last executing test programs: 2m47.886073941s ago: executing program 0 (id=94): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r2, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003cc0)={0x74c, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x724, 0x8, 0x0, 0x1, [{0x720, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_ALLOWEDIPS={0x524, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x6}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e0e5b783df206249764e8941ed6da4a450a7d9efce8f13c7816db691057a03aa"}, @WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd5fa8ff33bbee42e087eb3df2705e619af06a3fdfac26a836382cecd9d2a103"}]}]}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2m46.157125063s ago: executing program 0 (id=97): r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0xd, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 2m45.879172567s ago: executing program 0 (id=100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2m45.426463674s ago: executing program 0 (id=105): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m43.445737112s ago: executing program 0 (id=108): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40088d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 2m43.194291466s ago: executing program 0 (id=111): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2m27.731779453s ago: executing program 32 (id=111): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 8.564893121s ago: executing program 1 (id=827): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r2, &(0x7f0000001c80)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0, 0x80, 0x5, 0x9, 0x1, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xe, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0x9, 0x1063, 0x4, 0xf5, 0x1}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003cc0)={0x478, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x450, 0x8, 0x0, 0x1, [{0x44c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xfe}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e0e5b783df206249764e8941ed6da4a450a7d9efce8f13c7816db691057a03aa"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ALLOWEDIPS={0x3a0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd5fa8ff33bbee42e087eb3df2705e619af06a3fdfac26a836382cecd9d2a103"}]}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7.211399243s ago: executing program 1 (id=831): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0), 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 6.970596971s ago: executing program 1 (id=834): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESOCT=r1], 0x20) 6.70215088s ago: executing program 1 (id=835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) pipe2$watch_queue(&(0x7f00000000c0), 0x80) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) 5.817978143s ago: executing program 3 (id=838): syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140), &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 5.537166603s ago: executing program 3 (id=841): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x80, 0x206, 0xff06, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8000, 0x9, 0x5}}) 5.078081402s ago: executing program 3 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1e, 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=0x0, @ANYRESOCT=r1], 0x20) 4.516536475s ago: executing program 4 (id=847): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x3, 0x0, 0x0, 0x8010}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000280)={@remote, 0x0}, &(0x7f0000000400)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f000001b3c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', r4, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x25a}], 0x4}}], 0x6, 0x200040d1) r6 = dup(r0) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 4.150332139s ago: executing program 3 (id=849): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000000c00f3235000400000f"], 0x422}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000000000000806"]) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0)=0x9, 0x1d) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0xa2a, 0x0, 0x5, 0xf0, 0x80000001, 0xb, 0xbdb], 0xeeee8000, 0x3c4210}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x49, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.323298503s ago: executing program 5 (id=851): syz_io_uring_setup(0x7440, 0x0, &(0x7f0000000140), &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 3.274735238s ago: executing program 4 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x3a) 3.206169159s ago: executing program 3 (id=853): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x200) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ipvs(0x0, r4) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10088}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x74, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.006779558s ago: executing program 5 (id=855): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000980)=0x9, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/59, 0x3b}, 0xa21}], 0x1, 0x103, 0x0) 2.967204908s ago: executing program 1 (id=856): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 2.888738012s ago: executing program 4 (id=858): pwrite64(0xffffffffffffffff, &(0x7f0000000100)="91f1dff70d0f70e95283", 0xa, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x800003, 0x1, 0x5}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r2 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r2, 0x10, 0x2, 0x7000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x18, 0x0, 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x67, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffff}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sync() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) 2.806187548s ago: executing program 5 (id=859): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f307914ef40062b4c30072d72a6fdf1dd4ac931e74f8510aafbab6d686eb57f900814250cd", @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8140) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080), 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r4 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) setreuid(0xffffffffffffffff, 0xee00) keyctl$setperm(0x5, 0x0, 0x220c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.532968908s ago: executing program 2 (id=860): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.324713193s ago: executing program 1 (id=861): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r4, &(0x7f0000000140)=""/68, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) sched_setscheduler(r6, 0x2, &(0x7f0000000240)=0xb) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) 1.64554463s ago: executing program 5 (id=862): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r2, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1.181764265s ago: executing program 2 (id=863): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r1, 0xffffffffffffffff, 0x0) 1.177240413s ago: executing program 5 (id=864): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) 1.013252577s ago: executing program 2 (id=865): syz_io_uring_setup(0x7440, 0x0, &(0x7f0000000140), &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f00000000c0)) 945.577845ms ago: executing program 5 (id=866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) pipe2$watch_queue(&(0x7f00000000c0), 0x80) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) 945.219881ms ago: executing program 4 (id=867): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) flock(0xffffffffffffffff, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) flock(r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x8b}, 0x18) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x8, r6, 0x1, 0x6, 0x6, @random="e88f20ca147c"}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffee}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) 861.684909ms ago: executing program 2 (id=868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009ff1f5a500aa"], 0x3a) 427.57544ms ago: executing program 4 (id=869): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r4, 0x11, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 292.90077ms ago: executing program 2 (id=870): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{0x0}], 0x1) timerfd_gettime(r0, 0x0) 263.83659ms ago: executing program 4 (id=871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00'}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") 1.047788ms ago: executing program 2 (id=872): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f307914ef40062b4c30072d72a6fdf1dd4ac931e74f8510aafbab6d686eb57f900814250cd", @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8140) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080), 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r4, 0xc0386105, 0x0) setreuid(0xffffffffffffffff, 0xee00) keyctl$setperm(0x5, 0x0, 0x220c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=873): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee17688a2006c08020700000000000000767d3f1e475ef80000dba6f10607bdff59100ac45761407a681f009cee4a5acb16f73878df3da400001fb700674f19b44e09f9315033ca2358b207d527cfac25bf79ac2dff06011500390100000000ff02dfccebf6ba000840020079cd174aa951f3c63e5c83", 0x83) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[], 0x1, 0x369, &(0x7f0000000700)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0xe5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 84.218609][ T5823] cgroup: Unknown subsys name 'net' [ 84.320379][ T5823] cgroup: Unknown subsys name 'cpuset' [ 84.329385][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.125833][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.963343][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.975933][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.983653][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.992263][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.000557][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.008451][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.016032][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.018307][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.030562][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.032757][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.046162][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.054183][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.054542][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.062481][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.077450][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.085324][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.092977][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.101369][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.111125][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.113608][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.128573][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.144930][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.147573][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.153280][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.166556][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.750168][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.894634][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.061718][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.132742][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.183620][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.191243][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.198846][ T5842] bridge_slave_0: entered allmulticast mode [ 90.207917][ T5842] bridge_slave_0: entered promiscuous mode [ 90.229119][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.262121][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.269572][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.277143][ T5838] bridge_slave_0: entered allmulticast mode [ 90.285025][ T5838] bridge_slave_0: entered promiscuous mode [ 90.293842][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.304122][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.311438][ T5838] bridge_slave_1: entered allmulticast mode [ 90.319511][ T5838] bridge_slave_1: entered promiscuous mode [ 90.326994][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.334150][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.341631][ T5842] bridge_slave_1: entered allmulticast mode [ 90.349252][ T5842] bridge_slave_1: entered promiscuous mode [ 90.451859][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.506767][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.549469][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.556880][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.564085][ T5840] bridge_slave_0: entered allmulticast mode [ 90.572543][ T5840] bridge_slave_0: entered promiscuous mode [ 