197] ? import_iovec+0x73/0xa0 [ 139.235947][ T6197] ___sys_sendmsg+0x220/0x290 [ 139.235969][ T6197] ? __sys_sendmsg+0x270/0x270 [ 139.236024][ T6197] __se_sys_sendmsg+0x1a5/0x270 [ 139.242822][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.247758][ T6197] ? __x64_sys_sendmsg+0x80/0x80 [ 139.247795][ T6197] ? lockdep_hardirqs_on+0x98/0x150 [ 139.247817][ T6197] do_syscall_64+0x55/0xb0 [ 139.247838][ T6197] ? clear_bhb_loop+0x40/0x90 [ 139.247858][ T6197] ? clear_bhb_loop+0x40/0x90 [ 139.247881][ T6197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.247902][ T6197] RIP: 0033:0x7ff4e7f8e929 [ 139.247920][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.247941][ T6197] RSP: 002b:00007ff4e8de2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.247963][ T6197] RAX: ffffffffffffffda RBX: 00007ff4e81b5fa0 RCX: 00007ff4e7f8e929 [ 139.247976][ T6197] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 139.247988][ T6197] RBP: 00007ff4e8010b39 R08: 0000000000000000 R09: 0000000000000000 [ 139.405698][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.413695][ T6197] R13: 0000000000000000 R14: 00007ff4e81b5fa0 R15: 00007ffc49de6f88 [ 139.421706][ T6197] [ 139.424346][ T5788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.474763][ T6197] Mem-Info: [ 139.477975][ T6197] active_anon:6025 inactive_anon:0 isolated_anon:0 [ 139.477975][ T6197] active_file:1394 inactive_file:39953 isolated_file:0 [ 139.477975][ T6197] unevictable:768 dirty:101 writeback:0 [ 139.477975][ T6197] slab_reclaimable:10088 slab_unreclaimable:94805 [ 139.477975][ T6197] mapped:29637 shmem:1517 pagetables:575 [ 139.477975][ T6197] sec_pagetables:0 bounce:0 [ 139.477975][ T6197] kernel_misc_reclaimable:0 [ 139.477975][ T6197] free:1319884 free_pcp:9338 free_cma:0 [ 139.524809][ T6197] Node 0 active_anon:24100kB inactive_anon:0kB active_file:5576kB inactive_file:159612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118548kB dirty:404kB writeback:0kB shmem:4532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12104kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no [ 139.557776][ T6197] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 139.588858][ T6197] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.616574][ T6197] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 139.622652][ T6197] Node 0 DMA32 free:1363484kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:24056kB inactive_anon:0kB active_file:5576kB inactive_file:158292kB unevictable:1536kB writepending:400kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:19800kB local_pcp:19016kB free_cma:0kB [ 139.656952][ T5788] usb 4-1: Using ep0 maxpacket: 32 [ 139.662358][ T6197] lowmem_reserve[]: 0 0 1 1 1 [ 139.675985][ T5788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.695215][ T5788] usb 4-1: config 0 has no interface number 0 [ 139.704368][ T5788] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 139.713804][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.721986][ T5788] usb 4-1: Product: syz [ 139.726394][ T5788] usb 4-1: Manufacturer: syz [ 139.731066][ T5788] usb 4-1: SerialNumber: syz [ 139.756724][ T5788] usb 4-1: config 0 descriptor?? [ 139.769836][ T5788] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 139.780055][ T5788] usb 4-1: selecting invalid altsetting 1 [ 139.788288][ T6197] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.922556][ T6197] lowmem_reserve[]: 0 0 0 0 0 [ 139.964939][ T6197] Node 1 Normal free:3900672kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:7648kB free_cma:0kB [ 139.982007][ T5788] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 140.010019][ T5788] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.020839][ T5788] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 