last executing test programs: 2m35.170978485s ago: executing program 2 (id=121): syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 2m33.431899346s ago: executing program 2 (id=126): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfee, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x2}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)={0x0, 0x8, 0xffffff8a}) fcntl$lock(r5, 0x26, &(0x7f0000000080)) 2m31.823806422s ago: executing program 2 (id=133): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0xe5d4, 0x4}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3bd6, &(0x7f0000000000)={0x0, 0xfffffffc, 0x2, 0xfffffff7, 0x10330}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x6, 0x0, [{}, {0x0, 0xffffffff}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff2000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = io_uring_setup(0x497f, &(0x7f00000001c0)={0x0, 0x7fffd, 0x0, 0x2, 0x21}) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000280)={0x9, 0xfffffffffffffff9, 0x8, 0xdf, 0x3, 0x40, 0x2, 0x4}, &(0x7f0000000340)={0x10, 0x7ff, 0x6, 0x0, 0xf8, 0x9, 0x4, 0x9}, &(0x7f00000003c0)={0x9, 0x0, 0x0, 0x9, 0x100000, 0xfffffffffffffffc, 0x5}, 0x0, &(0x7f00000004c0)={&(0x7f0000000440), 0x8}) socket$nl_generic(0x10, 0x3, 0x10) 2m31.038889305s ago: executing program 2 (id=135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "1ec4618f6538ecc26693065a2dcc26d92bb4f1030cd2c1011cdbf894a0839dc2"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) 2m30.903613578s ago: executing program 2 (id=137): socket$inet6_sctp(0xa, 0x1, 0x84) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) mq_open(&(0x7f0000000300)='\\}![@)B$\x00', 0x40, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m25.67549546s ago: executing program 2 (id=159): creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 2m10.4204381s ago: executing program 32 (id=159): creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 7.181414926s ago: executing program 1 (id=783): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.775840838s ago: executing program 1 (id=788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f76b44adbd6ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) 6.006387738s ago: executing program 1 (id=793): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "0700001d00", "4617a9f6040839230fb7fead776dd8dc", "eedb0872", "a44a883fca4400"}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.977975609s ago: executing program 0 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4004040) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 5.72911572s ago: executing program 4 (id=795): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "19893bbb"}, 0x0, 0x4, {0x0}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000480)=""/66, 0x42}], 0x1, 0x0, 0x0) 5.662493677s ago: executing program 5 (id=796): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_gact={0x48, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x1b, 0x6, "590d254c73f675f7ce5d19c73928d4dc553725c99fbfff"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lchown(&(0x7f0000000500)='./file0\x00', 0xee01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x6, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000000400)}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b2bfa061126aef3f5eabafa3997fcf0068bfdf4b6db2987a52846a38dac5a545e912", 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="bebc", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001100)}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000780)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x5e}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10000}}, @ip_retopts={{0xc}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_ttl={{0x10, 0x0, 0x2, 0x52}}], 0x6c}}], 0x4, 0x60cd894) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.658657433s ago: executing program 0 (id=797): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x0, 0x1e8, &(0x7f0000000700)="$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") syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="018dbd094b6df962cf476cc5825e232f3dae64b7191681302d63bf0c2cfbcf2681055c0bb8206f9315cb48be7a92d9ee770a496d90d5bd5e98e485c7c2b450469fd8c760baa28efcd37fb37b2ce085f5a83895a8d14a107de036b4dc047fb85eccf169b111e46b39e1650ce2d83ccef9aeab5c9db708212370b265dca5ac86559a5ad0179df2b42be7af4e148932768e68dd41c25ea1ca157c63905d18eca8c29a79ecfeaede11913d4f7baa91fad31360444983fa01ffd60448edcbad7b62baf99a979ab8c1456dd5384e9491d5dab185300b3310a9c2fc391d11"], 0x1, 0x9ebf, &(0x7f000000b4c0)="$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") open(&(0x7f0000000140)='./file0\x00', 0x1, 0x8) 5.478708571s ago: executing program 3 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5.187973055s ago: executing program 3 (id=799): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.187153876s ago: executing program 0 (id=800): socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f00000043c0)={0xc4, 0x0, 0x8}) 4.982784045s ago: executing program 0 (id=801): openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x48081, 0x1) r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x240300) ftruncate(r0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x2, 0x4, 0x524, 0xffffffff, 0x280, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x45c, 0x45c, 0x45c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x224, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}, {0x81}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa, 0xf7, 0x2}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}, [0xffffff00, 0xffffff00, 0xff, 0xa76985a6c987ee4d], 0x4e23, 0x4e22, 0x4e20, 0x4e24, 0xffffff62, 0x40, 0x2, 0xd29}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0x7f0000ff, 0xff000101, 0xffffff], [0xff000000, 0xffffff00, 0x0, 0xff000000], 'bond_slave_0\x00', 'netpci0\x00', {}, {}, 0x29, 0x4, 0x3}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x1, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x580) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff07000000aaaaaabb86dd60120008008b3afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a803003700"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfd, 0x2}}}}}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r7, &(0x7f0000000200)=[{&(0x7f00000002c0)="813f8119ff", 0x5}, {&(0x7f0000000080)="b8d1f5e2a35a5f3511772cc7bf55efe8238aad70b3485f3cdb72f2ef6025d347b76f055dc754474ca8173199f9e504d6783237ea80dd6d1a209ef9710456b988db1d6dc1cfb3794b337cae959ebe37ea06a8755dad9b71cd832350021de47b84836aed97cfbd59bfa42c206475a92d3b9e52dfbfffa132dbc4f2d638489b19a0523e8d236c768509b0", 0x89}, {&(0x7f0000000180)="f20526908b90f016f8114924b61f1aa0de262e497932e0dc56c415ce2332c6720be98967ad7a2df89af2ad6b31b1c275197b411de1db7b97aa07aa88946f7b2be2e55930684d394c23ac8ba27dbd7a2f908dd56ae32e0531c2", 0x59}, {&(0x7f0000000300)="fe8cb5e711081e388a7ab32bda2c8921a9a29bedc17f7c11370be4236990cda3d10c111e4c2dc8d92efe7fbcbf874cfa47232caceaee0187a0019d4a3a0ee5e916af360ace7d8459119ce7cd5b35fe6077783b93942a36a07fa2708cb0a10bc0a054ec9afffa85fe134101eef4100344c6734c995994521bb0709b7374de03a6c1bdec2db81c5fdc53e662334e55f91ee68435594fda3a68683aa158f84c81133ee3b9f8ec3bc2c4e6f8df61b236bcc029509fa8194d1eeda64ea71ad75d1de0c165a641eeb0fcc1a70087ea703045e7af0f", 0xd2}], 0x4, 0x401, 0xd) close_range(r7, r7, 0x0) syz_usb_disconnect(r6) 4.804858837s ago: executing program 3 (id=802): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 4.804600016s ago: executing program 1 (id=803): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x4, 0x0, 0x3ff, 0xa}, 'syz1\x00', 0x2001b}) ioctl$UI_DEV_CREATE(r0, 0x5501) getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) utime(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0xdfb8}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}}}, 0x24}}, 0x40044) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x7) 4.629574595s ago: executing program 4 (id=804): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f76b44adbd6ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) 4.505014467s ago: executing program 5 (id=805): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06055c8, &(0x7f0000000380)={0x0, 0x1, {0x53, 0x7, 0x400, {0x8, 0x2}, {0x8206, 0x1c00}, @cond=[{0x101, 0x3, 0x9, 0x45be, 0xf, 0x80e2}, {0xc3d8, 0x7, 0x1, 0x3, 0x9, 0x8}]}, {0x52, 0x5b29, 0x2, {0x5, 0x3}, {0x0, 0x9}, @cond=[{0x7, 0x2, 0xfc01, 0x3ff, 0x3}, {0x6, 0x7, 0x7d10, 0x6, 0x3, 0x5}]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x28, 0x3c, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040800) 4.436600891s ago: executing program 4 (id=806): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0xe5d4, 0x4}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x6, 0x0, [{}, {0x0, 0xffffffff}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff2000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = io_uring_setup(0x497f, &(0x7f00000001c0)={0x0, 0x7fffd, 0x0, 0x2, 0x21}) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000280)={0x9, 0xfffffffffffffff9, 0x8, 0xdf, 0x3, 0x40, 0x2, 0x4}, &(0x7f0000000340)={0x10, 0x7ff, 0x6, 0x0, 0xf8, 0x9, 0x4, 0x9}, &(0x7f00000003c0)={0x9, 0x0, 0x0, 0x9, 0x100000, 0xfffffffffffffffc, 0x5}, 0x0, &(0x7f00000004c0)={&(0x7f0000000440), 0x8}) socket$nl_generic(0x10, 0x3, 0x10) 3.970346534s ago: executing program 0 (id=807): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpid() r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05604, &(0x7f0000000cc0)={0x1}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x250) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[], 0x134, 0x40449d5}, 0x20000091) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 3.969775232s ago: executing program 1 (id=808): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r1 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x8880, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 'batadv_slave_0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc8, 0x4}}}, 0x7) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0}}], 0x1, 0x240080e4) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.324286771s ago: executing program 4 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 3.199443556s ago: executing program 4 (id=810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x240000, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)=0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x7, 0x9) write$P9_RWRITE(r9, &(0x7f0000000040)={0xb}, 0x11000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 3.138756425s ago: executing program 1 (id=811): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x805020, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000009640)='./file0\x00', 0x90, &(0x7f00000003c0), 0x1, 0x96cf, &(0x7f0000009680)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000040cb066829400001020301090224000301022005090400fe010301030009210700010122f8090905810340000180b56f6f43f295f1e0dfb03a3cab47d3b43f2bc862ad7b84ecdcf51332be7706c95cd0920b598a1093a11cd1e585743a7cce92180a472e59af5212746a81bdd43b10c6233df82d78150b7a"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x12) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 1.486684592s ago: executing program 3 (id=812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4050000160001000000000000000000e0000001000000000006000000000000fe88000000000000000000000000000100000100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x5e4}}, 0x0) 1.4148834s ago: executing program 5 (id=813): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "0700001d00", "4617a9f6040839230fb7fead776dd8dc", "eedb0872", "a44a883fca4400"}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.336833645s ago: executing program 3 (id=814): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "19893bbb"}, 0x0, 0x4, {0x0}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000480)=""/66, 0x42}], 0x1, 0x0, 0x0) 862.849255ms ago: executing program 0 (id=815): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r5 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x4829, 0x13500, 0x0, 0x65, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f0000001880)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000000140)=0x5, 0x0, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440)=r4, 0x1) 428.746323ms ago: executing program 5 (id=816): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f76b44adbd6ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) 327.915167ms ago: executing program 3 (id=817): openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x48081, 0x1) r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x240300) ftruncate(r0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x2, 0x4, 0x524, 0xffffffff, 0x280, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x45c, 0x45c, 0x45c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x224, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}, {0x81}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa, 0xf7, 0x2}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}, [0xffffff00, 0xffffff00, 0xff, 0xa76985a6c987ee4d], 0x4e23, 0x4e22, 0x4e20, 0x4e24, 0xffffff62, 0x40, 0x2, 0xd29}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0x7f0000ff, 0xff000101, 0xffffff], [0xff000000, 0xffffff00, 0x0, 0xff000000], 'bond_slave_0\x00', 'netpci0\x00', {}, {}, 0x29, 0x4, 0x3}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x1, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x580) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff07000000aaaaaabb86dd60120008008b3afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a803003700"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfd, 0x2}}}}}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r7, &(0x7f0000000200)=[{&(0x7f00000002c0)="813f8119ff", 0x5}, {&(0x7f0000000080)="b8d1f5e2a35a5f3511772cc7bf55efe8238aad70b3485f3cdb72f2ef6025d347b76f055dc754474ca8173199f9e504d6783237ea80dd6d1a209ef9710456b988db1d6dc1cfb3794b337cae959ebe37ea06a8755dad9b71cd832350021de47b84836aed97cfbd59bfa42c206475a92d3b9e52dfbfffa132dbc4f2d638489b19a0523e8d236c768509b0", 0x89}, {&(0x7f0000000180)="f20526908b90f016f8114924b61f1aa0de262e497932e0dc56c415ce2332c6720be98967ad7a2df89af2ad6b31b1c275197b411de1db7b97aa07aa88946f7b2be2e55930684d394c23ac8ba27dbd7a2f908dd56ae32e0531c2", 