90.583324][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.621856][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.629242][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.637073][ T5840] bridge_slave_1: entered allmulticast mode [ 90.644368][ T5840] bridge_slave_1: entered promiscuous mode [ 90.654207][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.689502][ T5842] team0: Port device team_slave_0 added [ 90.704793][ T5842] team0: Port device team_slave_1 added [ 90.787449][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.801000][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.812612][ T5838] team0: Port device team_slave_0 added [ 90.822963][ T5838] team0: Port device team_slave_1 added [ 90.908050][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.915692][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.922964][ T5837] bridge_slave_0: entered allmulticast mode [ 90.931768][ T5837] bridge_slave_0: entered promiscuous mode [ 90.939916][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.947262][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.954415][ T5834] bridge_slave_0: entered allmulticast mode [ 90.961858][ T5834] bridge_slave_0: entered promiscuous mode [ 90.971693][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.979005][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.986559][ T5834] bridge_slave_1: entered allmulticast mode [ 90.994071][ T5834] bridge_slave_1: entered promiscuous mode [ 91.001965][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.009119][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.035329][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.049419][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.056445][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.082418][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.112394][ T5840] team0: Port device team_slave_0 added [ 91.137240][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.144236][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.170385][ T5843] Bluetooth: hci3: command tx timeout [ 91.177289][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.195643][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.202884][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.210311][ T5837] bridge_slave_1: entered allmulticast mode [ 91.218775][ T5837] bridge_slave_1: entered promiscuous mode [ 91.245950][ T51] Bluetooth: hci0: command tx timeout [ 91.246422][ T5847] Bluetooth: hci4: command tx timeout [ 91.251614][ T51] Bluetooth: hci2: command tx timeout [ 91.262997][ T5843] Bluetooth: hci1: command tx timeout [ 91.303494][ T5840] team0: Port device team_slave_1 added [ 91.311384][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.318728][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.345831][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.373595][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.391091][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.425457][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.469285][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.506012][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.512993][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.542441][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.556189][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.563261][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.589558][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.630323][ T5834] team0: Port device team_slave_0 added [ 91.639563][ T5834] team0: Port device team_slave_1 added [ 91.697212][ T5842] hsr_slave_0: entered promiscuous mode [ 91.703672][ T5842] hsr_slave_1: entered promiscuous mode [ 91.743108][ T5838] hsr_slave_0: entered promiscuous mode [ 91.749839][ T5838] hsr_slave_1: entered promiscuous mode [ 91.756915][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.764659][ T5838] Cannot create hsr debugfs directory [ 91.773732][ T5837] team0: Port device team_slave_0 added [ 91.785032][ T5837] team0: Port device team_slave_1 added [ 91.810803][ T1779] cfg80211: failed to load regulatory.db [ 91.827485][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.834473][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.860543][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.873032][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.880143][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.906965][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.008644][ T5840] hsr_slave_0: entered promiscuous mode [ 92.014998][ T5840] hsr_slave_1: entered promiscuous mode [ 92.021561][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.029382][ T5840] Cannot create hsr debugfs directory [ 92.037214][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.044179][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.070314][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.083723][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.090838][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.117085][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.246332][ T5834] hsr_slave_0: entered promiscuous mode [ 92.252755][ T5834] hsr_slave_1: entered promiscuous mode [ 92.260019][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.268082][ T5834] Cannot create hsr debugfs directory [ 92.408941][ T5837] hsr_slave_0: entered promiscuous mode [ 92.416076][ T5837] hsr_slave_1: entered promiscuous mode [ 92.422287][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.430542][ T5837] Cannot create hsr debugfs directory [ 92.830695][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.843947][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.862040][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.885518][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.971725][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.982130][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.995974][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.018565][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.088952][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.106712][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.120797][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.132074][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.234210][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.245655][ T5843] Bluetooth: hci3: command tx timeout [ 93.264136][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.276968][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.290241][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.325819][ T5843] Bluetooth: hci4: command tx timeout [ 93.326353][ T51] Bluetooth: hci0: command tx timeout [ 93.331250][ T5843] Bluetooth: hci1: command tx timeout [ 93.331289][ T5843] Bluetooth: hci2: command tx timeout [ 93.384804][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.443764][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.454854][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.467296][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.495950][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.511215][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.549673][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.568048][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.575435][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.589438][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.619344][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.626542][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.660215][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.667412][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.683392][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.690576][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.828546][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.861036][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.899497][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.921360][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.935622][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.942770][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.996893][ T4120] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.004097][ T4120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.077697][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.102681][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.182210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.191808][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.258714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.265961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.292891][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.367861][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.375023][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.394557][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.401851][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.423280][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.534295][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.740539][ T5834] veth0_vlan: entered promiscuous mode [ 94.778232][ T5834] veth1_vlan: entered promiscuous mode [ 94.803024][ T5842] veth0_vlan: entered promiscuous mode [ 94.843202][ T5842] veth1_vlan: entered promiscuous mode [ 94.924387][ T5834] veth0_macvtap: entered promiscuous mode [ 94.952147][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.993749][ T5834] veth1_macvtap: entered promiscuous mode [ 95.099311][ T5842] veth0_macvtap: entered promiscuous mode [ 95.110439][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.122735][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.151816][ T5842] veth1_macvtap: entered promiscuous mode [ 95.189759][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.203095][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.233294][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.243235][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.253329][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.262791][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.282626][ T5838] veth0_vlan: entered promiscuous mode [ 95.293269][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.327025][ T51] Bluetooth: hci3: command tx timeout [ 95.340252][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.356051][ T5838] veth1_vlan: entered promiscuous mode [ 95.390107][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.399198][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.410052][ T51] Bluetooth: hci0: command tx timeout [ 95.415804][ T5848] Bluetooth: hci2: command tx timeout [ 95.416105][ T5843] Bluetooth: hci1: command tx timeout [ 95.421209][ T5848] Bluetooth: hci4: command tx timeout [ 95.433334][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.442454][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.573220][ T5840] veth0_vlan: entered promiscuous mode [ 95.583650][ T5838] veth0_macvtap: entered promiscuous mode [ 95.653761][ T5838] veth1_macvtap: entered promiscuous mode [ 95.684930][ T5840] veth1_vlan: entered promiscuous mode [ 95.716058][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.733313][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.791061][ T388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.800656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.814506][ T388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.815016][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.833093][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.902367][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.913641][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.923252][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.935355][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.941401][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.944070][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.031183][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.033904][ T5840] veth0_macvtap: entered promiscuous mode [ 96.070576][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.101373][ T5837] veth0_vlan: entered promiscuous mode [ 96.144060][ T5840] veth1_macvtap: entered promiscuous mode [ 96.229422][ T5837] veth1_vlan: entered promiscuous mode [ 96.308472][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.401786][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.441978][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.465809][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.488847][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.509027][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.537959][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.555639][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.589026][ T5837] veth0_macvtap: entered promiscuous mode [ 96.620067][ T5925] loop3: detected capacity change from 0 to 32768 [ 96.662139][ T5837] veth1_macvtap: entered promiscuous mode [ 96.695852][ T5925] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.724273][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.746030][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.875923][ T5925] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 96.904487][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.964979][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.984834][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.998061][ T5925] XFS (loop3): Starting recovery (logdev: internal) [ 97.077880][ T5925] XFS (loop3): Ending recovery (logdev: internal) [ 97.079774][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.114582][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.127562][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.137354][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.162752][ T388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.186154][ T388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.187099][ T5834] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.366823][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.374684][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.405448][ T5848] Bluetooth: hci3: command tx timeout [ 97.492176][ T5848] Bluetooth: hci1: command tx timeout [ 97.498544][ T5848] Bluetooth: hci2: command tx timeout [ 97.503991][ T5848] Bluetooth: hci4: command tx timeout [ 97.512258][ T51] Bluetooth: hci0: command tx timeout [ 97.597728][ T5944] loop0: detected capacity change from 0 to 2048 [ 97.629174][ T5944] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.309119][ T5948] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.462789][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.496036][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.693047][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.713401][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.204042][ T5962] loop0: detected capacity change from 0 to 16 [ 99.588464][ T5962] erofs (device loop0): mounted with root inode @ nid 36. [ 99.739886][ T5962] erofs (device loop0): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 99.754000][ T5962] erofs (device loop0): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 99.765601][ T5962] erofs (device loop0): read error -95 @ 8200 of nid 36 [ 100.283027][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.598803][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 100.668404][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.773465][ T5894] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 100.835686][ T5894] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 100.885359][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.926829][ T5894] usb 5-1: Product: syz [ 100.956746][ T5894] usb 5-1: Manufacturer: syz [ 100.963510][ T5894] usb 5-1: SerialNumber: syz [ 101.015138][ T5894] usb 5-1: config 0 descriptor?? [ 101.088255][ T5982] loop6: detected capacity change from 0 to 524287999 [ 103.016911][ T43] usb 5-1: USB disconnect, device number 2 [ 103.248999][ T6012] loop0: detected capacity change from 0 to 2048 [ 103.292678][ T6012] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.372875][ T5857] udevd[5857]: incorrect nilfs2 checksum on /dev/loop0 [ 103.399530][ T6020] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.914026][ T6030] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 103.923210][ T6030] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 103.988455][ T6031] mmap: syz.1.30 (6031) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.772804][ T6035] loop1: detected capacity change from 0 to 8 [ 104.804422][ T6013] loop3: detected capacity change from 0 to 40427 [ 104.940785][ T6013] F2FS-fs (loop3): build fault injection rate: 690 [ 104.969500][ T6013] F2FS-fs (loop3): Image doesn't support compression [ 105.588623][ T6013] F2FS-fs (loop3): heap/no_heap options were deprecated [ 106.064151][ T6013] F2FS-fs (loop3): Image doesn't support compression [ 106.263909][ T6013] F2FS-fs (loop3): invalid crc value [ 106.348453][ T6013] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 107.686673][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 108.027190][ T6072] loop3: detected capacity change from 0 to 1024 [ 108.085481][ T6072] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 108.194583][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.321580][ T6048] loop2: detected capacity change from 0 to 40427 [ 108.342667][ T6048] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9) [ 108.382555][ T6049] loop4: detected capacity change from 0 to 32768 [ 108.415275][ T6048] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.444634][ T6048] F2FS-fs (loop2): invalid crc value [ 108.455912][ T6049] ======================================================= [ 108.455912][ T6049] WARNING: The mand mount option has been deprecated and [ 108.455912][ T6049] and is ignored by this kernel. Remove the mand [ 108.455912][ T6049] option from the mount to silence this warning. [ 108.455912][ T6049] ======================================================= [ 108.524165][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.977100][ T6087] Zero length message leads to an empty skb [ 109.587193][ T6049] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 109.588065][ T6049] (syz.4.37,6049,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 109.691359][ T6049] (syz.4.37,6049,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 109.861646][ T6048] F2FS-fs (loop2): Start checkpoint disabled! [ 111.388266][ T6110] loop0: detected capacity change from 0 to 16 [ 111.429905][ T6110] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 111.460006][ T5857] udevd[5857]: incorrect cramfs checksum on /dev/loop0 [ 111.546766][ T5856] udevd[5856]: incorrect cramfs checksum on /dev/loop0 [ 111.714605][ T6116] loop1: detected capacity change from 0 to 1024 [ 111.787194][ T6116] EXT4-fs: Ignoring removed nobh option [ 111.821507][ T6116] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.888893][ T6116] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.64: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 111.932797][ T6116] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.64: couldn't read orphan inode 11 (err -117) [ 111.953937][ T6116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.241790][ T6128] loop4: detected capacity change from 0 to 512 [ 112.326128][ T6128] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 112.970939][ T6108] loop3: detected capacity change from 0 to 32768 [ 113.047171][ T6128] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.66: iget: bad i_size value: 360287970189639680 [ 113.067067][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.107767][ T6128] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.66: couldn't read orphan inode 15 (err -117) [ 113.271567][ T6128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.876392][ T6104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.254618][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.389063][ T6156] loop4: detected capacity change from 0 to 64 [ 117.751715][ T6179] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 117.761075][ T6179] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 118.543198][ T6188] loop2: detected capacity change from 0 to 512 [ 118.573820][ T6188] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 118.704785][ T6195] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.719113][ T6195] netlink: 'syz.3.78': attribute type 12 has an invalid length. [ 118.727246][ T6195] netlink: 'syz.3.78': attribute type 29 has an invalid length. [ 118.734917][ T6195] netlink: 148 bytes leftover after parsing attributes in process `syz.3.78'. [ 118.744439][ T6195] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 118.752959][ T6195] netlink: 47 bytes leftover after parsing attributes in process `syz.3.78'. [ 118.765922][ T6195] netlink: 'syz.3.78': attribute type 12 has an invalid length. [ 118.773798][ T6195] netlink: 'syz.3.78': attribute type 29 has an invalid length. [ 118.839661][ T6195] netlink: 148 bytes leftover after parsing attributes in process `syz.3.78'. [ 118.885665][ T6195] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 118.885704][ T6195] netlink: 47 bytes leftover after parsing attributes in process `syz.3.78'. [ 118.894866][ T6188] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.83: iget: bad i_size value: 360287970189639680 [ 118.899771][ T6188] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.83: couldn't read orphan inode 15 (err -117) [ 118.916323][ T6188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.889035][ T6211] Bluetooth: MGMT ver 1.23 [ 119.979676][ T6206] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 120.060238][ T6213] loop0: detected capacity change from 0 to 764 [ 120.202063][ T6216] loop1: detected capacity change from 0 to 512 [ 120.886827][ T6216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.001417][ T6216] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.058197][ T6224] loop3: detected capacity change from 0 to 512 [ 121.315389][ T6192] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 121.977152][ T6230] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 121.989092][ T6230] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 122.153877][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 122.200586][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.229309][ T6203] syz.2.83 (6203) used greatest stack depth: 17992 bytes left [ 122.670535][ T6224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.805575][ T6224] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.878706][ T6224] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.93: corrupted inode contents [ 122.974392][ T6224] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.93: mark_inode_dirty error [ 123.044630][ T6224] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.93: corrupted inode contents [ 123.094939][ T6224] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.93: mark_inode_dirty error [ 123.214875][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.528491][ T6257] loop4: detected capacity change from 0 to 64 [ 125.854650][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.232634][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'. [ 126.858134][ T6323] loop4: detected capacity change from 0 to 512 [ 126.904490][ T6323] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 126.941575][ T6323] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.124: iget: bad i_size value: 360287970189639680 [ 126.967625][ T6323] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.124: couldn't read orphan inode 15 (err -117) [ 126.993012][ T6323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.879658][ T6335] loop2: detected capacity change from 0 to 1024 [ 127.946136][ T6329] loop1: detected capacity change from 0 to 32768 [ 127.954008][ T6335] EXT4-fs: Ignoring removed nobh option [ 128.049955][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.211212][ T6335] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.128: Allocating blocks 497-513 which overlap fs metadata [ 128.241736][ T6335] EXT4-fs (loop2): pa ffff88807d565570: logic 256, phys. 385, len 8 [ 128.250156][ T6335] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 128.288136][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 128.698983][ T6348] loop1: detected capacity change from 0 to 16 [ 128.720215][ T6348] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 128.902224][ T5856] udevd[5856]: incorrect cramfs checksum on /dev/loop1 [ 129.169560][ T6357] loop1: detected capacity change from 0 to 512 [ 129.202019][ T6357] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 129.223313][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.319605][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.136: bad orphan inode 15 [ 129.338668][ T6357] ext4_test_bit(bit=14, block=18) = 1 [ 129.344145][ T6357] is_bad_inode(inode)=0 [ 129.348550][ T6357] NEXT_ORPHAN(inode)=1023 [ 129.352918][ T6357] max_ino=32 [ 129.358857][ T6357] i_nlink=0 [ 129.364326][ T6357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 129.392436][ T6357] ext2 filesystem being mounted at /40/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 130.555787][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 130.608758][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.114326][ T6378] process 'syz.1.139' launched '/dev/fd/5' with NULL argv: empty string added [ 132.031333][ T6388] loop4: detected capacity change from 0 to 16 [ 132.066218][ T6388] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 132.132533][ T5856] udevd[5856]: incorrect cramfs checksum on /dev/loop4 [ 132.770863][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.783846][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.595143][ T6410] loop1: detected capacity change from 0 to 4096 [ 134.746746][ T6416] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.163977][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.451058][ T6441] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.174968][ T6465] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.385807][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.400069][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.418645][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.436142][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.444893][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.497855][ T6520] loop3: detected capacity change from 0 to 2048 [ 144.626726][ T6520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.894095][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.565522][ T5843] Bluetooth: hci5: command tx timeout [ 146.712577][ T6519] chnl_net:caif_netlink_parms(): no params data found [ 148.177260][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.184467][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.227472][ T6519] bridge_slave_0: entered allmulticast mode [ 148.245777][ T6519] bridge_slave_0: entered promiscuous mode [ 148.258112][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.285109][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.305024][ T6519] bridge_slave_1: entered allmulticast mode [ 148.317163][ T6519] bridge_slave_1: entered promiscuous mode [ 148.607158][ T5843] Bluetooth: hci5: command tx timeout [ 149.228953][ T6576] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 149.238233][ T6576] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 149.293783][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.410308][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.646567][ T6519] team0: Port device team_slave_0 added [ 149.691134][ T6519] team0: Port device team_slave_1 added [ 149.848795][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.874575][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.910278][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.933030][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.943824][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.977743][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.012896][ T6564] loop4: detected capacity change from 0 to 32768 [ 150.198636][ T6580] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.356335][ T6519] hsr_slave_0: entered promiscuous mode [ 150.403048][ T6519] hsr_slave_1: entered promiscuous mode [ 150.448230][ T6519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.496013][ T6519] Cannot create hsr debugfs directory [ 150.686404][ T5843] Bluetooth: hci5: command tx timeout [ 152.730537][ T6519] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.786841][ T5843] Bluetooth: hci5: command tx timeout [ 152.821039][ T6519] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.917473][ T6519] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.967467][ T6519] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.054429][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.104344][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.180601][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.187911][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.260776][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.267989][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.464272][ T6662] loop3: detected capacity change from 0 to 16 [ 154.476500][ T6662] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 154.508905][ T5856] udevd[5856]: incorrect cramfs checksum on /dev/loop3 [ 154.613838][ T5856] udevd[5856]: incorrect cramfs checksum on /dev/loop3 [ 155.959226][ T6683] syz.3.250 uses obsolete (PF_INET,SOCK_PACKET) [ 156.779037][ T6693] loop1: detected capacity change from 0 to 16 [ 156.787042][ T6693] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 156.818338][ T5857] udevd[5857]: incorrect cramfs checksum on /dev/loop1 [ 156.864953][ T5856] udevd[5856]: incorrect cramfs checksum on /dev/loop1 [ 157.139366][ T6697] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 159.069626][ T6722] loop1: detected capacity change from 0 to 16 [ 159.107276][ T6722] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 159.141112][ T5856] udevd[5856]: incorrect cramfs checksum on /dev/loop1 [ 159.167379][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 159.267557][ T6728] veth0_vlan: entered allmulticast mode [ 159.850611][ T6741] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 159.859824][ T6741] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 160.753631][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.233252][ T6760] loop2: detected capacity change from 0 to 16 [ 161.321515][ T6760] erofs (device loop2): mounted with root inode @ nid 36. [ 161.489582][ T6760] erofs (device loop2): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 161.500839][ T6760] erofs (device loop2): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 161.512761][ T6760] erofs (device loop2): read error -95 @ 8200 of nid 36 [ 162.422520][ T6519] veth0_vlan: entered promiscuous mode [ 162.503794][ T6519] veth1_vlan: entered promiscuous mode [ 162.668947][ T6519] veth0_macvtap: entered promiscuous mode [ 162.705464][ T6785] loop2: detected capacity change from 0 to 512 [ 162.711219][ T6519] veth1_macvtap: entered promiscuous mode [ 162.746406][ T6785] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 162.774058][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.795956][ T6788] veth0_vlan: entered allmulticast mode [ 162.813208][ T6785] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.283: iget: bad i_size value: 360287970189639680 [ 162.842487][ T6785] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.283: couldn't read orphan inode 15 (err -117) [ 162.881272][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.892973][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.990869][ T6519] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.063448][ T6519] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.110888][ T6519] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.120614][ T6519] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.929179][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.053254][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.079865][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.247917][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.279742][ T6809] loop4: detected capacity change from 0 to 16 [ 164.299309][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.332323][ T6809] erofs (device loop4): mounted with root inode @ nid 36. [ 164.387908][ T6809] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 164.398701][ T6809] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 164.408129][ T6809] erofs (device loop4): read error -95 @ 8200 of nid 36 [ 165.294525][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.303153][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.402810][ T6823] bridge0: entered allmulticast mode [ 165.505741][ T981] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 165.525882][ T6826] loop4: detected capacity change from 0 to 256 [ 165.554591][ T6826] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 165.591547][ T6823] bridge_slave_1: left allmulticast mode [ 165.653464][ T6823] bridge_slave_1: left promiscuous mode [ 165.686648][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.689184][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 165.749656][ T981] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 165.781289][ T981] usb 3-1: config 0 has no interface number 0 [ 165.804874][ T6823] bridge_slave_0: left allmulticast mode [ 165.819848][ T981] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 165.836000][ T6823] bridge_slave_0: left promiscuous mode [ 165.842594][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.854070][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.909265][ T981] usb 3-1: Product: syz [ 165.916525][ T981] usb 3-1: Manufacturer: syz [ 165.922352][ T981] usb 3-1: SerialNumber: syz [ 165.941735][ T981] usb 3-1: config 0 descriptor?? [ 166.008780][ T981] smsc95xx v2.0.0 [ 166.025089][ T981] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 167.035863][ T981] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 167.805760][ T981] usb 3-1: USB disconnect, device number 2 [ 168.264116][ T6859] loop3: detected capacity change from 0 to 16 [ 168.342799][ T6859] erofs (device loop3): mounted with root inode @ nid 36. [ 168.416713][ T6859] erofs (device loop3): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 168.425976][ T6859] erofs (device loop3): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 168.435135][ T6859] erofs (device loop3): read error -95 @ 8200 of nid 36 [ 169.145278][ T5843] Bluetooth: hci3: command tx timeout [ 174.161226][ T6917] loop4: detected capacity change from 0 to 16 [ 174.181211][ T6917] erofs (device loop4): mounted with root inode @ nid 36. [ 174.264956][ T6917] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 174.274231][ T6917] erofs (device loop4): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 174.283552][ T6917] erofs (device loop4): read error -95 @ 8200 of nid 36 [ 178.641710][ T6995] wg2: entered promiscuous mode [ 178.651493][ T6995] wg2: entered allmulticast mode [ 179.408954][ T6963] loop6: detected capacity change from 0 to 524287999 [ 181.310872][ T7018] loop1: detected capacity change from 0 to 512 [ 181.324998][ T7018] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 181.352739][ T7024] loop5: detected capacity change from 0 to 512 [ 181.428827][ T7018] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.358: bad orphan inode 15 [ 181.440344][ T7018] ext4_test_bit(bit=14, block=18) = 1 [ 181.445834][ T7018] is_bad_inode(inode)=0 [ 181.450077][ T7018] NEXT_ORPHAN(inode)=1023 [ 181.454443][ T7018] max_ino=32 [ 181.457738][ T7018] i_nlink=0 [ 181.463741][ T7018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 181.492694][ T7024] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 181.522295][ T7018] ext2 filesystem being mounted at /96/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 181.774866][ T7024] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.359: iget: bad i_size value: 360287970189639680 [ 181.801722][ T7024] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.359: couldn't read orphan inode 15 (err -117) [ 182.814247][ T7024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.020033][ T6519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.085011][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 185.401136][ T7074] loop1: detected capacity change from 0 to 512 [ 185.412560][ T7074] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 185.453562][ T7074] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.379: bad orphan inode 15 [ 185.464643][ T7074] ext4_test_bit(bit=14, block=18) = 1 [ 185.472845][ T7074] is_bad_inode(inode)=0 [ 185.478867][ T7074] NEXT_ORPHAN(inode)=1023 [ 185.483227][ T7074] max_ino=32 [ 185.486540][ T7074] i_nlink=0 [ 185.491663][ T7074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 185.538143][ T7074] ext2 filesystem being mounted at /99/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 185.579521][ T7078] loop2: detected capacity change from 0 to 512 [ 185.702803][ T7078] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 186.504378][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 186.613350][ T7078] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.380: iget: bad i_size value: 360287970189639680 [ 186.685383][ T7078] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.380: couldn't read orphan inode 15 (err -117) [ 186.724546][ T7078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.976508][ T7093] ubi31: attaching mtd0 [ 187.009706][ T7093] ubi31: scanning is finished [ 187.014850][ T7093] ubi31: empty MTD device detected [ 187.611474][ T7093] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 187.634782][ T7093] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3956 bytes [ 187.652814][ T7093] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 187.672116][ T7093] ubi31: VID header offset: 76 (aligned 76), data offset: 140 [ 187.695641][ T7093] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 187.702671][ T7093] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 187.716060][ T7093] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2464081238 [ 187.734662][ T7093] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 187.754626][ T7098] ubi31: background thread "ubi_bgt31d" started, PID 7098 [ 188.757727][ T7095] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 188.767630][ T7095] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 188.777355][ T7095] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 189.001457][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.138288][ T7117] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 190.147297][ T7117] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 191.317598][ T7133] loop2: detected capacity change from 0 to 16 [ 191.334517][ T7133] erofs (device loop2): mounted with root inode @ nid 