140.029655][ T5788] usb 4-1: media controller created [ 140.060710][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.125800][ T6197] lowmem_reserve[]: 0 0 0 0 0 [ 140.130601][ T6197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.143656][ T6197] Node 0 DMA32: 125*4kB (ME) 97*8kB (ME) 61*16kB (ME) 56*32kB (UME) 94*64kB (UME) 66*128kB (UME) 12*256kB (M) 5*512kB (ME) 2*1024kB (M) 3*2048kB (ME) 324*4096kB (M) = 1359436kB [ 140.167328][ T5788] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 140.194420][ T5788] zl10353_read_register: readreg error (reg=127, ret==-71) [ 140.203115][ T5788] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 140.234426][ T6197] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 140.268502][ T6197] Node 1 Normal: 204*4kB (UME) 68*8kB (UME) 33*16kB (UME) 41*32kB (UME) 14*64kB (UE) 8*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3900672kB [ 140.310994][ T6384] chnl_net:caif_netlink_parms(): no params data found [ 140.327677][ T6197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.350544][ T6197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.371244][ T5788] usb 4-1: USB disconnect, device number 3 [ 140.381354][ T6197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.391814][ T6197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.413591][ T6197] 42691 total pagecache pages [ 140.420228][ T6197] 0 pages in swap cache [ 140.456008][ T6197] Free swap = 124996kB [ 140.460325][ T6197] Total swap = 124996kB [ 140.490914][ T6197] 2097051 pages RAM [ 140.496060][ T6197] 0 pages HighMem/MovableOnly [ 140.500771][ T6197] 416139 pages reserved [ 140.507237][ T6197] 0 pages cma reserved [ 140.761606][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.801629][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.832821][ T6384] bridge_slave_0: entered allmulticast mode [ 140.892265][ T6384] bridge_slave_0: entered promiscuous mode [ 141.075092][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.202274][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.328054][ T5790] Bluetooth: hci4: command tx timeout [ 141.346971][ T6384] bridge_slave_1: entered allmulticast mode [ 141.411069][ T6384] bridge_slave_1: entered promiscuous mode [ 141.422937][ T6408] loop3: detected capacity change from 0 to 2048 [ 141.501676][ T6408] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.540577][ T6408] NILFS (loop3): mounting unchecked fs [ 141.611825][ T5791] udevd[5791]: incorrect nilfs2 checksum on /dev/loop3 [ 141.617373][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.628161][ T6408] NILFS (loop3): recovery complete [ 141.632932][ T6398] loop1: detected capacity change from 0 to 32768 [ 141.644114][ T6411] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.682152][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.712304][ T6398] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.134 (6398) [ 141.779122][ T6398] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 141.854436][ T6398] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.863741][ T6398] BTRFS info (device loop1): force zlib compression, level 3 [ 141.871286][ T6398] BTRFS info (device loop1): force clearing of disk cache [ 141.884042][ T6384] team0: Port device team_slave_0 added [ 141.894320][ T6398] BTRFS info (device loop1): setting nodatasum [ 141.902024][ T6398] BTRFS info (device loop1): allowing degraded mounts [ 141.915245][ T6384] team0: Port device team_slave_1 added [ 141.951539][ T6398] BTRFS info (device loop1): enabling disk space caching [ 141.976693][ T6398] BTRFS info (device loop1): disk space caching is enabled [ 142.426598][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.435774][ T6422] random: crng reseeded on system resumption [ 