0x59}, {&(0x7f0000000300)="fe8cb5e711081e388a7ab32bda2c8921a9a29bedc17f7c11370be4236990cda3d10c111e4c2dc8d92efe7fbcbf874cfa47232caceaee0187a0019d4a3a0ee5e916af360ace7d8459119ce7cd5b35fe6077783b93942a36a07fa2708cb0a10bc0a054ec9afffa85fe134101eef4100344c6734c995994521bb0709b7374de03a6c1bdec2db81c5fdc53e662334e55f91ee68435594fda3a68683aa158f84c81133ee3b9f8ec3bc2c4e6f8df61b236bcc029509fa8194d1eeda64ea71ad75d1de0c165a641eeb0fcc1a70087ea703045e7af0f", 0xd2}], 0x4, 0x401, 0xd) close_range(r7, r7, 0x0) syz_usb_disconnect(r6) 299.587264ms ago: executing program 5 (id=818): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0]) 122.991871ms ago: executing program 5 (id=819): socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x19) syz_open_dev$usbfs(0x0, 0x10, 0xa702) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) open_tree(0xffffffffffffff9c, 0x0, 0x9801) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 4 (id=820): dup(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000000009040000010300000009210000000122050009058103009667f1f483faf300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.37' (ED25519) to the list of known hosts. [ 101.182435][ T5824] cgroup: Unknown subsys name 'net' [ 101.352467][ T5824] cgroup: Unknown subsys name 'cpuset' [ 101.363673][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.235728][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.328588][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.340851][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.359980][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.371476][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.381824][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.400113][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.417325][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.427448][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.440352][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.452076][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.468837][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.487458][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.489842][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.499315][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.513470][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.522113][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.527234][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.538001][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.543978][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.547925][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.555329][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.561376][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.569063][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.578530][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.586123][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.594835][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.602353][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.617059][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.641105][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.665685][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.186461][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 108.225673][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 108.263508][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 108.387900][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 108.454874][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 108.521896][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.533407][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.542130][ T5844] bridge_slave_0: entered allmulticast mode [ 108.551250][ T5844] bridge_slave_0: entered promiscuous mode [ 108.595053][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.602560][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.611132][ T5844] bridge_slave_1: entered allmulticast mode [ 108.619554][ T5844] bridge_slave_1: entered promiscuous mode [ 108.631861][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.639271][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.647342][ T5834] bridge_slave_0: entered allmulticast mode [ 108.655177][ T5834] bridge_slave_0: entered promiscuous mode [ 108.731178][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.738956][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.746301][ T5834] bridge_slave_1: entered allmulticast mode [ 108.754484][ T5834] bridge_slave_1: entered promiscuous mode [ 108.802247][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.816610][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.832933][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.841041][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.849537][ T5847] bridge_slave_0: entered allmulticast mode [ 108.857179][ T5847] bridge_slave_0: entered promiscuous mode [ 108.907876][ T875] cfg80211: failed to load regulatory.db [ 108.931753][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.939381][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.946686][ T5847] bridge_slave_1: entered allmulticast mode [ 108.954029][ T5847] bridge_slave_1: entered promiscuous mode [ 108.974695][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.987573][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.011815][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.019581][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.027444][ T5837] bridge_slave_0: entered allmulticast mode [ 109.035863][ T5837] bridge_slave_0: entered promiscuous mode [ 109.044150][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.053648][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.061895][ T5837] bridge_slave_1: entered allmulticast mode [ 109.069924][ T5837] bridge_slave_1: entered promiscuous mode [ 109.085201][ T5844] team0: Port device team_slave_0 added [ 109.096656][ T5844] team0: Port device team_slave_1 added [ 109.125741][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.133594][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.142342][ T5851] bridge_slave_0: entered allmulticast mode [ 109.150037][ T5851] bridge_slave_0: entered promiscuous mode [ 109.196957][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.207359][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.214866][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.241733][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.263537][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.271643][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.279547][ T5851] bridge_slave_1: entered allmulticast mode [ 109.286657][ T5851] bridge_slave_1: entered promiscuous mode [ 109.317857][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.329563][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.350388][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.357582][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.394298][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.415300][ T5834] team0: Port device team_slave_0 added [ 109.434168][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.455759][ T5847] team0: Port device team_slave_0 added [ 109.476622][ T5834] team0: Port device team_slave_1 added [ 109.495170][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.519770][ T5847] team0: Port device team_slave_1 added [ 109.547309][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.558435][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.585044][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.599457][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.619897][ T5838] Bluetooth: hci0: command tx timeout [ 109.637086][ T5844] hsr_slave_0: entered promiscuous mode [ 109.646999][ T5844] hsr_slave_1: entered promiscuous mode [ 109.655073][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.666845][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.694510][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.700843][ T5849] Bluetooth: hci1: command tx timeout [ 109.706137][ T5850] Bluetooth: hci3: command tx timeout [ 109.712913][ T5838] Bluetooth: hci2: command tx timeout [ 109.742770][ T5837] team0: Port device team_slave_0 added [ 109.752400][ T5837] team0: Port device team_slave_1 added [ 109.771897][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.779289][ T5838] Bluetooth: hci4: command tx timeout [ 109.784704][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.812031][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.870269][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.878195][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.905173][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.936867][ T5851] team0: Port device team_slave_0 added [ 109.963029][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.970956][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.998910][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.025618][ T5834] hsr_slave_0: entered promiscuous mode [ 110.033101][ T5834] hsr_slave_1: entered promiscuous mode [ 110.041175][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.049510][ T5834] Cannot create hsr debugfs directory [ 110.057798][ T5851] team0: Port device team_slave_1 added [ 110.074850][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.082698][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.110410][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.136745][ T5847] hsr_slave_0: entered promiscuous mode [ 110.144422][ T5847] hsr_slave_1: entered promiscuous mode [ 110.152361][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.161706][ T5847] Cannot create hsr debugfs directory [ 110.224860][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.233439][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.264970][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.325922][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.335901][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.368036][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.413922][ T5837] hsr_slave_0: entered promiscuous mode [ 110.429198][ T5837] hsr_slave_1: entered promiscuous mode [ 110.435651][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.445020][ T5837] Cannot create hsr debugfs directory [ 110.615502][ T5851] hsr_slave_0: entered promiscuous mode [ 110.626109][ T5851] hsr_slave_1: entered promiscuous mode [ 110.635350][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.645075][ T5851] Cannot create hsr debugfs directory [ 110.875996][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.912355][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.948966][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.975541][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.053515][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.086139][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.099556][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.143812][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.157080][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.172034][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.190095][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.230420][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.306301][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.323488][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.340205][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.359822][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.485849][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.500736][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.531444][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.544483][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.635789][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.700965][ T5838] Bluetooth: hci0: command tx timeout [ 111.755118][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.779980][ T5838] Bluetooth: hci2: command tx timeout [ 111.780012][ T5850] Bluetooth: hci3: command tx timeout [ 111.780055][ T5850] Bluetooth: hci1: command tx timeout [ 111.799496][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.821299][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.837242][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.845341][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.859157][ T5850] Bluetooth: hci4: command tx timeout [ 111.881808][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.889478][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.932939][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.944023][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.951798][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.964819][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.972755][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.053528][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.104748][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.134258][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.197487][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.206714][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.255428][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.293619][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.321828][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.331029][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.362490][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.373285][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.393064][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.401443][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.424243][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.432973][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.454300][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.462384][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.654400][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.916468][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.968416][ T5844] veth0_vlan: entered promiscuous mode [ 113.026548][ T5844] veth1_vlan: entered promiscuous mode [ 113.106333][ T5837] veth0_vlan: entered promiscuous mode [ 113.170407][ T5837] veth1_vlan: entered promiscuous mode [ 113.245044][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.281861][ T5844] veth0_macvtap: entered promiscuous mode [ 113.323058][ T5844] veth1_macvtap: entered promiscuous mode [ 