36. [ 191.373990][ T7133] erofs (device loop2): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 191.385583][ T7133] erofs (device loop2): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 191.395847][ T7133] erofs (device loop2): read error -95 @ 8200 of nid 36 [ 192.435423][ T7147] loop5: detected capacity change from 0 to 512 [ 192.446053][ T7147] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 192.505373][ T7147] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.398: iget: bad i_size value: 360287970189639680 [ 192.617126][ T7147] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.398: couldn't read orphan inode 15 (err -117) [ 192.711684][ T7147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.783986][ T7160] loop4: detected capacity change from 0 to 1024 [ 192.803541][ T7162] loop3: detected capacity change from 0 to 512 [ 192.817335][ T7162] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 192.967298][ T7162] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.404: bad orphan inode 15 [ 192.979183][ T7162] ext4_test_bit(bit=14, block=18) = 1 [ 192.984648][ T7162] is_bad_inode(inode)=0 [ 192.989096][ T7162] NEXT_ORPHAN(inode)=1023 [ 192.993474][ T7162] max_ino=32 [ 192.996787][ T7162] i_nlink=0 [ 193.257009][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 193.276518][ T7162] ext2 filesystem being mounted at /91/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 194.294960][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301638][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.759254][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.923410][ T6519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.414368][ T7184] loop2: detected capacity change from 0 to 1024 [ 195.500221][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.517098][ T7184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.569757][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 195.640083][ T30] audit: type=1800 audit(1748027567.835:2): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.408" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 195.809029][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.721403][ T7223] 9pnet_fd: Insufficient options for proto=fd [ 197.914470][ T7226] loop2: detected capacity change from 0 to 1024 [ 197.995867][ T7226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.033192][ T7226] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 198.118648][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.256598][ T7263] loop6: detected capacity change from 0 to 524287999 [ 200.434401][ T7273] 9pnet_fd: Insufficient options for proto=fd [ 200.451714][ T7274] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.251997][ T7293] netlink: 'syz.4.442': attribute type 27 has an invalid length. [ 201.365048][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.082030][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.119066][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.173224][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.189651][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.197647][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.292708][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.304283][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.319575][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.319680][ T7293] wg2: left promiscuous mode [ 202.334452][ T7293] wg2: left allmulticast mode [ 202.458017][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.495451][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.518019][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.542779][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.570404][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 202.609453][ T7293] veth0_vlan: left allmulticast mode [ 202.690397][ T7293] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.699443][ T7293] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.708927][ T7293] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.717897][ T7293] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.840322][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.849402][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.860425][ T7295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.409138][ T30] audit: type=1326 audit(1748027575.615:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 203.654997][ T30] audit: type=1326 audit(1748027575.645:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 203.691238][ T30] audit: type=1326 audit(1748027575.745:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 203.763180][ T30] audit: type=1326 audit(1748027575.745:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 203.820690][ T30] audit: type=1326 audit(1748027575.745:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 203.922940][ T30] audit: type=1326 audit(1748027575.745:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 203.997517][ T30] audit: type=1326 audit(1748027575.755:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 204.070104][ T30] audit: type=1326 audit(1748027575.755:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 204.103569][ T7348] loop4: detected capacity change from 0 to 512 [ 204.125528][ T7348] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 204.139540][ T30] audit: type=1326 audit(1748027575.765:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 204.173631][ T7348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.203329][ T30] audit: type=1326 audit(1748027575.765:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7326 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcacf98e969 code=0x7ffc0000 [ 204.308942][ T7348] EXT4-fs (loop4): 1 truncate cleaned up [ 204.323816][ T7348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.460888][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.773440][ T7375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 205.897867][ T7379] loop5: detected capacity change from 0 to 512 [ 205.930651][ T7379] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 206.014416][ T7379] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.469: iget: bad i_size value: 360287970189639680 [ 206.082125][ T7379] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.469: couldn't read orphan inode 15 (err -117) [ 206.167547][ T7379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.280436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.868841][ T7405] loop2: detected capacity change from 0 to 512 [ 207.886211][ T7405] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 207.923730][ T7406] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 207.930507][ T7406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.947384][ T7405] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.478: bad orphan inode 15 [ 207.959728][ T7405] ext4_test_bit(bit=14, block=18) = 1 [ 207.965440][ T7405] is_bad_inode(inode)=0 [ 207.969666][ T7405] NEXT_ORPHAN(inode)=1023 [ 207.971825][ T7406] vhci_hcd vhci_hcd.0: Device attached [ 207.974022][ T7405] max_ino=32 [ 207.974035][ T7405] i_nlink=0 [ 207.976145][ T7405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 208.008499][ T7405] ext2 filesystem being mounted at /80/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 208.101096][ T7410] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 209.125313][ T5893] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 209.530919][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 209.614921][ T7408] vhci_hcd: connection reset by peer [ 209.687200][ T7262] vhci_hcd: stop threads [ 209.720511][ T7262] vhci_hcd: release socket [ 209.793330][ T7262] vhci_hcd: disconnect device [ 209.871935][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 209.871954][ T30] audit: type=1326 audit(1748027582.075:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.009143][ T30] audit: type=1326 audit(1748027582.125:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.079563][ T30] audit: type=1326 audit(1748027582.125:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.159215][ T30] audit: type=1326 audit(1748027582.125:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.264765][ T30] audit: type=1326 audit(1748027582.125:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.370312][ T30] audit: type=1326 audit(1748027582.125:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.445716][ T30] audit: type=1326 audit(1748027582.125:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.522959][ T30] audit: type=1326 audit(1748027582.135:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.636001][ T30] audit: type=1326 audit(1748027582.135:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 210.704275][ T30] audit: type=1326 audit(1748027582.135:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 211.695434][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 211.701510][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 211.708635][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 211.867502][ T6519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.591368][ T7477] loop2: detected capacity change from 0 to 512 [ 213.606987][ T7477] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 213.834209][ T7477] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.500: iget: bad i_size value: 360287970189639680 [ 213.875719][ T7477] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.500: couldn't read orphan inode 15 (err -117) [ 213.909391][ T7477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.007810][ T1779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 214.552363][ T5893] vhci_hcd: vhci_device speed not set [ 214.605521][ T1779] usb 2-1: Using ep0 maxpacket: 32 [ 214.627905][ T1779] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.650424][ T1779] usb 2-1: config 0 has no interface number 0 [ 214.713075][ T1779] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.730060][ T7490] ubi: mtd0 is already attached to ubi31 [ 214.751268][ T1779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.831244][ T1779] usb 2-1: Product: syz [ 214.875989][ T1779] usb 2-1: Manufacturer: syz [ 214.880670][ T1779] usb 2-1: SerialNumber: syz [ 214.907408][ T1779] usb 2-1: config 0 descriptor?? [ 214.937703][ T1779] smsc95xx v2.0.0 [ 214.941394][ T1779] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 214.986627][ T7496] __nla_validate_parse: 2 callbacks suppressed [ 214.986650][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 215.005827][ T1779] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 215.125547][ T1779] usb 2-1: USB disconnect, device number 2 [ 215.676310][ T7504] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 215.686298][ T7504] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 217.165267][ T5843] Bluetooth: hci4: command tx timeout [ 217.254687][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.958177][ T7524] loop1: detected capacity change from 0 to 128 [ 218.097492][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 221.074444][ T7542] loop1: detected capacity change from 0 to 32768 [ 221.616557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 221.625905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 221.932360][ T7536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.549656][ T7587] loop3: detected capacity change from 0 to 164 [ 223.016589][ T7587] syz.3.539: attempt to access beyond end of device [ 223.016589][ T7587] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 223.079334][ T7587] syz.3.539: attempt to access beyond end of device [ 223.079334][ T7587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 223.334315][ T7592] hub 2-0:1.0: USB hub found [ 223.377270][ T7592] hub 2-0:1.0: 1 port detected [ 224.623112][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 224.623130][ T30] audit: type=1326 audit(1748027596.825:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 224.730451][ T30] audit: type=1326 audit(1748027596.875:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 224.851996][ T30] audit: type=1326 audit(1748027596.875:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 224.978895][ T30] audit: type=1326 audit(1748027596.875:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 225.007298][ T30] audit: type=1326 audit(1748027596.875:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 225.029950][ T30] audit: type=1326 audit(1748027596.875:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 225.053783][ T30] audit: type=1326 audit(1748027596.875:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 225.077898][ T30] audit: type=1326 audit(1748027596.875:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 225.415286][ T30] audit: type=1326 audit(1748027596.875:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 225.702585][ T30] audit: type=1326 audit(1748027596.885:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7615 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 226.747375][ T7648] sd 0:0:1:0: device reset [ 227.700064][ T7664] loop1: detected capacity change from 0 to 512 [ 227.732183][ T7664] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 227.804505][ T7664] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.563: iget: bad i_size value: 360287970189639680 [ 227.839422][ T7664] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.563: couldn't read orphan inode 15 (err -117) [ 227.861491][ T7664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.875233][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 227.928405][ T7642] loop5: detected capacity change from 0 to 32768 [ 228.053256][ T7669] loop4: detected capacity change from 0 to 164 [ 228.192962][ T7669] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 228.222274][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 228.229907][ T43] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 228.247014][ T43] usb 4-1: config 0 has no interface number 0 [ 228.266264][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 228.289529][ T7669] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 228.298995][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.328767][ T7669] Symlink component flag not implemented [ 228.334462][ T7669] Symlink component flag not implemented [ 228.360171][ T43] usb 4-1: Product: syz [ 228.376788][ T43] usb 4-1: Manufacturer: syz [ 228.381439][ T43] usb 4-1: SerialNumber: syz [ 228.390358][ T7669] Symlink component flag not implemented (7) [ 228.432659][ T43] usb 4-1: config 0 descriptor?? [ 228.455952][ T7669] Symlink component flag not implemented (116) [ 228.482835][ T43] smsc95xx v2.0.0 [ 228.505926][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 228.728272][ T43] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 228.748770][ T43] usb 4-1: USB disconnect, device number 2 [ 229.590080][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.608949][ T7683] loop4: detected capacity change from 0 to 512 [ 229.649260][ T7683] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 229.719083][ T7683] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.566: bad orphan inode 15 [ 229.730758][ T7683] ext4_test_bit(bit=14, block=18) = 1 [ 229.736280][ T7683] is_bad_inode(inode)=0 [ 229.740498][ T7683] NEXT_ORPHAN(inode)=1023 [ 229.744876][ T7683] max_ino=32 [ 229.748244][ T7683] i_nlink=0 [ 229.753323][ T7683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 229.787099][ T7683] ext2 filesystem being mounted at /123/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 229.904522][ T7685] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 230.845620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.965681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.192986][ T7703] loop2: detected capacity change from 0 to 128 [ 231.336274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.395496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.691781][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 231.695730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.735423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.743800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 233.955662][ T981] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 234.245662][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 234.265096][ T981] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 234.293036][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 234.312658][ T981] usb 2-1: config 0 has no interface number 0 [ 234.329355][ T981] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.347211][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.355666][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 234.374807][ T981] usb 2-1: Product: syz [ 234.381762][ T7742] loop5: detected capacity change from 0 to 128 [ 234.384399][ T981] usb 2-1: Manufacturer: syz [ 234.423442][ T981] usb 2-1: SerialNumber: syz [ 234.441984][ T981] usb 2-1: config 0 descriptor?? [ 234.475459][ T981] smsc95xx v2.0.0 [ 234.479183][ T981] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 234.542837][ T981] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 234.697580][ T5893] usb 2-1: USB disconnect, device number 3 [ 234.761481][ T7719] loop3: detected capacity change from 0 to 32768 [ 234.792473][ T7747] netlink: 76 bytes leftover after parsing attributes in process `syz.5.585'. [ 235.072918][ T7751] ubi: mtd0 is already attached to ubi31 [ 236.845325][ T5843] Bluetooth: hci4: command tx timeout [ 237.352195][ T7775] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 238.157438][ T7783] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 238.166513][ T7783] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 239.000321][ T7787] ubi: mtd0 is already attached to ubi31 [ 240.004494][ T7779] loop5: detected capacity change from 0 to 32768 [ 240.044644][ T7774] loop2: detected capacity change from 0 to 32768 [ 240.699097][ T7814] usb usb8: selecting invalid altsetting 7 [ 240.790847][ T7773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.047923][ T7818] ubi: mtd0 is already attached to ubi31 [ 241.363715][ T7820] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 241.405681][ T7820] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 241.512059][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 241.771152][ T7825] netlink: 76 bytes leftover after parsing attributes in process `syz.4.613'. [ 243.124545][ T7846] loop2: detected capacity change from 0 to 128 [ 243.216652][ T7848] ubi: mtd0 is already attached to ubi31 [ 243.378355][ T7851] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 243.583833][ T7832] loop6: detected capacity change from 0 to 524287999 [ 243.624296][ T388] kworker/u8:5: attempt to access beyond end of device [ 243.624296][ T388] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 244.483658][ T7869] 8021q: VLANs not supported on ip6gre0 [ 244.612262][ T7875] loop1: detected capacity change from 0 to 128 [ 245.485427][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 245.665711][ T7884] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 246.727966][ T7904] 8021q: VLANs not supported on ip6gre0 [ 248.277922][ T7926] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 248.561780][ T7935] 8021q: VLANs not supported on ip6gre0 [ 248.869118][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.045214][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 249.180666][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 249.431412][ T10] usb 5-1: config 0 has no interface number 0 [ 249.455538][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 249.507226][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.557336][ T10] usb 5-1: Product: syz [ 249.594841][ T10] usb 5-1: Manufacturer: syz [ 249.620221][ T10] usb 5-1: SerialNumber: syz [ 249.634918][ T10] usb 5-1: config 0 descriptor?? [ 249.678495][ T10] smsc95xx v2.0.0 [ 249.682298][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 249.707889][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 249.721982][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 249.906767][ T978] usb 5-1: USB disconnect, device number 3 [ 250.935245][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 250.977267][ T7955] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.384285][ T7972] loop2: detected capacity change from 0 to 512 [ 251.426305][ T7972] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 251.478241][ T7972] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.668: iget: bad i_size value: 360287970189639680 [ 251.532782][ T7972] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.668: couldn't read orphan inode 15 (err -117) [ 251.589887][ T7972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.002363][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 252.634407][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.897723][ T8002] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 253.729696][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 253.749411][ T8009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.682'. [ 254.115247][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 254.115266][ T30] audit: type=1326 audit(1748027626.315:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.159214][ T30] audit: type=1326 audit(1748027626.315:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.188609][ T30] audit: type=1326 audit(1748027626.395:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.251462][ T30] audit: type=1326 audit(1748027626.425:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.313435][ T30] audit: type=1326 audit(1748027626.425:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.406573][ T30] audit: type=1326 audit(1748027626.425:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.458043][ T8024] loop4: detected capacity change from 0 to 512 [ 254.471121][ T8024] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 254.491239][ T30] audit: type=1326 audit(1748027626.425:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.496344][ T8024] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.688: bad orphan inode 15 [ 254.530431][ T8024] ext4_test_bit(bit=14, block=18) = 1 [ 254.536004][ T8024] is_bad_inode(inode)=0 [ 254.540192][ T8024] NEXT_ORPHAN(inode)=1023 [ 254.544545][ T8024] max_ino=32 [ 254.548143][ T8024] i_nlink=0 [ 254.553184][ T8024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 254.565625][ T30] audit: type=1326 audit(1748027626.425:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8016 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf778e969 code=0x7ffc0000 [ 254.588042][ T8024] ext2 filesystem being mounted at /146/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 255.638939][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.651899][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.658568][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.832181][ T8037] loop5: detected capacity change from 0 to 128 [ 255.861366][ T8035] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 255.882217][ T8037] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.963307][ T8037] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.061744][ T8037] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.092871][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 256.319938][ T8045] 8021q: VLANs not supported on ip6gre0 [ 256.398832][ T30] audit: type=1326 audit(1748027628.605:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 256.731417][ T30] audit: type=1326 audit(1748027628.605:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.5.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2078e969 code=0x7ffc0000 [ 257.885258][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 258.188471][ T8081] 8021q: VLANs not supported on ip6gre0 [ 258.467244][ T8070] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 260.295502][ T8109] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 260.379515][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 261.149430][ T8121] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 262.424972][ T8133] loop5: detected capacity change from 0 to 512 [ 262.489665][ T8133] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 262.528270][ T8133] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.724: iget: bad i_size value: 360287970189639680 [ 262.542036][ T8133] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.724: couldn't read orphan inode 15 (err -117) [ 262.577891][ T8133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.795328][ T8141] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 262.847797][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 263.381523][ T6519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.391535][ T8155] loop2: detected capacity change from 0 to 128 [ 263.662070][ T8155] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.953189][ T8155] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.105269][ T8155] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.926088][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 265.731645][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'. [ 265.789185][ T8184] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 266.248971][ T8198] loop2: detected capacity change from 0 to 128 [ 266.329991][ T8198] loop2: detected capacity change from 0 to 2048 [ 266.340080][ T8198] EXT4-fs: inline encryption not supported [ 266.348638][ T8198] EXT4-fs: Ignoring removed i_version option [ 266.354791][ T8198] ext4: Unknown parameter 'audit' [ 267.805374][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 267.970362][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 267.983105][ T8218] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 268.909442][ T8240] loop1: detected capacity change from 0 to 512 [ 268.956551][ T8240] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 268.980205][ T8240] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.762: iget: bad i_size value: 360287970189639680 [ 269.050754][ T8240] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.762: couldn't read orphan inode 15 (err -117) [ 269.140450][ T8249] loop4: detected capacity change from 0 to 128 [ 269.175010][ T8249] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.214371][ T8240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.274991][ T8249] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.696466][ T5966] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.920028][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.083262][ T8267] loop4: detected capacity change from 0 to 128 [ 270.139292][ T8266] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 270.282929][ T8267] loop4: detected capacity change from 0 to 2048 [ 270.322471][ T8267] EXT4-fs: inline encryption not supported [ 270.328583][ T8267] EXT4-fs: Ignoring removed i_version option [ 270.334745][ T8267] ext4: Unknown parameter 'audit' [ 271.191942][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 271.205074][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 272.210714][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 272.480088][ T8297] loop4: detected capacity change from 0 to 128 [ 272.557100][ T8297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.590700][ T8297] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.689255][ T5837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.771004][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.785'. [ 272.821973][ T8306] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.831378][ T8306] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.840227][ T8306] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.849108][ T8306] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.870036][ T8306] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.879241][ T8306] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.888294][ T8306] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.897481][ T8306] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.960405][ T8309] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 274.302549][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 274.315460][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 274.813682][ T8327] loop1: detected capacity change from 0 to 128 [ 274.918693][ T8327] loop1: detected capacity change from 0 to 2048 [ 274.955584][ T8327] EXT4-fs: inline encryption not supported [ 274.961569][ T8327] EXT4-fs: Ignoring removed i_version option [ 275.001431][ T8327] ext4: Unknown parameter 'audit' [ 275.005313][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 275.119046][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.795'. [ 275.305015][ T8341] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 275.459370][ T8344] loop5: detected capacity change from 0 to 512 [ 275.476573][ T8344] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 275.497130][ T8344] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.798: iget: bad i_size value: 360287970189639680 [ 275.530823][ T8344] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.798: couldn't read orphan inode 15 (err -117) [ 275.546423][ T8344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.815223][ T8357] loop3: detected capacity change from 0 to 16 [ 275.826341][ T8357] erofs (device loop3): mounted with root inode @ nid 36. [ 275.848089][ T8357] erofs (device loop3): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 275.857545][ T8357] erofs (device loop3): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 275.866780][ T8357] erofs (device loop3): read error -95 @ 8200 of nid 36 [ 277.096605][ T6519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.114571][ T8362] ubi: mtd0 is already attached to ubi31 [ 277.164664][ T8364] loop2: detected capacity change from 0 to 512 [ 277.189906][ T8364] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 277.262349][ T8364] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.804: corrupted xattr entries [ 277.333559][ T8372] loop5: detected capacity change from 0 to 512 [ 277.340111][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 277.396080][ T8364] EXT4-fs (loop2): Remounting filesystem read-only [ 277.411661][ T8364] EXT4-fs (loop2): 1 truncate cleaned up [ 277.450285][ T8364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.616336][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.953217][ T8384] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 278.502852][ T8393] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 278.512073][ T8393] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 279.416162][ T8401] loop5: detected capacity change from 0 to 512 [ 279.436324][ T8401] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 279.451200][ T8399] ubi: mtd0 is already attached to ubi31 [ 279.511860][ T8401] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.816: iget: bad i_size value: 360287970189639680 [ 279.542730][ T8401] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.816: couldn't read orphan inode 15 (err -117) [ 279.590618][ T8401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.975619][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 280.733387][ T8412] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 280.763922][ T6519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.865268][ T8430] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 280.874279][ T8430] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 281.614125][ T8433] ubi: mtd0 is already attached to ubi31 [ 282.051521][ T8437] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 283.481018][ T8469] loop5: detected capacity change from 0 to 512 [ 283.492035][ T8469] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 283.544740][ T8469] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.839: iget: bad i_size value: 360287970189639680 [ 283.564247][ T8469] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.839: couldn't read orphan inode 15 (err -117) [ 283.580144][ T8469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.564616][ T6519] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.495545][ T8488] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 286.170760][ T8517] loop4: detected capacity change from 0 to 512 [ 286.410545][ T8517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.445946][ T8517] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.474511][ T8517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.955530][ T8507] loop6: detected capacity change from 0 to 524287999 [ 287.035839][ T8517] loop4: detected capacity change from 0 to 512 [ 287.076038][ T8517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.207622][ T8517] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.623897][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 287.623916][ T30] audit: type=1800 audit(1748027659.825:139): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.858" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 288.002645][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.186338][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 288.816262][ T8562] loop4: detected capacity change from 0 to 128 [ 288.941670][ T31] INFO: task syz.0.111:6287 blocked for more than 143 seconds. [ 288.985385][ T31] Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 [ 288.992720][ T8565] loop3: detected capacity change from 0 to 256 [ 289.008718][ T8529] syz.1.861: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 289.012413][ T8562] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.047242][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.050544][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.1.861 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) [ 289.050578][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.050606][ T8529] Call Trace: [ 289.050616][ T8529] [ 289.050627][ T8529] dump_stack_lvl+0x189/0x250 [ 289.050666][ T8529] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 289.050701][ T8529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.050724][ T8529] ? __pfx__printk+0x10/0x10 [ 289.050750][ T8529] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 289.050778][ T8529] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 289.050815][ T8529] warn_alloc+0x214/0x310 [ 289.050851][ T8529] ? __pfx_warn_alloc+0x10/0x10 [ 289.050892][ T8529] ? __get_vm_area_node+0x28f/0x300 [ 289.050918][ T8529] ? hash_netiface_create+0x358/0xfe0 [ 289.050952][ T8529] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 289.051015][ T8529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 289.051043][ T8529] ? hash_netiface_create+0x358/0xfe0 [ 289.051073][ T8529] ? __get_vm_area_node+0x28f/0x300 [ 289.051099][ T8529] ? hash_netiface_create+0x358/0xfe0 [ 289.051128][ T8529] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 289.051157][ T8529] ? hash_netiface_create+0x358/0xfe0 [ 289.051181][ T8529] ? do_syscall_64+0xfa/0x3b0 [ 289.051226][ T8529] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 289.051274][ T8529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 289.051309][ T8529] ? rcu_is_watching+0x15/0xb0 [ 289.051334][ T8529] ? hash_netiface_create+0x358/0xfe0 [ 289.051359][ T8529] ? hash_netiface_create+0x358/0xfe0 [ 289.051383][ T8529] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 289.051411][ T8529] ? hash_netiface_create+0x358/0xfe0 [ 289.051437][ T8529] ? hash_netiface_create+0x2fe/0xfe0 [ 289.051470][ T8529] hash_netiface_create+0x358/0xfe0 [ 289.051512][ T8529] ? __nla_parse+0x40/0x60 [ 289.051543][ T8529] ? __pfx_hash_netiface_create+0x10/0x10 [ 289.051574][ T8529] ip_set_create+0xa97/0x1940 [ 289.051612][ T8529] ? ip_set_create+0x4a2/0x1940 [ 289.051655][ T8529] ? __pfx_ip_set_create+0x10/0x10 [ 289.051727][ T8529] nfnetlink_rcv_msg+0xb4a/0x1130 [ 289.051758][ T8529] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 289.051810][ T8529] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 289.051837][ T8529] ? kasan_save_free_info+0x46/0x50 [ 289.051928][ T8529] netlink_rcv_skb+0x208/0x470 [ 289.051966][ T8529] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 289.051998][ T8529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.052049][ T8529] ? bpf_lsm_capable+0x9/0x20 [ 289.052073][ T8529] ? security_capable+0x7e/0x2e0 [ 289.052118][ T8529] nfnetlink_rcv+0x26a/0x2520 [ 289.052151][ T8529] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 289.052184][ T8529] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 289.052212][ T8529] ? __dev_queue_xmit+0x27e/0x3a70 [ 289.052238][ T8529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.052275][ T8529] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 289.052304][ T8529] ? __pfx___dev_queue_xmit+0x10/0x10 [ 289.052347][ T8529] ? ref_tracker_free+0x63a/0x7d0 [ 289.052372][ T8529] ? __copy_skb_header+0xa7/0x550 [ 289.052398][ T8529] ? __pfx_ref_tracker_free+0x10/0x10 [ 289.052424][ T8529] ? __skb_clone+0x63/0x7a0 [ 289.052454][ T8529] ? __skb_clone+0x483/0x7a0 [ 289.052487][ T8529] ? skb_clone+0x246/0x3a0 [ 289.052516][ T8529] ? __netlink_deliver_tap+0x807/0x850 [ 289.052553][ T8529] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.052602][ T8529] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.052639][ T8529] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.052683][ T8529] netlink_unicast+0x75b/0x8d0 [ 289.052728][ T8529] netlink_sendmsg+0x805/0xb30 [ 289.052778][ T8529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.052819][ T8529] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.052843][ T8529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.052875][ T8529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.052914][ T8529] __sock_sendmsg+0x219/0x270 [ 289.052950][ T8529] ____sys_sendmsg+0x505/0x830 [ 289.052981][ T8529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.053017][ T8529] ? import_iovec+0x74/0xa0 [ 289.053056][ T8529] ___sys_sendmsg+0x21f/0x2a0 [ 289.053082][ T8529] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.053150][ T8529] ? __fget_files+0x2a/0x420 [ 289.053176][ T8529] ? __fget_files+0x3a0/0x420 [ 289.053216][ T8529] __x64_sys_sendmsg+0x19b/0x260 [ 289.053244][ T8529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.053281][ T8529] ? rcu_is_watching+0x15/0xb0 [ 289.053309][ T8529] ? do_syscall_64+0xbe/0x3b0 [ 289.053343][ T8529] do_syscall_64+0xfa/0x3b0 [ 289.053371][ T8529] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.053397][ T8529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.053420][ T8529] ? clear_bhb_loop+0x60/0xb0 [ 289.053450][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.053473][ T8529] RIP: 0033:0x7f323e58e969 [ 289.053501][ T8529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.053521][ T8529] RSP: 002b:00007f323f41d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.053547][ T8529] RAX: ffffffffffffffda RBX: 00007f323e7b5fa0 RCX: 00007f323e58e969 [ 289.053564][ T8529] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 289.053579][ T8529] RBP: 00007f323e610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 289.053594][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.053613][ T8529] R13: 0000000000000000 R14: 00007f323e7b5fa0 R15: 00007ffc26398de8 [ 289.053650][ T8529] [ 289.095543][ T8529] Mem-Info: [ 289.102080][ T31] task:syz.0.111 state:D [ 289.128779][ T8565] FAT-fs (loop3): Directory bread(block 64) failed [ 289.134779][ T8562] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.146388][ T8529] active_anon:7600 inactive_anon:0 isolated_anon:0 [ 289.146388][ T8529] active_file:1470 inactive_file:39917 isolated_file:0 [ 289.146388][ T8529] unevictable:768 dirty:41 writeback:0 [ 289.146388][ T8529] slab_reclaimable:10740 slab_unreclaimable:98518 [ 289.146388][ T8529] mapped:38351 shmem:4274 pagetables:1195 [ 289.146388][ T8529] sec_pagetables:0 bounce:0 [ 289.146388][ T8529] kernel_misc_reclaimable:0 [ 289.146388][ T8529] free:1278838 free_pcp:17899 free_cma:0 [ 289.165235][ T31] stack:26184 pid:6287 tgid:6286 ppid:5838 task_flags:0x400140 flags:0x00004006 [ 289.174804][ T8565] FAT-fs (loop3): Directory bread(block 65) failed [ 289.397217][ T31] Call Trace: [ 289.480476][ T8562] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.481556][ T8529] Node 0 active_anon:42000kB inactive_anon:0kB active_file:5880kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164804kB dirty:164kB writeback:0kB shmem:26960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 289.486058][ T31] [ 289.490190][ T8565] FAT-fs (loop3): Directory bread(block 66) failed [ 289.495430][ T31] __schedule+0x16f5/0x4d00 [ 289.501597][ T8529] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 289.506408][ T31] ? do_raw_spin_lock+0x121/0x290 [ 289.531219][ T8565] FAT-fs (loop3): Directory bread(block 67) failed [ 289.548785][ T31] ? schedule+0x165/0x360 [ 289.579154][ T8565] FAT-fs (loop3): Directory bread(block 68) failed [ 289.594906][ T8529] Node 0 [ 289.691722][ T8565] FAT-fs (loop3): Directory bread(block 69) failed [ 289.734704][ T8529] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 289.734760][ T8529] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 289.734821][ T8529] Node 0 DMA32 free:1200960kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41956kB inactive_anon:0kB active_file:5880kB inactive_file:157736kB unevictable:1536kB writepending:164kB present:3129332kB managed:2561144kB mlocked:0kB bounce:0kB free_pcp:38756kB local_pcp:19116kB free_cma:0kB [ 289.734880][ T8529] lowmem_reserve[]: 0 0 1 1 1 [ 289.734923][ T8529] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 289.734978][ T8529] lowmem_reserve[]: 0 0 0 0 0 [ 289.735020][ T8529] Node 1 Normal free:3899016kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20648kB local_pcp:12612kB free_cma:0kB [ 289.735078][ T8529] lowmem_reserve[]: 0 0 0 0 0 [ 289.735182][ T8529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.735350][ T8529] Node 0 DMA32: 18*4kB (UE) 24*8kB (UME) 25*16kB (E) 8*32kB (UE) 3*64kB (UE) 19*128kB (M) 33*256kB (M) 10*512kB (M) 8*1024kB (ME) 2*2048kB (M) 286*4096kB (M) = 1200856kB [ 289.735565][ T8529] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 289.735681][ T8529] Node 1 Normal: 168*4kB (UE) 43*8kB (UME) 41*16kB (UME) 76*32kB (UME) 30*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB [ 289.850165][ T31] ? __lock_acquire+0xab9/0xd20 [ 289.871916][ T8529] (M) [ 289.958673][ T31] ? __pfx___schedule+0x10/0x10 [ 290.079634][ T8529] = 3899016kB [ 290.082201][ T8565] FAT-fs (loop3): Directory bread(block 70) failed [ 290.089999][ T8565] FAT-fs (loop3): Directory bread(block 71) failed [ 290.096690][ T8565] FAT-fs (loop3): Directory bread(block 72) failed [ 290.103233][ T8565] FAT-fs (loop3): Directory bread(block 73) failed [ 290.114085][ T8529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.119750][ T31] ? schedule+0x91/0x360 [ 290.147363][ T8529] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.161651][ T8529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.165175][ T31] schedule+0x165/0x360 [ 290.172366][ T8529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.175433][ T31] netfs_wait_for_request+0x1f0/0x600 [ 290.175465][ T31] ? __pfx_netfs_write_collection+0x10/0x10 [ 290.175505][ T31] ? __pfx_netfs_wait_for_request+0x10/0x10 [ 290.175528][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 290.175572][ T31] netfs_unbuffered_write_iter_locked+0x52a/0x910 [ 290.175608][ T31] netfs_unbuffered_write_iter+0x4c4/0x660 [ 290.189748][ T8529] 45764 total pagecache pages [ 290.215282][ T31] do_iter_readv_writev+0x56b/0x7f0 [ 290.234426][ T8529] 0 pages in swap cache [ 290.241111][ T8529] Free swap = 124996kB [ 290.251666][ T8529] Total swap = 124996kB [ 290.255243][ T31] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 290.264479][ T8529] 2097051 pages RAM [ 290.269522][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 290.270680][ T8529] 0 pages HighMem/MovableOnly [ 290.279521][ T31] vfs_writev+0x306/0x9a0 [ 290.282426][ T8529] 424659 pages reserved [ 290.290563][ T8529] 0 pages cma reserved [ 290.294233][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.309741][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 290.335229][ T31] ? __fget_files+0x2a/0x420 [ 290.340066][ T31] ? __fget_files+0x3a0/0x420 [ 290.350353][ T31] ? __fget_files+0x2a/0x420 [ 290.359521][ T31] do_writev+0x14d/0x2d0 [ 290.369662][ T31] ? __pfx_do_writev+0x10/0x10 [ 290.374544][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.380966][ T31] ? do_syscall_64+0xbe/0x3b0 [ 290.388638][ T31] do_syscall_64+0xfa/0x3b0 [ 290.393392][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.400201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.409203][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.413990][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.421524][ T31] RIP: 0033:0x7f5bdf78e969 [ 290.432083][ T31] RSP: 002b:00007f5be05e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 290.442270][ T31] RAX: ffffffffffffffda RBX: 00007f5bdf9b5fa0 RCX: 00007f5bdf78e969 [ 290.453485][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 290.463181][ T31] RBP: 00007f5bdf810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 290.478232][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.489986][ T31] R13: 0000000000000000 R14: 00007f5bdf9b5fa0 R15: 00007fff5137ebd8 [ 290.500565][ T31] [ 290.503873][ T31] [ 290.503873][ T31] Showing all locks held in the system: [ 290.514339][ T31] 1 lock held by khungtaskd/31: [ 290.521720][ T31] #0: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 290.548875][ T31] 2 locks held by getty/5595: [ 290.553683][ T31] #0: ffff888030a2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.564457][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 290.578585][ T31] 1 lock held by syz-executor/5834: [ 290.583983][ T31] #0: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 290.604529][ T31] 3 locks held by syz.0.111/6287: [ 290.609824][ T31] #0: ffff8880342ba478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 290.623404][ T31] #1: ffff888028cdc428 (sb_writers#17){.+.+}-{0:0}, at: vfs_writev+0x274/0x9a0 [ 290.632675][ T31] #2: ffff8880571807b8 (&sb->s_type->i_mutex_key#21){++++}-{4:4}, at: netfs_start_io_direct+0x1ef/0x230 [ 290.651793][ T31] 1 lock held by syz.1.861/8529: [ 290.658423][ T31] [ 290.660998][ T31] ============================================= [ 290.660998][ T31] [ 290.694856][ T31] NMI backtrace for cpu 1 [ 290.694878][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) [ 290.694901][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.694913][ T31] Call Trace: [ 290.694923][ T31] [ 290.694932][ T31] dump_stack_lvl+0x189/0x250 [ 290.694954][ T31] ? __wake_up_klogd+0xd9/0x110 [ 290.694981][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.695000][ T31] ? __pfx__printk+0x10/0x10 [ 290.695035][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.695070][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.695102][ T31] ? _printk+0xcf/0x120 [ 290.695128][ T31] ? __pfx__printk+0x10/0x10 [ 290.695153][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.695184][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.695219][ T31] watchdog+0xfee/0x1030 [ 290.695250][ T31] ? watchdog+0x1de/0x1030 [ 290.695287][ T31] kthread+0x711/0x8a0 [ 290.695315][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.695341][ T31] ? __pfx_kthread+0x10/0x10 [ 290.695367][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.695388][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.695410][ T31] ? __pfx_kthread+0x10/0x10 [ 290.695436][ T31] ret_from_fork+0x3fc/0x770 [ 290.695470][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.695507][ T31] ? __switch_to_asm+0x39/0x70 [ 290.695528][ T31] ? __switch_to_asm+0x33/0x70 [ 290.695549][ T31] ? __pfx_kthread+0x10/0x10 [ 290.695574][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.695614][ T31] [ 290.848787][ T31] Sending NMI from CPU 1 to CPUs 0: [ 290.854050][ C0] NMI backtrace for cpu 0 [ 290.854067][ C0] CPU: 0 UID: 0 PID: 7262 Comm: kworker/u8:14 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) [ 290.854088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.854100][ C0] Workqueue: krdsd rds_connect_worker [ 290.854131][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 290.854156][ C0] Code: 08 a0 9c 92 65 8b 15 e8 5c dc 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 <83> fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c [ 290.854170][ C0] RSP: 0018:ffffc90003e7f858 EFLAGS: 00000246 [ 290.854184][ C0] RAX: ffffffff89432700 RBX: ffff88803522eae8 RCX: ffff8880791e9e00 [ 290.854198][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.854208][ C0] RBP: 0000000000000000 R08: ffff88803522e89f R09: 1ffff11006a45d13 [ 290.854220][ C0] R10: dffffc0000000000 R11: ffffed1006a45d14 R12: 1ffff11006a45cef [ 290.854233][ C0] R13: 0000000000000000 R14: ffff88803522e600 R15: ffff88803522e778 [ 290.854245][ C0] FS: 0000000000000000(0000) GS:ffff888125c56000(0000) knlGS:0000000000000000 [ 290.854259][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.854270][ C0] CR2: 00007fbcf7980178 CR3: 000000000df38000 CR4: 00000000003526f0 [ 290.854286][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.854295][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.854306][ C0] Call Trace: [ 290.854313][ C0] [ 290.854319][ C0] __sk_destruct+0x130/0x660 [ 290.854340][ C0] inet_release+0x184/0x210 [ 290.854362][ C0] sock_release+0x82/0x150 [ 290.854384][ C0] rds_tcp_conn_path_connect+0x37d/0x680 [ 290.854408][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 290.854435][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 290.854474][ C0] rds_connect_worker+0x1d5/0x290 [ 290.854500][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 290.854528][ C0] process_scheduled_works+0xade/0x17b0 [ 290.854570][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.854607][ C0] worker_thread+0x8a0/0xda0 [ 290.854630][ C0] ? __kthread_parkme+0x7b/0x200 [ 290.854653][ C0] kthread+0x711/0x8a0 [ 290.854674][ C0] ? __pfx_worker_thread+0x10/0x10 [ 290.854690][ C0] ? __pfx_kthread+0x10/0x10 [ 290.854711][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.854729][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.854747][ C0] ? __pfx_kthread+0x10/0x10 [ 290.854767][ C0] ret_from_fork+0x3fc/0x770 [ 290.854793][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.854821][ C0] ? __switch_to_asm+0x39/0x70 [ 290.854840][ C0] ? __switch_to_asm+0x33/0x70 [ 290.854857][ C0] ? __pfx_kthread+0x10/0x10 [ 290.854877][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.854904][ C0] [ 291.068639][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 291.068671][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) [ 291.068699][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.068714][ T31] Call Trace: [ 291.068723][ T31] [ 291.068735][ T31] dump_stack_lvl+0x99/0x250 [ 291.068763][ T31] ? __asan_memcpy+0x40/0x70 [ 291.068799][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.068822][ T31] ? __pfx__printk+0x10/0x10 [ 291.068863][ T31] panic+0x2db/0x790 [ 291.068906][ T31] ? __pfx_panic+0x10/0x10 [ 291.068937][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 291.068967][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 291.068999][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 291.069044][ T31] watchdog+0x102d/0x1030 [ 291.069078][ T31] ? watchdog+0x1de/0x1030 [ 291.069119][ T31] kthread+0x711/0x8a0 [ 291.069150][ T31] ? __pfx_watchdog+0x10/0x10 [ 291.069180][ T31] ? __pfx_kthread+0x10/0x10 [ 291.069209][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.069233][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.069258][ T31] ? __pfx_kthread+0x10/0x10 [ 291.069285][ T31] ret_from_fork+0x3fc/0x770 [ 291.069322][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 291.069362][ T31] ? __switch_to_asm+0x39/0x70 [ 291.069385][ T31] ? __switch_to_asm+0x33/0x70 [ 291.069407][ T31] ? __pfx_kthread+0x10/0x10 [ 291.069435][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.069478][ T31] [ 291.274791][ T31] Kernel Offset: disabled [ 291.279132][ T31] Rebooting in 86400 seconds..