142.556506][ T6197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.577153][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.651142][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.745201][ T6398] BTRFS info (device loop1): auto enabling async discard [ 142.801622][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.822773][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.854844][ T6398] BTRFS info (device loop1): rebuilding free space tree [ 142.909235][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.927350][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 142.966350][ T6398] BTRFS info (device loop1): disabling free space tree [ 142.994443][ T6398] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.054587][ T6398] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 143.223292][ T6398] BTRFS info (device loop1): balance: start -susage=34359738372,drange=7..2048,limit=0..6 [ 143.496077][ T5790] Bluetooth: hci4: command tx timeout [ 143.630330][ T6384] hsr_slave_0: entered promiscuous mode [ 143.676798][ T6384] hsr_slave_1: entered promiscuous mode [ 143.745194][ T6445] ------------[ cut here ]------------ [ 143.750970][ T6445] BTRFS: Transaction aborted (error -28) [ 143.752614][ T6384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.757373][ T6398] BTRFS: error (device loop1: state A) in btrfs_create_pending_block_groups:2753: errno=-28 No space left [ 143.778149][ T6445] WARNING: CPU: 0 PID: 6445 at fs/btrfs/inode.c:6318 btrfs_create_new_inode+0x1a58/0x2210 [ 143.788262][ T6445] Modules linked in: [ 143.792179][ T6445] CPU: 0 PID: 6445 Comm: syz.1.134 Not tainted 6.6.97-syzkaller #0 [ 143.800152][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.810390][ T6445] RIP: 0010:btrfs_create_new_inode+0x1a58/0x2210 [ 143.816761][ T6445] Code: 0b fe 48 c7 c7 c0 0c ed 8a 89 de e8 62 58 d6 fd 0f 0b e9 ae fe ff ff e8 f6 f3 0b fe 48 c7 c7 c0 0c ed 8a 89 de e8 48 58 d6 fd <0f> 0b e9 3a fc ff ff e8 dc f3 0b fe 4c 8b 64 24 08 e9 dc e8 ff ff [ 143.836406][ T6445] RSP: 0018:ffffc90003377a40 EFLAGS: 00010246 [ 143.842586][ T6445] RAX: fb09eb4eb6072d00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 143.850709][ T6445] RDX: ffffc9000e55f000 RSI: 0000000000023350 RDI: 0000000000023351 [ 143.859038][ T6445] RBP: ffffc90003377c90 R08: ffffffff90da665f R09: 1ffffffff21b4ccb [ 143.867202][ T6445] R10: dffffc0000000000 R11: fffffbfff21b4ccc R12: ffff88804f7e8001 [ 143.874493][ T6384] Cannot create hsr debugfs directory [ 143.875236][ T6445] R13: 1ffff1100bc62034 R14: dffffc0000000000 R15: 0000000000000000 [ 143.888723][ T6445] FS: 00007fe8319ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 143.897766][ T6445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.905129][ T6445] CR2: 00007fecc545df98 CR3: 000000004f111000 CR4: 00000000003506f0 [ 143.913144][ T6445] Call Trace: [ 143.916564][ T6445] [ 143.919499][ T6445] ? btrfs_new_inode_args_destroy+0x170/0x170 [ 143.925605][ T6445] ? btrfs_record_root_in_trans+0x166/0x180 [ 143.931503][ T6445] ? start_transaction+0x3e3/0x11d0 [ 143.936789][ T6445] btrfs_create_common+0x177/0x240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 143.941911][ T6445] ? btrfs_tmpfile+0x3b0/0x3b0 [ 143.946842][ T6445] vfs_mkdir+0x296/0x440 [ 143.951089][ T6445] do_mkdirat+0x1d4/0x440 [ 143.955669][ T6445] ? vfs_mkdir+0x440/0x440 [ 143.960304][ T6445] __x64_sys_mkdirat+0x89/0xa0 [ 143.965967][ T6445] do_syscall_64+0x55/0xb0 [ 143.970428][ T6445] ? clear_bhb_loop+0x40/0x90 [ 143.975332][ T6445] ? clear_bhb_loop+0x40/0x90 [ 143.980056][ T6445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.986111][ T6445] RIP: 0033:0x7fe831b8e929 [ 143.990560][ T6445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.992524][ T6398] BTRFS info (device loop1: state EA): forced readonly [ 144.010302][ T6445] RSP: 002b:00007fe8319ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 144.010332][ T6445] RAX: ffffffffffffffda RBX: 00007fe831db6080 RCX: 00007fe831b8e929 [ 144.010347][ T6445] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 144.010361][ T6445] RBP: 00007fe831c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.010374][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.010387][ T6445] R13: 0000000000000001 R14: 00007fe831db6080 R15: 00007fff73b5a838 [ 144.010419][ T6445] [ 144.010428][ T6445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.010438][ T6445] CPU: 0 PID: 6445 Comm: syz.1.134 Not tainted 6.6.97-syzkaller #0 [ 144.010456][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.010466][ T6445] Call Trace: [ 144.010473][ T6445] [ 144.010480][ T6445] dump_stack_lvl+0x16c/0x230 [ 144.010510][ T6445] ? show_regs_print_info+0x20/0x20 [ 144.010534][ T6445] ? load_image+0x3b0/0x3b0 [ 144.010565][ T6445] panic+0x2c0/0x710 [ 144.010586][ T6445] ? bpf_jit_dump+0xd0/0xd0 [ 144.010619][ T6445] __warn+0x2e0/0x470 [ 144.010636][ T6445] ? btrfs_create_new_inode+0x1a58/0x2210 [ 144.010656][ T6445] ? btrfs_create_new_inode+0x1a58/0x2210 [ 144.010674][ T6445] report_bug+0x2be/0x4f0 [ 144.010696][ T6445] ? btrfs_create_new_inode+0x1a58/0x2210 [ 144.010713][ T6445] ? btrfs_create_new_inode+0x1a58/0x2210 [ 144.010728][ T6445] ? btrfs_create_new_inode+0x1a5a/0x2210 [ 144.010744][ T6445] handle_bug+0xcf/0x120 [ 144.010774][ T6445] exc_invalid_op+0x1a/0x50 [ 144.010796][ T6445] asm_exc_invalid_op+0x1a/0x20 [ 144.010816][ T6445] RIP: 0010:btrfs_create_new_inode+0x1a58/0x2210 [ 144.010836][ T6445] Code: 0b fe 48 c7 c7 c0 0c ed 8a 89 de e8 62 58 d6 fd 0f 0b e9 ae fe ff ff e8 f6 f3 0b fe 48 c7 c7 c0 0c ed 8a 89 de e8 48 58 d6 fd <0f> 0b e9 3a fc ff ff e8 dc f3 0b fe 4c 8b 64 24 08 e9 dc e8 ff ff [ 144.010851][ T6445] RSP: 0018:ffffc90003377a40 EFLAGS: 00010246 [ 144.010867][ T6445] RAX: fb09eb4eb6072d00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 144.010880][ T6445] RDX: ffffc9000e55f000 RSI: 0000000000023350 RDI: 0000000000023351 [ 144.010893][ T6445] RBP: ffffc90003377c90 R08: ffffffff90da665f R09: 1ffffffff21b4ccb [ 144.010906][ T6445] R10: dffffc0000000000 R11: fffffbfff21b4ccc R12: ffff88804f7e8001 [ 144.010920][ T6445] R13: 1ffff1100bc62034 R14: dffffc0000000000 R15: 0000000000000000 [ 144.010970][ T6445] ? btrfs_new_inode_args_destroy+0x170/0x170 [ 144.011004][ T6445] ? btrfs_record_root_in_trans+0x166/0x180 [ 144.011032][ T6445] ? start_transaction+0x3e3/0x11d0 [ 144.011072][ T6445] btrfs_create_common+0x177/0x240 [ 144.011096][ T6445] ? btrfs_tmpfile+0x3b0/0x3b0 [ 144.011139][ T6445] vfs_mkdir+0x296/0x440 [ 144.011166][ T6445] do_mkdirat+0x1d4/0x440 [ 144.011190][ T6445] ? vfs_mkdir+0x440/0x440 [ 144.011219][ T6445] __x64_sys_mkdirat+0x89/0xa0 [ 144.011242][ T6445] do_syscall_64+0x55/0xb0 [ 144.011263][ T6445] ? clear_bhb_loop+0x40/0x90 [ 144.011283][ T6445] ? clear_bhb_loop+0x40/0x90 [ 144.011305][ T6445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.011325][ T6445] RIP: 0033:0x7fe831b8e929 [ 144.011341][ T6445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.011355][ T6445] RSP: 002b:00007fe8319ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 144.011372][ T6445] RAX: ffffffffffffffda RBX: 00007fe831db6080 RCX: 00007fe831b8e929 [ 144.011386][ T6445] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 144.011398][ T6445] RBP: 00007fe831c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.011409][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.011420][ T6445] R13: 0000000000000001 R14: 00007fe831db6080 R15: 00007fff73b5a838 [ 144.011449][ T6445] [ 144.017869][ T6445] Kernel Offset: disabled