113.420675][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.438128][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.453215][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.490462][ T5837] veth0_macvtap: entered promiscuous mode [ 113.526044][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.563537][ T5847] veth0_vlan: entered promiscuous mode [ 113.582593][ T5837] veth1_macvtap: entered promiscuous mode [ 113.606607][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.622227][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.634693][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.646273][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.732703][ T5847] veth1_vlan: entered promiscuous mode [ 113.780670][ T5850] Bluetooth: hci0: command tx timeout [ 113.789719][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.812960][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.827211][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.860569][ T5850] Bluetooth: hci1: command tx timeout [ 113.861877][ T5849] Bluetooth: hci2: command tx timeout [ 113.866628][ T5850] Bluetooth: hci3: command tx timeout [ 113.891557][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.905500][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.929478][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.950478][ T5850] Bluetooth: hci4: command tx timeout [ 114.041791][ T5847] veth0_macvtap: entered promiscuous mode [ 114.057730][ T5847] veth1_macvtap: entered promiscuous mode [ 114.114477][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.126074][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.145320][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.158809][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.176240][ T5834] veth0_vlan: entered promiscuous mode [ 114.198812][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.221586][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.245707][ T5834] veth1_vlan: entered promiscuous mode [ 114.285243][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.304309][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.317823][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.335465][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.348567][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.362618][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.375894][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.403204][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.428986][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.440019][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.453675][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.469714][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.546702][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.574782][ T5851] veth0_vlan: entered promiscuous mode [ 114.597602][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.618906][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.634024][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.653557][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.706030][ T5834] veth0_macvtap: entered promiscuous mode [ 114.735615][ T5851] veth1_vlan: entered promiscuous mode [ 114.800714][ T5834] veth1_macvtap: entered promiscuous mode [ 114.858818][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.881017][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.989474][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.006407][ T5851] veth0_macvtap: entered promiscuous mode [ 115.029948][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.039985][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.069484][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.089480][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.106506][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.129985][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.150617][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.176933][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.252480][ T5851] veth1_macvtap: entered promiscuous mode [ 115.270620][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.286362][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.300779][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.314558][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.326563][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.340661][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.361878][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.432561][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.444957][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.482372][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.525257][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.562596][ T5924] loop2: detected capacity change from 0 to 32768 [ 115.565420][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.589404][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.667948][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.710931][ T5924] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 115.716113][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.741345][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.790894][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.815136][ T5924] XFS (loop2): Ending clean mount [ 115.838473][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.859038][ T5850] Bluetooth: hci0: command tx timeout [ 115.890572][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.910474][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.923254][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.935762][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.944368][ T5850] Bluetooth: hci2: command tx timeout [ 115.950671][ T5849] Bluetooth: hci1: command tx timeout [ 115.957380][ T5849] Bluetooth: hci3: command tx timeout [ 116.019739][ T5849] Bluetooth: hci4: command tx timeout [ 116.041266][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.068576][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.080886][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.093745][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.107279][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.117971][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.129873][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.140693][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.152921][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.168452][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.178179][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.181258][ T5926] loop0: detected capacity change from 0 to 32768 [ 116.189159][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.204884][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.355741][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.374432][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.547240][ T5926] JBD2: Ignoring recovery information on journal [ 116.583969][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.618985][ T975] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.625227][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.694321][ T5926] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 116.808522][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 116.848838][ T975] usb 3-1: config 0 has no interfaces? [ 116.856993][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.861223][ T975] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.898020][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.908982][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.984418][ T5926] (syz.0.1,5926,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 116.988065][ T975] usb 3-1: config 0 descriptor?? [ 117.022537][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.049056][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.076101][ T5926] ocfs2: Unmounting device (7,0) on (node local) [ 117.207188][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.275284][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.088637][ T5949] input: syz1 as /devices/virtual/input/input5 [ 118.131897][ T875] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 118.143367][ T5944] loop1: detected capacity change from 0 to 32768 [ 118.205988][ T5944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6 (5944) [ 118.304605][ T5944] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.346594][ T5944] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 118.407860][ T5944] BTRFS info (device loop1): using free-space-tree [ 118.892145][ T5944] BTRFS info (device loop1): rebuilding free space tree [ 119.357688][ T5935] syz.2.3 (5935): drop_caches: 2 [ 119.372053][ T5948] loop4: detected capacity change from 0 to 32768 [ 119.564457][ T5939] usb 3-1: USB disconnect, device number 2 [ 119.584712][ T1100] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 119.666808][ T5844] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 119.900204][ T5847] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.261130][ T5973] loop0: detected capacity change from 0 to 32768 [ 120.327868][ T5973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8 (5973) [ 120.425093][ T5973] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.499674][ T5973] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 120.567474][ T5973] BTRFS info (device loop0): using free-space-tree [ 120.639757][ T5978] loop2: detected capacity change from 0 to 4096 [ 120.755885][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 120.815847][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 120.838882][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 121.337495][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 121.639405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.793419][ T6000] loop3: detected capacity change from 0 to 8 [ 121.928579][ T29] audit: type=1800 audit(1736588574.688:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 122.009067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.062331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.072078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.082241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.098623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.651618][ T5973] BTRFS error (device loop0): open_ctree failed: -4 [ 122.963204][ T6023] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.036965][ T6024] loop2: detected capacity change from 0 to 512 [ 123.079264][ T2944] Bluetooth: hci5: Frame reassembly failed (-84) [ 123.109412][ T6024] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.250269][ T6024] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 123.381262][ T6034] loop0: detected capacity change from 0 to 512 [ 123.888709][ T6024] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 123.905836][ T6024] System zones: 0-2, 18-18, 34-34 [ 123.966182][ T6024] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 123.987968][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.002883][ T6034] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.072696][ T6024] EXT4-fs (loop2): 1 truncate cleaned up [ 124.405068][ T6047] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.17: corrupted inode contents [ 124.446564][ T6047] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.17: mark_inode_dirty error [ 124.463452][ T6047] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.17: corrupted inode contents [ 124.484230][ T6047] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.17: mark_inode_dirty error [ 124.730541][ T6024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.988240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.232921][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 125.241169][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 125.797295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.850956][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.104976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.408842][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.498699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.811148][ T6058] syz.2.21 uses obsolete (PF_INET,SOCK_PACKET) [ 126.926103][ T29] audit: type=1326 audit(1736588579.818:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.003567][ T29] audit: type=1326 audit(1736588579.838:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.167584][ T29] audit: type=1326 audit(1736588579.878:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.292108][ T29] audit: type=1326 audit(1736588579.878:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.326606][ T29] audit: type=1326 audit(1736588579.878:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.359096][ T29] audit: type=1326 audit(1736588579.878:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.388583][ T29] audit: type=1326 audit(1736588579.878:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.416175][ T29] audit: type=1326 audit(1736588579.878:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb087b85d29 code=0x7ffc0000 [ 127.447173][ T29] audit: type=1326 audit(1736588579.898:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb087b87c47 code=0x7ffc0000 [ 128.030331][ T29] audit: type=1326 audit(1736588579.898:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb087b87bbc code=0x7ffc0000 [ 128.298789][ T29] audit: type=1326 audit(1736588579.898:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb087b87af4 code=0x7ffc0000 [ 130.650592][ T6088] netlink: 288 bytes leftover after parsing attributes in process `syz.2.26'. [ 131.487482][ T6100] loop1: detected capacity change from 0 to 512 [ 132.674238][ T6101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 132.683190][ T6101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.777653][ T6100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.889736][ T6100] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.172438][ T6101] vhci_hcd vhci_hcd.0: Device attached [ 134.200686][ T6128] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.30: corrupted inode contents [ 134.235022][ T5910] vhci_hcd: vhci_device speed not set [ 134.384893][ T6128] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.30: mark_inode_dirty error [ 134.405339][ T6128] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.30: corrupted inode contents [ 134.421930][ T6115] vhci_hcd: connection closed [ 134.441426][ T5910] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 134.458664][ T6128] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.30: mark_inode_dirty error [ 134.472373][ T2933] vhci_hcd: stop threads [ 134.494256][ T2933] vhci_hcd: release socket [ 134.514124][ T2933] vhci_hcd: disconnect device [ 134.782745][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.200425][ T6157] netlink: 288 bytes leftover after parsing attributes in process `syz.3.38'. [ 136.998478][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.279120][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 137.344650][ T10] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 137.380463][ T10] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 137.517170][ T10] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 137.595115][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.655870][ T6165] loop3: detected capacity change from 0 to 512 [ 137.714113][ T10] usb 2-1: Product: syz [ 137.737312][ T6165] EXT4-fs: Mount option(s) incompatible with ext2 [ 137.748068][ T10] usb 2-1: Manufacturer: syz [ 137.780717][ T10] usb 2-1: SerialNumber: syz [ 137.960797][ T10] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 138.124039][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 138.411246][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.467601][ T10] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 138.536029][ T10] usb 2-1: media controller created [ 139.423094][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.572022][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 139.579661][ T10] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 139.606725][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 139.626369][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.626929][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 139.657781][ T6177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 139.658560][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.698661][ T5910] vhci_hcd: vhci_device speed not set [ 139.763889][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 139.857472][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 140.296922][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 140.308889][ T5939] dvb-usb: error while querying for an remote control event. [ 140.329829][ T10] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 140.459118][ T10] usb 2-1: USB disconnect, device number 2 [ 140.558050][ T6181] qnx6: unable to read the first superblock [ 140.684782][ T10] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 141.359669][ T6183] loop2: detected capacity change from 0 to 32768 [ 141.414667][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 141.414689][ T29] audit: type=1326 audit(1736588594.318:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd68ab85d29 code=0x0 [ 141.460355][ T6183] JBD2: Ignoring recovery information on journal [ 141.562861][ T6204] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.627766][ T6183] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 141.658453][ T29] audit: type=1326 audit(1736588594.388:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.678783][ T6208] loop3: detected capacity change from 0 to 512 [ 141.697120][ T29] audit: type=1326 audit(1736588594.388:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.726748][ T29] audit: type=1326 audit(1736588594.408:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.755765][ T29] audit: type=1326 audit(1736588594.408:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.786630][ T29] audit: type=1326 audit(1736588594.408:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.815998][ T29] audit: type=1326 audit(1736588594.418:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.847548][ T29] audit: type=1326 audit(1736588594.418:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.875270][ T29] audit: type=1326 audit(1736588594.418:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 141.918549][ T6208] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.948860][ T6208] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 141.962681][ T29] audit: type=1326 audit(1736588594.418:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd68ab85d29 code=0x7ffc0000 [ 142.032459][ T6208] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 142.050281][ T5844] (syz-executor,5844,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 142.055619][ T6208] System zones: 0-2, 18-18, 34-34 [ 142.130352][ T5844] ocfs2: Unmounting device (7,2) on (node local) [ 142.149428][ T6208] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 142.248705][ T6208] EXT4-fs (loop3): 1 truncate cleaned up [ 142.316668][ T6208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.404322][ T6212] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.500209][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 142.535231][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 142.558511][ T6212] netlink: 52 bytes leftover after parsing attributes in process `syz.0.51'. [ 142.583064][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.957675][ T6222] 9pnet_virtio: no channels available for device syz [ 143.036602][ T6220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.50'. [ 143.217913][ T6205] loop1: detected capacity change from 0 to 32768 [ 143.226792][ T6205] ======================================================= [ 143.226792][ T6205] WARNING: The mand mount option has been deprecated and [ 143.226792][ T6205] and is ignored by this kernel. Remove the mand [ 143.226792][ T6205] option from the mount to silence this warning. [ 143.226792][ T6205] ======================================================= [ 144.378087][ T6237] loop3: detected capacity change from 0 to 512 [ 144.656050][ T6237] EXT4-fs: Mount option(s) incompatible with ext2 [ 145.099179][ T6205] JBD2: Ignoring recovery information on journal [ 145.256003][ T6205] JBD2: journal reset failed [ 145.256024][ T6205] (syz.1.48,6205,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 145.256051][ T6205] (syz.1.48,6205,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 145.962148][ T6246] batman_adv: batadv0: Adding interface: ipvlan2 [ 145.969393][ T6246] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.996782][ T6246] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 146.095874][ T6246] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.890244][ T6260] netlink: 288 bytes leftover after parsing attributes in process `syz.1.60'. [ 150.038039][ T6266] loop3: detected capacity change from 0 to 512 [ 150.131643][ T6266] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.181177][ T6266] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 150.252824][ T6266] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 150.333331][ T6266] System zones: 0-2, 18-18, 34-34 [ 150.361687][ T6266] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 150.477215][ T6266] EXT4-fs (loop3): 1 truncate cleaned up [ 150.736361][ T6266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.955331][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.877925][ T6283] loop1: detected capacity change from 0 to 32768 [ 154.122200][ T6283] JBD2: Ignoring recovery information on journal [ 154.316460][ T6283] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.489045][ T6310] loop0: detected capacity change from 0 to 512 [ 154.900332][ T6313] netlink: 288 bytes leftover after parsing attributes in process `syz.4.75'. [ 155.612708][ T6310] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.675790][ T6318] Zero length message leads to an empty skb [ 155.751702][ T6322] netlink: 'syz.3.73': attribute type 2 has an invalid length. [ 156.339252][ T5847] ocfs2: Unmounting device (7,1) on (node local) [ 160.866860][ T6361] process 'syz.3.83' launched './file0' with NULL argv: empty string added [ 161.199549][ T6371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.88'. [ 162.439354][ T6388] /dev/nbd0: Can't open blockdev [ 162.656385][ T6392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.96'. [ 162.683909][ T6367] loop4: detected capacity change from 0 to 32768 [ 162.742073][ T6367] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 162.761274][ T6367] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 162.921904][ T6367] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 163.194705][ T6367] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 163.459893][ T6390] loop2: detected capacity change from 0 to 32768 [ 163.477453][ T6390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.95 (6390) [ 163.518719][ T6404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.99'. [ 163.583414][ T6390] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.601555][ T6390] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 163.611210][ T6390] BTRFS info (device loop2): using free-space-tree [ 163.789543][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 163.856485][ T6419] tipc: Started in network mode [ 163.886935][ T6419] tipc: Node identity 7, cluster identity 5 [ 163.914291][ T6419] tipc: Node number set to 7 [ 163.978044][ T5844] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.437652][ T6426] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.102'. [ 164.462885][ T6426] netlink: zone id is out of range [ 164.613154][ T6426] netlink: zone id is out of range [ 166.459749][ T6443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 166.466586][ T6443] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 166.478884][ T6443] vhci_hcd vhci_hcd.0: Device attached [ 166.652010][ T6445] [U]  [ 166.770113][ T5835] vhci_hcd: vhci_device speed not set [ 166.848434][ T5835] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 166.983146][ T6447] vhci_hcd: connection reset by peer [ 166.989557][ T72] vhci_hcd: stop threads [ 167.001658][ T72] vhci_hcd: release socket [ 167.016266][ T72] vhci_hcd: disconnect device [ 168.477410][ T6457] loop2: detected capacity change from 0 to 32768 [ 168.491207][ T6457] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.111 (6457) [ 168.822052][ T6453] loop4: detected capacity change from 0 to 32768 [ 168.886887][ T6457] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.904697][ T6457] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 168.916694][ T6457] BTRFS info (device loop2): using free-space-tree [ 169.048425][ T6453] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 169.328036][ T6453] XFS (loop4): Ending clean mount [ 169.674519][ T5844] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.788735][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.108726][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 170.253809][ T6453] syz.4.110 (6453): drop_caches: 2 [ 170.317830][ T6471] loop1: detected capacity change from 0 to 32768 [ 170.365116][ T5910] usb 5-1: config 0 has no interfaces? [ 170.371406][ T5910] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.380590][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.391019][ T5910] usb 5-1: config 0 descriptor?? [ 170.505287][ T6471] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.607482][ T5910] usb 5-1: USB disconnect, device number 2 [ 170.852161][ T5851] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 170.878731][ T6503] block nbd2: Device being setup by another task [ 170.912514][ T6471] XFS (loop1): Ending clean mount [ 170.958814][ T6503] block nbd2: Device being setup by another task [ 170.965288][ T6471] XFS (loop1): Quotacheck needed: Please wait. [ 171.042391][ T5849] block nbd2: Receive control failed (result -32) [ 171.053740][ T6504] block nbd2: shutting down sockets [ 171.131247][ T6471] XFS (loop1): Quotacheck: Done. [ 171.443039][ T5847] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.678526][ T5835] vhci_hcd: vhci_device speed not set [ 173.201179][ T6535] program syz.2.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.285391][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 173.299061][ T875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 173.508402][ T875] usb 5-1: Using ep0 maxpacket: 8 [ 173.526172][ T875] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 173.534766][ T875] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.546942][ T875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.557079][ T875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.567778][ T875] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.582343][ T875] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.592032][ T875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.449090][ T875] usb 5-1: usb_control_msg returned -32 [ 174.454854][ T875] usbtmc 5-1:16.0: can't read capabilities [ 175.384853][ T6558] overlayfs: missing 'lowerdir' [ 175.562128][ T6564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.136'. [ 176.182000][ T6569] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 176.188680][ T6569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.203474][ T6569] vhci_hcd vhci_hcd.0: Device attached [ 176.378694][ T975] vhci_hcd: vhci_device speed not set [ 176.453168][ T5910] usb 5-1: USB disconnect, device number 3 [ 176.538792][ T975] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 176.959807][ T6570] vhci_hcd: connection reset by peer [ 177.026562][ T11] vhci_hcd: stop threads [ 177.044460][ T11] vhci_hcd: release socket [ 177.059286][ T11] vhci_hcd: disconnect device [ 179.629616][ T6606] overlayfs: missing 'lowerdir' [ 181.349068][ T6616] loop3: detected capacity change from 0 to 32768 [ 181.395023][ T6616] JBD2: Ignoring recovery information on journal [ 181.459297][ T6622] loop4: detected capacity change from 0 to 32768 [ 181.572103][ T6616] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 181.626479][ T6622] JBD2: Ignoring recovery information on journal [ 181.708384][ T975] vhci_hcd: vhci_device speed not set [ 182.140144][ T5834] (syz-executor,5834,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 182.155722][ T6622] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 182.333378][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 182.333396][ T29] audit: type=1804 audit(1736588635.148:54): pid=6622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.158" name="/newroot/26/file1/bus" dev="loop4" ino=17059 res=1 errno=0 [ 182.372879][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 182.386633][ T5851] ocfs2: Unmounting device (7,4) on (node local) [ 182.733889][ T6643] loop4: detected capacity change from 0 to 512 [ 182.745621][ T6643] EXT4-fs: Mount option(s) incompatible with ext2 [ 183.166391][ T6646] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 183.173440][ T6646] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.229301][ T6646] vhci_hcd vhci_hcd.0: Device attached [ 183.385920][ T6639] 9pnet_virtio: no channels available for device syz [ 183.548912][ T5890] vhci_hcd: vhci_device speed not set [ 183.628671][ T5890] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 183.809721][ T6647] overlayfs: overlapping lowerdir path [ 183.894819][ T6652] vhci_hcd: connection reset by peer [ 183.901138][ T13] vhci_hcd: stop threads [ 183.905501][ T13] vhci_hcd: release socket [ 183.918208][ T13] vhci_hcd: disconnect device [ 184.040689][ T6660] overlayfs: missing 'lowerdir' [ 185.832791][ T6678] loop4: detected capacity change from 0 to 1024 [ 188.487910][ T6676] loop0: detected capacity change from 0 to 32768 [ 188.538620][ T6676] JBD2: Ignoring recovery information on journal [ 188.694705][ T6678] loop4: detected capacity change from 0 to 32768 [ 188.716166][ T6676] JBD2: journal reset failed [ 188.738723][ T6676] (syz.0.172,6676,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 188.763102][ T6676] (syz.0.172,6676,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 188.773656][ T6678] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop4": -EINTR [ 188.872288][ T6695] loop3: detected capacity change from 0 to 512 [ 188.900366][ T6695] EXT4-fs: Mount option(s) incompatible with ext2 [ 188.908880][ T5890] vhci_hcd: vhci_device speed not set [ 190.980049][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 190.989235][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 191.000657][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 191.098419][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 191.213132][ T6702] loop4: detected capacity change from 0 to 32768 [ 192.012249][ T6723] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 192.018846][ T6723] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.026542][ T29] audit: type=1800 audit(1736588644.858:55): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.178" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 192.054725][ T6723] vhci_hcd vhci_hcd.0: Device attached [ 192.393824][ T46] vhci_hcd: vhci_device speed not set [ 192.468407][ T46] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 192.489697][ T6724] vhci_hcd: connection reset by peer [ 192.537367][ T6636] vhci_hcd: stop threads [ 192.547406][ T6636] vhci_hcd: release socket [ 192.578480][ T6636] vhci_hcd: disconnect device [ 192.628452][ T29] audit: type=1326 audit(1736588645.488:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.656488][ T29] audit: type=1326 audit(1736588645.488:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.681311][ T29] audit: type=1326 audit(1736588645.488:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.725658][ T29] audit: type=1326 audit(1736588645.488:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.768371][ T29] audit: type=1326 audit(1736588645.498:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.796432][ T29] audit: type=1326 audit(1736588645.498:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.858685][ T29] audit: type=1326 audit(1736588645.498:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.888482][ T29] audit: type=1326 audit(1736588645.498:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.918415][ T29] audit: type=1326 audit(1736588645.498:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.1.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 192.972772][ T6735] loop4: detected capacity change from 0 to 1024 [ 193.005158][ T6731] loop0: detected capacity change from 0 to 32768 [ 193.220959][ T6731] JBD2: Ignoring recovery information on journal [ 193.283149][ T6731] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 193.479372][ T5837] (syz-executor,5837,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 193.620203][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 193.910325][ T6735] loop4: detected capacity change from 0 to 32768 [ 194.009322][ T6735] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.328804][ T6746] 9pnet_virtio: no channels available for device syz [ 194.638520][ T6735] XFS (loop4): Ending clean mount [ 194.649708][ T6750] 9pnet_virtio: no channels available for device syz [ 195.208487][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.123915][ T5851] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.814596][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.833806][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.842751][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.852818][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.860974][ T5850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.869161][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 197.186180][ T6770] syzkaller0: entered promiscuous mode [ 197.204234][ T6770] syzkaller0: entered allmulticast mode [ 197.629886][ T46] vhci_hcd: vhci_device speed not set [ 199.453682][ T5850] Bluetooth: hci5: command tx timeout [ 199.670669][ T6784] loop0: detected capacity change from 0 to 512 [ 199.679523][ T6784] EXT4-fs: Mount option(s) incompatible with ext2 [ 199.783594][ T6787] 9pnet_virtio: no channels available for device syz [ 199.883407][ T6787] overlayfs: overlapping lowerdir path [ 200.359288][ T6791] 9pnet_virtio: no channels available for device syz [ 200.603823][ T6766] chnl_net:caif_netlink_parms(): no params data found [ 200.921556][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.946332][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.959218][ T6766] bridge_slave_0: entered allmulticast mode [ 200.972694][ T6766] bridge_slave_0: entered promiscuous mode [ 200.997273][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.015357][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.028850][ T6766] bridge_slave_1: entered allmulticast mode [ 201.043820][ T6766] bridge_slave_1: entered promiscuous mode [ 201.094447][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.104843][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.196332][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.224255][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.540215][ T5850] Bluetooth: hci5: command tx timeout [ 201.961507][ T6766] team0: Port device team_slave_0 added [ 202.050761][ T6766] team0: Port device team_slave_1 added [ 202.237250][ T6829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.215'. [ 202.321334][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.348357][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.374633][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.521065][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.538392][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.625686][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.679482][ T6831] sp0: Synchronizing with TNC [ 202.753949][ T6834] loop4: detected capacity change from 0 to 512 [ 202.798661][ T6834] EXT4-fs: Mount option(s) incompatible with ext2 [ 202.933946][ T6766] hsr_slave_0: entered promiscuous mode [ 202.960119][ T6766] hsr_slave_1: entered promiscuous mode [ 202.988621][ T6766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.996271][ T6766] Cannot create hsr debugfs directory [ 203.101466][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 203.159323][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.219'. [ 203.461151][ T6766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.469526][ T5890] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 203.496428][ T6766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.565049][ T6766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.611299][ T6766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.619448][ T5850] Bluetooth: hci5: command tx timeout [ 203.638425][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 203.656930][ T5890] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 203.676377][ T5890] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 203.695814][ T5890] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 203.708394][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.716622][ T5890] usb 1-1: Product: syz [ 203.721268][ T5890] usb 1-1: Manufacturer: syz [ 203.729763][ T5890] usb 1-1: SerialNumber: syz [ 203.758809][ T5890] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 203.943512][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 203.999073][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.015069][ T5890] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 204.045144][ T5890] usb 1-1: media controller created [ 204.406948][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.920985][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 204.926930][ T5890] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 205.052597][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 205.067279][ T5890] dvb-usb: schedule remote query interval to 150 msecs. [ 205.074657][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 205.099583][ T5890] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 205.116537][ T5890] usb 1-1: USB disconnect, device number 2 [ 205.165872][ T5890] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 205.170021][ T6858] overlayfs: failed to resolve './file0': -2 [ 205.201870][ T6858] loop3: detected capacity change from 0 to 8 [ 205.353079][ T6856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.382614][ T6856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.400471][ T6856] bond0 (unregistering): Released all slaves [ 205.620519][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.698687][ T5850] Bluetooth: hci5: command tx timeout [ 205.706180][ T6766] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.767462][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.774739][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.791540][ T6862] loop3: detected capacity change from 0 to 32768 [ 205.797274][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.806765][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.905790][ T6862] JBD2: Ignoring recovery information on journal [ 206.231395][ T6766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.328465][ T6862] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 206.653791][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 206.653811][ T29] audit: type=1804 audit(1736588659.558:68): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.227" name="/newroot/51/file1/bus" dev="loop3" ino=17059 res=1 errno=0 [ 207.505785][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 207.511225][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.371760][ T6766] veth0_vlan: entered promiscuous mode [ 208.389344][ T6766] veth1_vlan: entered promiscuous mode [ 208.417461][ T6766] veth0_macvtap: entered promiscuous mode [ 208.429995][ T6766] veth1_macvtap: entered promiscuous mode [ 208.447337][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.458209][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.468676][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.479605][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.489964][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.500692][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.510794][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.521610][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.532917][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.545572][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.559447][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.611806][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.622741][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.632785][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.643859][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.654530][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.667719][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.677841][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.688515][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.699752][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.710348][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.721580][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.731711][ T6766] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.740722][ T6766] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.750173][ T6766] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.759813][ T6766] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.936380][ T6913] 9pnet_virtio: no channels available for device syz [ 209.525978][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.564593][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.825153][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.833195][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.724635][ T6945] 9pnet_virtio: no channels available for device syz [ 211.769655][ T6949] netlink: 220 bytes leftover after parsing attributes in process `syz.0.250'. [ 212.031940][ T6953] random: crng reseeded on system resumption [ 212.660850][ T6955] 9pnet_virtio: no channels available for device syz [ 213.077856][ T6967] warning: `syz.5.253' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 214.792111][ T6977] overlayfs: failed to clone upperpath [ 214.800503][ T6978] fuse: Bad value for 'fd' [ 216.075161][ T6996] netlink: 36 bytes leftover after parsing attributes in process `syz.5.264'. [ 216.907977][ T6991] loop3: detected capacity change from 0 to 32768 [ 217.270356][ T29] audit: type=1800 audit(1736588670.178:69): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.261" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 218.578103][ T7004] loop4: detected capacity change from 0 to 32768 [ 219.174925][ T7004] JBD2: Ignoring recovery information on journal [ 219.292130][ T7004] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 219.428594][ T29] audit: type=1804 audit(1736588672.328:70): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.265" name="/newroot/51/file1/bus" dev="loop4" ino=17059 res=1 errno=0 [ 219.573762][ T29] audit: type=1326 audit(1736588672.478:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ef8585d29 code=0x0 [ 219.660573][ T29] audit: type=1326 audit(1736588672.568:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8585d29 code=0x7ffc0000 [ 219.699295][ T7032] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.708745][ T29] audit: type=1326 audit(1736588672.568:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8585d29 code=0x7ffc0000 [ 219.708794][ T29] audit: type=1326 audit(1736588672.568:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f8ef8585d29 code=0x7ffc0000 [ 219.708834][ T29] audit: type=1326 audit(1736588672.568:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8585d29 code=0x7ffc0000 [ 219.829411][ T46] IPVS: starting estimator thread 0... [ 219.857984][ T29] audit: type=1326 audit(1736588672.568:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8585d29 code=0x7ffc0000 [ 219.988677][ T7037] IPVS: using max 18 ests per chain, 43200 per kthread [ 220.006209][ T5851] ocfs2: Unmounting device (7,4) on (node local) [ 220.126416][ T29] audit: type=1326 audit(1736588672.568:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8ef8585d29 code=0x7ffc0000 [ 220.168540][ T29] audit: type=1326 audit(1736588672.568:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef8585d29 code=0x7ffc0000 [ 220.625225][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 220.636619][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u9:6 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 220.636652][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.636667][ T5850] Workqueue: hci0 hci_rx_work [ 220.636698][ T5850] Call Trace: [ 220.636717][ T5850] [ 220.636727][ T5850] dump_stack_lvl+0x241/0x360 [ 220.636756][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.636780][ T5850] ? __pfx__printk+0x10/0x10 [ 220.636821][ T5850] ? __kmalloc_cache_noprof+0x243/0x390 [ 220.636844][ T5850] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 220.636880][ T5850] sysfs_create_dir_ns+0x2ce/0x3a0 [ 220.636912][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 220.636953][ T5850] kobject_add_internal+0x435/0x8d0 [ 220.636989][ T5850] kobject_add+0x152/0x220 [ 220.637014][ T5850] ? do_raw_spin_unlock+0x13c/0x8b0 [ 220.637039][ T5850] ? device_add+0x3e7/0xbf0 [ 220.637069][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 220.637095][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 220.637132][ T5850] ? get_device_parent+0x165/0x410 [ 220.637166][ T5850] device_add+0x4e5/0xbf0 [ 220.637203][ T5850] hci_conn_add_sysfs+0xe8/0x200 [ 220.637240][ T5850] le_conn_complete_evt+0xc9f/0x12e0 [ 220.637284][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 220.637310][ T5850] ? __mutex_unlock_slowpath+0x227/0x800 [ 220.637353][ T5850] ? skb_pull_data+0x112/0x230 [ 220.637389][ T5850] hci_le_conn_complete_evt+0x18c/0x420 [ 220.637425][ T5850] hci_event_packet+0xa55/0x1540 [ 220.637453][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 220.637485][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 220.637508][ T5850] ? do_raw_spin_unlock+0x13c/0x8b0 [ 220.637539][ T5850] ? hci_send_to_monitor+0xd8/0x7f0 [ 220.637569][ T5850] ? kcov_remote_start+0x97/0x7d0 [ 220.637600][ T5850] hci_rx_work+0x3f3/0xdb0 [ 220.637632][ T5850] ? process_scheduled_works+0x976/0x1840 [ 220.637658][ T5850] process_scheduled_works+0xa66/0x1840 [ 220.637713][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.637748][ T5850] ? assign_work+0x364/0x3d0 [ 220.637779][ T5850] worker_thread+0x870/0xd30 [ 220.637820][ T5850] ? __kthread_parkme+0x169/0x1d0 [ 220.637851][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 220.637877][ T5850] kthread+0x7a9/0x920 [ 220.637904][ T5850] ? __pfx_kthread+0x10/0x10 [ 220.637936][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 220.637962][ T5850] ? __pfx_kthread+0x10/0x10 [ 220.637989][ T5850] ? __pfx_kthread+0x10/0x10 [ 220.638022][ T5850] ? __pfx_kthread+0x10/0x10 [ 220.638050][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 220.638082][ T5850] ? lockdep_hardirqs_on+0x99/0x150 [ 220.638103][ T5850] ? __pfx_kthread+0x10/0x10 [ 220.638133][ T5850] ret_from_fork+0x4b/0x80 [ 220.638160][ T5850] ? __pfx_kthread+0x10/0x10 [ 220.638189][ T5850] ret_from_fork_asm+0x1a/0x30 [ 220.638230][ T5850] [ 220.918495][ T5850] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.933691][ T5850] Bluetooth: hci0: failed to register connection device [ 223.296563][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 223.425401][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 223.544720][ T7071] loop0: detected capacity change from 0 to 32768 [ 223.656134][ T7071] JBD2: Ignoring recovery information on journal [ 223.729498][ T7071] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.776623][ T7077] loop4: detected capacity change from 0 to 32768 [ 223.784900][ T7077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.289 (7077) [ 223.808122][ T7077] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.819150][ T7077] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 223.832324][ T7077] BTRFS info (device loop4): using free-space-tree [ 223.843465][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 223.843485][ T29] audit: type=1804 audit(1736588676.748:90): pid=7071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.286" name="/newroot/67/file1/bus" dev="loop0" ino=17059 res=1 errno=0 [ 223.890547][ T7091] tipc: Started in network mode [ 223.911368][ T7091] tipc: Node identity ac14142f, cluster identity 4711 [ 223.931439][ T7091] tipc: New replicast peer: 172.20.20.22 [ 223.937752][ T7091] tipc: Enabled bearer , priority 10 [ 223.957806][ T7071] (syz.0.286,7071,0):ocfs2_get_clusters:606 ERROR: status = -34 [ 223.967265][ T7071] (syz.0.286,7071,1):ocfs2_reflink_remap_extent:4525 ERROR: status = -34 [ 223.988529][ T7071] (syz.0.286,7071,0):ocfs2_reflink_remap_blocks:4684 ERROR: status = -34 [ 224.019311][ T7071] (syz.0.286,7071,0):ocfs2_remap_file_range:2747 ERROR: status = -34 [ 224.130497][ T5851] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.168569][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 224.195526][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.297'. [ 224.322123][ T7115] geneve0: entered allmulticast mode [ 224.937824][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 225.161611][ T5890] tipc: Node number set to 2886997039 [ 226.684100][ T7148] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 227.791125][ T7143] loop4: detected capacity change from 0 to 32768 [ 227.870703][ T29] audit: type=1800 audit(1736588680.778:91): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.299" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 228.293067][ T7161] 9pnet_virtio: no channels available for device syz [ 228.342878][ T7161] overlayfs: overlapping lowerdir path [ 228.525192][ T7163] loop5: detected capacity change from 0 to 32768 [ 228.559786][ T7163] XFS: ikeep mount option is deprecated. [ 228.579811][ T7163] XFS: noikeep mount option is deprecated. [ 228.615775][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 228.713612][ T7163] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 228.845107][ T7163] XFS (loop5): Ending clean mount [ 228.960776][ T7163] XFS (loop5): Quotacheck needed: Please wait. [ 228.988980][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 229.082200][ T7163] XFS (loop5): Quotacheck: Done. [ 229.226329][ T6766] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 229.773929][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 229.835430][ T7203] netlink: 80 bytes leftover after parsing attributes in process `syz.5.323'. [ 229.858890][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 230.824777][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 231.333486][ T7224] 9pnet_virtio: no channels available for device syz [ 231.830637][ T7212] 9pnet_virtio: no channels available for device syz [ 231.889430][ T7212] overlayfs: overlapping lowerdir path [ 232.040207][ T7231] 9pnet_virtio: no channels available for device syz [ 232.083615][ T7217] loop4: detected capacity change from 0 to 32768 [ 232.155925][ T7217] JBD2: Ignoring recovery information on journal [ 232.345669][ T7238] overlayfs: missing 'lowerdir' [ 232.716938][ T7217] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 232.813436][ T7217] (syz.4.329,7217,1):ocfs2_get_clusters:606 ERROR: status = -34 [ 232.814259][ T29] audit: type=1804 audit(1736588685.708:92): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.329" name="/newroot/61/file1/bus" dev="loop4" ino=17059 res=1 errno=0 [ 232.836025][ T7217] (syz.4.329,7217,1):ocfs2_reflink_remap_extent:4525 ERROR: status = -34 [ 232.873635][ T7217] (syz.4.329,7217,1):ocfs2_reflink_remap_blocks:4684 ERROR: status = -34 [ 232.911788][ T7217] (syz.4.329,7217,1):ocfs2_remap_file_range:2747 ERROR: status = -34 [ 233.111030][ T5851] ocfs2: Unmounting device (7,4) on (node local) [ 233.584075][ T7226] loop0: detected capacity change from 0 to 32768 [ 233.634125][ T7226] XFS: ikeep mount option is deprecated. [ 233.663336][ T7226] XFS: noikeep mount option is deprecated. [ 233.865574][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 233.873538][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 233.886069][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 233.898434][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 233.905009][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 234.331441][ T7226] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 234.595027][ T7226] XFS (loop0): Ending clean mount [ 234.629284][ T7226] XFS (loop0): Quotacheck needed: Please wait. [ 234.979082][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 235.859689][ T7271] 9pnet_virtio: no channels available for device syz [ 236.202462][ T7226] XFS (loop0): Quotacheck: Done. [ 236.341383][ T5837] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 236.846537][ T7293] 9pnet_virtio: no channels available for device syz [ 237.885128][ T5910] libceph: connect (1)[c::]:6789 error -101 [ 237.920727][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 238.048784][ T7301] ceph: No mds server is up or the cluster is laggy [ 238.081207][ T7286] 9pnet_virtio: no channels available for device syz [ 238.165106][ T7306] overlayfs: overlapping lowerdir path [ 239.900517][ T7323] bridge0: port 3(syz_tun) entered blocking state [ 239.907572][ T7323] bridge0: port 3(syz_tun) entered disabled state [ 239.914716][ T7323] syz_tun: entered allmulticast mode [ 239.923664][ T7323] syz_tun: entered promiscuous mode [ 239.930156][ T7323] bridge0: port 3(syz_tun) entered blocking state [ 239.938693][ T7323] bridge0: port 3(syz_tun) entered forwarding state [ 240.046752][ T7325] 9pnet_virtio: no channels available for device syz [ 241.082312][ T5838] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 241.358666][ T7321] loop4: detected capacity change from 0 to 32768 [ 241.378879][ T7344] 9pnet_virtio: no channels available for device syz [ 241.412451][ T7321] XFS: ikeep mount option is deprecated. [ 241.418168][ T7321] XFS: noikeep mount option is deprecated. [ 241.649312][ T7321] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 242.412015][ T7321] XFS (loop4): Ending clean mount [ 242.438811][ T7321] XFS (loop4): Quotacheck needed: Please wait. [ 242.554831][ T7321] XFS (loop4): Quotacheck: Done. [ 242.647773][ T7363] can0: slcan on ttyS3. [ 242.826346][ T7340] 9pnet_virtio: no channels available for device syz [ 242.858701][ T5851] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 242.928815][ T7364] overlayfs: overlapping lowerdir path [ 243.280033][ T7365] can0 (unregistered): slcan off ttyS3. [ 243.712201][ T7371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.373'. [ 244.062844][ T7373] syzkaller0: entered promiscuous mode [ 244.068629][ T7373] syzkaller0: entered allmulticast mode [ 244.158708][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 244.317489][ T5838] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 244.327009][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 244.336585][ T7388] netlink: 'syz.5.378': attribute type 10 has an invalid length. [ 244.369683][ T10] usb 5-1: config 0 has no interfaces? [ 244.375226][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.444184][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.475261][ T10] usb 5-1: config 0 descriptor?? [ 245.425122][ T875] usb 5-1: USB disconnect, device number 5 [ 246.427991][ T7406] can: request_module (can-proto-3) failed. [ 246.545469][ T7415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 247.015769][ T7419] program syz.3.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.229007][ T7412] slcan: can't register candev [ 247.246536][ T7412] Falling back ldisc for ttyS3. [ 247.556719][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 248.265051][ T7427] loop3: detected capacity change from 0 to 32768 [ 248.317016][ T7427] JBD2: Ignoring recovery information on journal [ 248.374527][ T7427] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 248.421797][ T7427] (syz.3.389,7427,0):ocfs2_get_clusters:606 ERROR: status = -34 [ 248.426523][ T29] audit: type=1804 audit(1736588701.328:93): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.389" name="/newroot/87/file1/bus" dev="loop3" ino=17059 res=1 errno=0 [ 248.431953][ T7427] (syz.3.389,7427,0):ocfs2_reflink_remap_extent:4525 ERROR: status = -34 [ 248.460359][ T7427] (syz.3.389,7427,0):ocfs2_reflink_remap_blocks:4684 ERROR: status = -34 [ 248.468934][ T7427] (syz.3.389,7427,0):ocfs2_remap_file_range:2747 ERROR: status = -34 [ 248.714997][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 249.003985][ T5838] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 250.632292][ T7385] syz_tun: left allmulticast mode [ 250.637573][ T7385] syz_tun: left promiscuous mode [ 250.648276][ T7385] bridge0: port 3(syz_tun) entered disabled state [ 250.702637][ T7385] bridge_slave_0: left allmulticast mode [ 250.708546][ T7385] bridge_slave_0: left promiscuous mode [ 250.714412][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.740785][ T7385] bridge_slave_1: left allmulticast mode [ 250.746514][ T7385] bridge_slave_1: left promiscuous mode [ 250.752930][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.767060][ T7385] bond0: (slave bond_slave_0): Releasing backup interface [ 250.792899][ T7385] bond0: (slave bond_slave_1): Releasing backup interface [ 250.824303][ T7385] team0: Port device team_slave_0 removed [ 250.853117][ T7385] team0: Port device team_slave_1 removed [ 250.860309][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.867801][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.890789][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.898597][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.952407][ T7450] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 250.955147][ T7388] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 251.025992][ T7450] kvm: pic: non byte read [ 251.038335][ T7447] mkiss: ax0: crc mode is auto. [ 251.046330][ T7450] kvm: pic: level sensitive irq not supported [ 251.052302][ T7450] kvm: pic: non byte read [ 251.076873][ T7450] kvm: pic: level sensitive irq not supported [ 251.077245][ T7450] kvm: pic: non byte read [ 251.090523][ T7450] kvm: pic: level sensitive irq not supported [ 251.090673][ T7450] kvm: pic: non byte read [ 251.409078][ T7457] 9pnet_virtio: no channels available for device syz [ 251.831833][ T7461] program syz.5.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.877278][ T5838] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 252.274130][ T7476] 9pnet_virtio: no channels available for device syz [ 252.314709][ T7479] IPVS: set_ctl: invalid protocol: 119 255.255.255.255:20004 [ 253.040763][ T7483] syzkaller0: entered promiscuous mode [ 253.067546][ T7483] syzkaller0: entered allmulticast mode [ 253.095757][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 253.287889][ T7470] loop4: detected capacity change from 0 to 32768 [ 253.409586][ T7470] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 253.773280][ T7470] XFS (loop4): Ending clean mount [ 253.784065][ T7470] XFS (loop4): Quotacheck needed: Please wait. [ 253.914890][ T7470] XFS (loop4): Quotacheck: Done. [ 253.975841][ T5851] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.536445][ T7507] 9pnet_virtio: no channels available for device syz [ 254.795820][ T5838] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 255.111431][ T7517] input: syz0 as /devices/virtual/input/input11 [ 256.913899][ T5838] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 257.024380][ T7505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.050620][ T7511] netlink: 830 bytes leftover after parsing attributes in process `syz.4.412'. [ 257.243277][ T7539] netlink: 332 bytes leftover after parsing attributes in process `syz.1.424'. [ 257.495249][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 257.495406][ T7549] evm: overlay not supported [ 258.100030][ T5838] block nbd0: Receive control failed (result -32) [ 258.110641][ T7562] block nbd0: shutting down sockets [ 258.247026][ T7567] syzkaller0: entered promiscuous mode [ 258.343313][ T7567] syzkaller0: entered allmulticast mode [ 259.713933][ T7580] netlink: 332 bytes leftover after parsing attributes in process `syz.0.437'. [ 260.156484][ T7582] 9pnet_virtio: no channels available for device syz [ 260.166417][ T7582] overlayfs: overlapping lowerdir path [ 260.705694][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 261.903932][ T5838] block nbd5: Receive control failed (result -32) [ 261.911177][ T54] block nbd5: Receive control failed (result -32) [ 261.965597][ T7607] block nbd5: shutting down sockets [ 262.506069][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.514143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.066307][ T7613] netlink: 332 bytes leftover after parsing attributes in process `syz.5.448'. [ 263.835854][ T7628] bridge0: port 3(syz_tun) entered blocking state [ 263.842786][ T7628] bridge0: port 3(syz_tun) entered disabled state [ 263.850780][ T7628] syz_tun: entered allmulticast mode [ 263.863851][ T7628] syz_tun: entered promiscuous mode [ 263.871306][ T7628] bridge0: port 3(syz_tun) entered blocking state [ 263.877840][ T7628] bridge0: port 3(syz_tun) entered forwarding state [ 264.579268][ T7640] 9pnet_virtio: no channels available for device syz [ 265.103498][ T7647] netlink: 1260 bytes leftover after parsing attributes in process `syz.5.461'. [ 265.124911][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 265.878836][ T7669] can0: slcan on ttyS3. [ 266.545572][ T7680] netlink: 1260 bytes leftover after parsing attributes in process `syz.1.474'. [ 266.580972][ T7684] overlayfs: missing 'lowerdir' [ 266.658464][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 266.688370][ T7668] can0 (unregistered): slcan off ttyS3. [ 266.933505][ T7662] 9pnet_virtio: no channels available for device syz [ 266.969340][ T7662] overlayfs: overlapping lowerdir path [ 267.744033][ T7708] syzkaller0: entered promiscuous mode [ 267.759100][ T7708] syzkaller0: entered allmulticast mode [ 267.926506][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 268.085751][ T7724] overlayfs: missing 'lowerdir' [ 271.243197][ T7752] 9pnet_virtio: no channels available for device syz [ 272.115813][ T7755] ntfs3(nullb0): Primary boot signature is not NTFS. [ 272.127677][ T7755] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 272.416789][ T7730] bridge0: port 1(syz_tun) entered blocking state [ 272.423572][ T7730] bridge0: port 1(syz_tun) entered disabled state [ 272.430320][ T7730] syz_tun: entered allmulticast mode [ 272.437912][ T7730] syz_tun: entered promiscuous mode [ 272.446467][ T7730] bridge0: port 1(syz_tun) entered blocking state [ 272.453048][ T7730] bridge0: port 1(syz_tun) entered forwarding state [ 273.046038][ T7774] overlayfs: missing 'lowerdir' [ 273.059737][ T7774] loop3: detected capacity change from 0 to 8 [ 273.957526][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 274.549239][ T7784] 9pnet_virtio: no channels available for device syz [ 274.949047][ T7761] overlayfs: failed to clone lowerpath [ 275.024599][ T7793] syzkaller0: entered promiscuous mode [ 275.054597][ T7793] syzkaller0: entered allmulticast mode [ 275.565718][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 278.657619][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.528'. [ 279.025831][ T7852] 9pnet_virtio: no channels available for device syz [ 279.110250][ T7831] loop3: detected capacity change from 0 to 32768 [ 279.166168][ T7831] XFS: ikeep mount option is deprecated. [ 279.191766][ T7831] XFS: noikeep mount option is deprecated. [ 279.235787][ T7831] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 279.266099][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 279.367595][ T7831] XFS (loop3): Ending clean mount [ 279.391875][ T7831] XFS (loop3): Quotacheck needed: Please wait. [ 279.509717][ T7831] XFS (loop3): Quotacheck: Done. [ 279.914047][ T5834] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 279.984812][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 280.816676][ T7888] 9pnet_virtio: no channels available for device syz [ 280.965612][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 281.544804][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 285.231967][ T7970] loop4: detected capacity change from 0 to 32768 [ 285.534023][ T7988] trusted_key: encrypted_key: insufficient parameters specified [ 285.562428][ T7988] trusted_key: encrypted_key: insufficient parameters specified [ 285.691100][ T54] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 286.981592][ T7996] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 287.009482][ T7996] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 288.118447][ T5835] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 288.288412][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 288.311734][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 288.354733][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 288.401739][ T5835] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 288.450043][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.489031][ T5835] usb 4-1: config 0 descriptor?? [ 288.521556][ T8020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.771191][ T8026] syz.1.600 (8026) used greatest stack depth: 18064 bytes left [ 289.059018][ T5835] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0002/input/input13 [ 289.251979][ T8041] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 289.277708][ T5835] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 289.304690][ T8041] kvm: pic: non byte read [ 289.328878][ T8041] kvm: pic: level sensitive irq not supported [ 289.328944][ T8041] kvm: pic: non byte read [ 289.355559][ T8041] kvm: pic: level sensitive irq not supported [ 289.355738][ T8041] kvm: pic: non byte read [ 289.367930][ T8041] kvm: pic: level sensitive irq not supported [ 289.368062][ T8041] kvm: pic: non byte read [ 289.429595][ T5835] usb 4-1: USB disconnect, device number 2 [ 294.708489][ T29] audit: type=1800 audit(1736588746.518:94): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.618" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 294.728114][ T8091] bridge0: port 3(syz_tun) entered blocking state [ 294.735522][ T8091] bridge0: port 3(syz_tun) entered disabled state [ 294.743453][ T8091] syz_tun: entered allmulticast mode [ 294.756431][ T8091] syz_tun: entered promiscuous mode [ 294.765119][ T8091] bridge0: port 3(syz_tun) entered blocking state [ 294.771724][ T8091] bridge0: port 3(syz_tun) entered forwarding state [ 296.997607][ T8103] loop3: detected capacity change from 0 to 32768 [ 297.167285][ T8103] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.437307][ T8139] bridge0: port 3(syz_tun) entered blocking state [ 298.445349][ T8139] bridge0: port 3(syz_tun) entered disabled state [ 298.452472][ T8139] syz_tun: entered allmulticast mode [ 298.461428][ T8139] syz_tun: entered promiscuous mode [ 298.469992][ T8139] bridge0: port 3(syz_tun) entered blocking state [ 298.476521][ T8139] bridge0: port 3(syz_tun) entered forwarding state [ 298.543886][ T8103] XFS (loop3): Ending clean mount [ 298.556553][ T8103] XFS (loop3): Quotacheck needed: Please wait. [ 298.657285][ T8103] XFS (loop3): Quotacheck: Done. [ 298.748060][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 299.230251][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 299.616841][ T8168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.619482][ T8204] program syz.4.661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.940643][ T8259] 9pnet_virtio: no channels available for device syz [ 304.595438][ T8245] loop3: detected capacity change from 0 to 32768 [ 304.978823][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 306.663446][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 309.130774][ T8355] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 309.148871][ T8355] kvm: pic: non byte read [ 309.155020][ T8355] kvm: pic: level sensitive irq not supported [ 309.155168][ T8355] kvm: pic: non byte read [ 309.171062][ T8355] kvm: pic: level sensitive irq not supported [ 309.171236][ T8355] kvm: pic: non byte read [ 309.198601][ T8355] kvm: pic: level sensitive irq not supported [ 309.199048][ T8355] kvm: pic: non byte read [ 309.266607][ T29] audit: type=1326 audit(1736588762.168:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c94d85d29 code=0x0 [ 309.324261][ T29] audit: type=1326 audit(1736588762.228:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.363470][ T29] audit: type=1326 audit(1736588762.258:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.391338][ T29] audit: type=1326 audit(1736588762.258:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.444992][ T29] audit: type=1326 audit(1736588762.258:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.472066][ T29] audit: type=1326 audit(1736588762.258:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.495294][ T29] audit: type=1326 audit(1736588762.258:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.519428][ T29] audit: type=1326 audit(1736588762.258:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.580187][ T29] audit: type=1326 audit(1736588762.258:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 309.609569][ T29] audit: type=1326 audit(1736588762.258:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7c94d85d29 code=0x7ffc0000 [ 311.188929][ T8391] loop4: detected capacity change from 0 to 512 [ 311.338924][ T8391] EXT4-fs: Mount option(s) incompatible with ext2 [ 311.880056][ T8398] binder: BINDER_SET_CONTEXT_MGR already set [ 311.888554][ T8398] binder: 8397:8398 ioctl 4018620d 200001c0 returned -16 [ 312.577237][ T8406] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.733'. [ 312.791922][ T8412] 9pnet_virtio: no channels available for device syz [ 313.001120][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.738'. [ 314.583076][ T8439] loop4: detected capacity change from 0 to 512 [ 314.597737][ T8439] EXT4-fs: Mount option(s) incompatible with ext2 [ 314.701867][ T8444] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.746'. [ 314.903334][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'. [ 315.250542][ T8454] lo speed is unknown, defaulting to 1000 [ 315.278366][ T8454] lo speed is unknown, defaulting to 1000 [ 315.347155][ T8454] lo speed is unknown, defaulting to 1000 [ 315.430311][ T8454] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 315.507420][ T8454] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 315.713361][ T8454] lo speed is unknown, defaulting to 1000 [ 315.730833][ T8454] lo speed is unknown, defaulting to 1000 [ 315.757080][ T8454] lo speed is unknown, defaulting to 1000 [ 315.782360][ T8454] lo speed is unknown, defaulting to 1000 [ 315.812416][ T8454] lo speed is unknown, defaulting to 1000 [ 315.875707][ T8454] lo speed is unknown, defaulting to 1000 [ 316.304907][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 316.341957][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 316.348057][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 316.551065][ T8480] ceph: No mds server is up or the cluster is laggy [ 316.620302][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 316.638169][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 317.171646][ T8488] 9pnet_virtio: no channels available for device syz [ 317.207642][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 317.216192][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 317.886559][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 318.741291][ T975] libceph: connect (1)[c::]:6789 error -101 [ 318.785806][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 319.245743][ T8533] ceph: No mds server is up or the cluster is laggy [ 319.250638][ T975] libceph: connect (1)[c::]:6789 error -101 [ 319.278761][ T975] libceph: mon0 (1)[c::]:6789 connect error [ 319.516264][ T8550] loop3: detected capacity change from 0 to 8 [ 320.904055][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 320.974930][ T8582] overlayfs: failed to resolve './file0': -2 [ 321.439383][ T8592] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:00, vlan:0) [ 321.795699][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 321.898641][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 322.068562][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 322.092648][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 322.140638][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 322.301758][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.329641][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.374583][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.519251][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.035983][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 323.059430][ T10] usbtmc 4-1:16.0: can't read capabilities [ 323.261480][ T10] usb 4-1: USB disconnect, device number 3 [ 324.748697][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.755161][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.963106][ T8623] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.812'. [ 326.416295][ T8644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.498818][ T30] INFO: task kworker/u8:5:1100 blocked for more than 143 seconds. [ 326.508717][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 326.516460][ T30] Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 326.528364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.553585][ T30] task:kworker/u8:5 state:D stack:19952 pid:1100 tgid:1100 ppid:2 flags:0x00004000 [ 326.583497][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 326.598520][ T30] Call Trace: [ 326.610870][ T30] [ 326.617396][ T30] __schedule+0x18f6/0x4cd0 [ 326.635199][ T30] ? __pfx___schedule+0x10/0x10 [ 326.647033][ T30] ? __pfx_lock_release+0x10/0x10 [ 326.663877][ T30] ? schedule+0x90/0x320 [ 326.677000][ T30] ? wq_worker_sleeping+0x66/0x240 [ 326.695135][ T30] ? schedule+0x90/0x320 [ 326.696249][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.710768][ T30] schedule+0x14b/0x320 [ 326.721109][ T30] bit_wait+0x12/0xd0 [ 326.723500][ T10] usb 4-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 326.729898][ T30] __wait_on_bit+0xb0/0x2f0 [ 326.735799][ T975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 326.750548][ T30] ? __pfx_bit_wait+0x10/0x10 [ 326.762166][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 326.768669][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.778453][ T30] ? __pfx_bit_wait+0x10/0x10 [ 326.785811][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 326.795297][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 326.800569][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58764, setting to 1024 [ 326.827583][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 326.834416][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 326.849856][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 326.858619][ T30] netfs_retry_writes+0x16e/0x19b0 [ 326.868343][ T30] ? __pfx_validate_chain+0x10/0x10 [ 326.874328][ T10] usb 4-1: Product: syz [ 326.885397][ T30] ? stack_trace_save+0x118/0x1d0 [ 326.892101][ T10] usb 4-1: Manufacturer: syz [ 326.896882][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 326.908613][ T8640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.918493][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 326.930068][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 326.935514][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 326.947102][ T30] ? lockdep_unlock+0x16a/0x300 [ 326.952278][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 326.957642][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 326.965442][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34304, setting to 1024 [ 326.977526][ T30] ? process_scheduled_works+0x976/0x1840 [ 326.983839][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 326.989987][ T30] process_scheduled_works+0xa66/0x1840 [ 326.995727][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 327.002259][ T975] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 327.012134][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 327.021033][ T30] ? assign_work+0x364/0x3d0 [ 327.026068][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.035490][ T30] worker_thread+0x870/0xd30 [ 327.041563][ T30] ? __kthread_parkme+0x169/0x1d0 [ 327.048066][ T975] usb 5-1: config 0 descriptor?? [ 327.053539][ T30] ? __pfx_worker_thread+0x10/0x10 [ 327.061280][ T30] kthread+0x7a9/0x920 [ 327.065768][ T30] ? __pfx_kthread+0x10/0x10 [ 327.065926][ T8646] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.070957][ T30] ? __pfx_worker_thread+0x10/0x10 [ 327.102977][ T30] ? __pfx_kthread+0x10/0x10 [ 327.113437][ T30] ? __pfx_kthread+0x10/0x10 [ 327.123074][ T30] ? __pfx_kthread+0x10/0x10 [ 327.127912][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.137222][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 327.155243][ T10] usb 4-1: USB disconnect, device number 4 [ 327.160220][ T30] ? __pfx_kthread+0x10/0x10 [ 327.165904][ T30] ret_from_fork+0x4b/0x80 [ 327.175769][ T30] ? __pfx_kthread+0x10/0x10 [ 327.183562][ T30] ret_from_fork_asm+0x1a/0x30 [ 327.193705][ T30] [ 327.196887][ T30] INFO: task syz.2.159:6624 blocked for more than 144 seconds. [ 327.208064][ T30] Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 327.225070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.235544][ T30] task:syz.2.159 state:D stack:24112 pid:6624 tgid:6623 ppid:5844 flags:0x00004006 [ 327.263760][ T30] Call Trace: [ 327.267200][ T30] [ 327.272713][ T30] __schedule+0x18f6/0x4cd0 [ 327.283208][ T30] ? __pfx___schedule+0x10/0x10 [ 327.290816][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.296074][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 327.306206][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.317157][ T30] ? schedule+0x90/0x320 [ 327.326022][ T30] schedule+0x14b/0x320 [ 327.335322][ T30] schedule_preempt_disabled+0x13/0x30 [ 327.343456][ T30] __mutex_lock+0x817/0x1010 [ 327.353179][ T30] ? __mutex_lock+0x602/0x1010 [ 327.358021][ T30] ? netfs_writepages+0x12b/0x9e0 [ 327.370039][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 327.382999][ T30] netfs_writepages+0x12b/0x9e0 [ 327.388082][ T30] ? mark_lock+0x9a/0x360 [ 327.396521][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.405655][ T30] ? __lock_acquire+0x1397/0x2100 [ 327.411114][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 327.423544][ T30] ? __pfx_netfs_writepages+0x10/0x10 [ 327.433197][ T30] do_writepages+0x35f/0x880 [ 327.437883][ T30] ? __pfx_do_writepages+0x10/0x10 [ 327.446953][ T30] ? filemap_fdatawrite+0x1e8/0x2a0 [ 327.456093][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 327.463818][ T30] ? __pfx_lock_release+0x10/0x10 [ 327.476613][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 327.483832][ T30] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 327.496063][ T30] filemap_fdatawrite+0x1f3/0x2a0 [ 327.501327][ T30] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 327.503109][ T975] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0003/input/input15 [ 327.507251][ T30] ? kasan_record_aux_stack+0xaa/0xc0 [ 327.524254][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 327.530720][ T30] v9fs_dir_release+0x151/0x560 [ 327.535659][ T30] ? __pfx___might_resched+0x10/0x10 [ 327.541363][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 327.546788][ T30] ? __pfx_call_rcu+0x10/0x10 [ 327.551642][ T30] ? evm_file_release+0x105/0x1e0 [ 327.556960][ T30] ? __pfx_v9fs_dir_release+0x10/0x10 [ 327.562890][ T30] __fput+0x3e9/0x9f0 [ 327.566910][ T30] task_work_run+0x24f/0x310 [ 327.571571][ T30] ? __pfx_task_work_run+0x10/0x10 [ 327.576903][ T30] ? task_work_add+0x2d8/0x450 [ 327.582034][ T30] get_signal+0x15f7/0x1750 [ 327.586622][ T30] ? fput+0x1fa/0x290 [ 327.591832][ T30] ? __pfx_get_signal+0x10/0x10 [ 327.596756][ T30] arch_do_signal_or_restart+0x96/0x860 [ 327.599445][ T975] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 327.604781][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 327.622936][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.630237][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 327.636043][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 327.642396][ T30] do_syscall_64+0x100/0x230 [ 327.647034][ T30] ? clear_bhb_loop+0x35/0x90 [ 327.651802][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.657919][ T30] RIP: 0033:0x7f32c2f85d29 [ 327.662457][ T30] RSP: 002b:00007f32c0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 327.671209][ T30] RAX: 0000000000d2b000 RBX: 00007f32c3175fa0 RCX: 00007f32c2f85d29 [ 327.679406][ T30] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 327.687642][ T30] RBP: 00007f32c3001b08 R08: 0000000000000000 R09: 0000000000000000 [ 327.695816][ T30] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 327.704463][ T30] R13: 0000000000000000 R14: 00007f32c3175fa0 R15: 00007ffdaef8d2b8 [ 327.713135][ T30] [ 327.716479][ T30] [ 327.716479][ T30] Showing all locks held in the system: [ 327.724352][ T30] 2 locks held by kworker/u8:1/13: [ 327.731822][ T30] 1 lock held by khungtaskd/30: [ 327.736815][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 327.747422][ T30] 2 locks held by kworker/u8:3/52: [ 327.753010][ T30] #0: ffff8881472e3148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 327.766603][ T30] #1: ffffc90000bc7c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 327.779698][ T30] 2 locks held by kworker/u8:5/1100: [ 327.785084][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 327.797409][ T30] #1: ffffc900040afc60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 327.810018][ T30] 2 locks held by getty/5594: [ 327.814918][ T30] #0: ffff888030d9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 327.831016][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 327.843179][ T30] 1 lock held by syz.2.159/6624: [ 327.851983][ T30] #0: ffff88807a098500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0x12b/0x9e0 [ 327.863328][ T30] 1 lock held by syz.2.159/6625: [ 327.868578][ T30] #0: ffff88807a098500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_writepages+0xcf/0x9e0 [ 327.897468][ T30] 1 lock held by syz.4.820/8646: [ 327.902587][ T30] #0: ffff88807de74078 (&hiddev->existancelock){+.+.}-{4:4}, at: hiddev_ioctl+0x14e/0x1eb0 [ 327.913500][ T30] [ 327.915880][ T30] ============================================= [ 327.915880][ T30] [ 327.936947][ T30] NMI backtrace for cpu 1 [ 327.936967][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 327.936992][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 327.937005][ T30] Call Trace: [ 327.937012][ T30] [ 327.937021][ T30] dump_stack_lvl+0x241/0x360 [ 327.937050][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.937072][ T30] ? __pfx__printk+0x10/0x10 [ 327.937115][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 327.937153][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 327.937182][ T30] ? _printk+0xd5/0x120 [ 327.937212][ T30] ? __pfx__printk+0x10/0x10 [ 327.937243][ T30] ? __wake_up_klogd+0xcc/0x110 [ 327.937271][ T30] ? __pfx__printk+0x10/0x10 [ 327.937304][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 327.937332][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.937359][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 327.937404][ T30] watchdog+0xff6/0x1040 [ 327.937434][ T30] ? watchdog+0x1ea/0x1040 [ 327.937465][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.937491][ T30] kthread+0x7a9/0x920 [ 327.937518][ T30] ? __pfx_kthread+0x10/0x10 [ 327.937541][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.937560][ T30] ? __pfx_kthread+0x10/0x10 [ 327.937585][ T30] ? __pfx_kthread+0x10/0x10 [ 327.937616][ T30] ? __pfx_kthread+0x10/0x10 [ 327.937642][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.937673][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 327.937693][ T30] ? __pfx_kthread+0x10/0x10 [ 327.937714][ T30] ret_from_fork+0x4b/0x80 [ 327.937736][ T30] ? __pfx_kthread+0x10/0x10 [ 327.937765][ T30] ret_from_fork_asm+0x1a/0x30 [ 327.937803][ T30] [ 327.937811][ T30] Sending NMI from CPU 1 to CPUs 0: [ 328.111790][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 328.123224][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 328.123248][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 328.123274][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.123289][ T30] Call Trace: [ 328.123298][ T30] [ 328.123308][ T30] dump_stack_lvl+0x241/0x360 [ 328.123341][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.123365][ T30] ? __pfx__printk+0x10/0x10 [ 328.123404][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 328.123442][ T30] ? vscnprintf+0x5d/0x90 [ 328.123477][ T30] panic+0x349/0x880 [ 328.123513][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 328.123549][ T30] ? __pfx_panic+0x10/0x10 [ 328.123587][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 328.123618][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 328.123651][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 328.123687][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 328.123724][ T30] watchdog+0x1035/0x1040 [ 328.123755][ T30] ? watchdog+0x1ea/0x1040 [ 328.123788][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.123817][ T30] kthread+0x7a9/0x920 [ 328.123845][ T30] ? __pfx_kthread+0x10/0x10 [ 328.123878][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.123908][ T30] ? __pfx_kthread+0x10/0x10 [ 328.123937][ T30] ? __pfx_kthread+0x10/0x10 [ 328.123971][ T30] ? __pfx_kthread+0x10/0x10 [ 328.124000][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.124033][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 328.124056][ T30] ? __pfx_kthread+0x10/0x10 [ 328.124087][ T30] ret_from_fork+0x4b/0x80 [ 328.124115][ T30] ? __pfx_kthread+0x10/0x10 [ 328.124145][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.124186][ T30] [ 328.294991][ T30] Kernel Offset: disabled [ 328.299322][ T30] Rebooting in 86400 seconds..