last executing test programs: 10.875643088s ago: executing program 0 (id=1556): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000003180), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 9.904580384s ago: executing program 1 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000600)={0x2, 0x0, 0x543117e1, 0x4}) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x43, 0x1000}], 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x7, 0x1, 0x0, "27050000000010f3ff04c70000000400fe9bf40700444af1ffffff00", 0x50453e67}) ioctl$TIOCSTI(r4, 0x5412, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) unshare(0x8000000) 9.390101278s ago: executing program 2 (id=1562): socket(0xa, 0x3, 0x87) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) socket(0x1, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 9.024243427s ago: executing program 1 (id=1563): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0xe, r2, 'id1\x00'}) fcntl$addseals(r7, 0x409, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r6, r5}}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000ff0200000000000000000000000000014e240000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000020000e9000000000180fffffffffffffeffffffffffffff000000000008000000e385000000000000000020002000000b0000000000000000000000000000000101"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 8.941372059s ago: executing program 2 (id=1564): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) open(0x0, 0x171000, 0x2a4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 7.240748195s ago: executing program 2 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x32ab60b1caec533c, 0xffffffffffffffff, 0x3000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000380)) read$dsp(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x4, 0xa}, {0x5, 0x5, 0x101, 0x52, 0x100}}}}, 0x17) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) socket$packet(0x11, 0x3, 0x300) 7.236645375s ago: executing program 0 (id=1577): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 7.236182055s ago: executing program 1 (id=1570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$inet(0x2, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @local, @void, {@arp={0x806, @generic={0x303, 0x86dd, 0x6, 0x0, 0x3, @remote, "", @random="dd769a79ae40"}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0xa4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.140717648s ago: executing program 0 (id=1571): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000280)='2', 0x1, 0x8080c61) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) 6.285951321s ago: executing program 1 (id=1573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 5.791793914s ago: executing program 4 (id=1575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$inet(0x2, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @local, @void, {@arp={0x806, @generic={0x303, 0x86dd, 0x6, 0x0, 0x3, @remote, "", @random="dd769a79ae40"}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0xa4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.986099536s ago: executing program 3 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x20008040, 0x0, 0x0) getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000180), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301180000000000950000000000000010ad2816318cbb21113cf4ad9502fea406f683eaf6cf872b0826cb22b00e2d5ab217e9742d03a4ab23b2c1ce2fd148b53eb3d251a4f0fad60cd19e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.8491383s ago: executing program 2 (id=1578): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0xe, r2, 'id1\x00'}) fcntl$addseals(r7, 0x409, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r6, r5}}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000ff0200000000000000000000000000014e240000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000020000e9000000000180fffffffffffffeffffffffffffff000000000008000000e385000000000000000020002000000b0000000000000000000000000000000101"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 1.84905s ago: executing program 3 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 1.84889199s ago: executing program 4 (id=1580): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x6}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) socket(0x2b, 0x80801, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.83959149s ago: executing program 0 (id=1589): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000080), 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.839357721s ago: executing program 1 (id=1581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 1.728266914s ago: executing program 3 (id=1583): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 1.189441178s ago: executing program 3 (id=1584): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) 1.156348639s ago: executing program 4 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) sendmmsg(0xffffffffffffffff, &(0x7f0000003180), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) 1.1130528s ago: executing program 4 (id=1587): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6(0xa, 0x2, 0x3a) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x26020480) r5 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000) r6 = dup(0xffffffffffffffff) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) inotify_rm_watch(r6, r5) sendfile(r1, r1, 0x0, 0x5) 704.125161ms ago: executing program 2 (id=1588): socket(0xa, 0x3, 0x87) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) socket(0x1, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 689.090602ms ago: executing program 1 (id=1590): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xc0040}, 0x18) mount$cgroup(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@noprefix}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept(r0, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[0x0]) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r4, 0x2043}], 0x1, &(0x7f0000000280)={r5, r6+60000000}, &(0x7f00000002c0)={[0x279]}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000700)=[{0x0}], 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 634.134673ms ago: executing program 0 (id=1591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000340003"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x1}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x3, 0x1, 0x1000}], 0x1) 597.211984ms ago: executing program 2 (id=1592): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x32ab60b1caec533c, 0xffffffffffffffff, 0x3000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000380)) read$dsp(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x4, 0xa}, {0x5, 0x5, 0x101, 0x52, 0x100}}}}, 0x17) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) socket$packet(0x11, 0x3, 0x300) 39.467669ms ago: executing program 3 (id=1593): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x578410eb) llistxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)=""/159, 0x9f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 33.463899ms ago: executing program 4 (id=1594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 0s ago: executing program 4 (id=1595): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): sses unique to avoid problems! [ 32.963163][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.970967][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.972494][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.974502][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.976107][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.977712][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.979685][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.982677][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.004498][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.006044][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.010792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.016319][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.017817][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020736][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.022260][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.036441][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.037984][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.040152][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.041592][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.043111][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.044770][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.153885][ T532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.156534][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.160916][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.166914][ T532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.174260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.176369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.187607][ T4416] loop2: detected capacity change from 0 to 764 [ 33.193978][ T4414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.528428][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 33.529498][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 33.530633][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 33.531652][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 33.532761][ T4326] Bluetooth: hci4: command 0x041b tx timeout [ 35.447743][ T4437] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 35.450881][ T4437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 35.454356][ T4444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 35.599372][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 35.599473][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 35.599541][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 35.602831][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 35.602853][ T4325] Bluetooth: hci0: command 0x040f tx timeout [ 36.459736][ T4460] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 36.502250][ T4463] process 'syz.4.15' launched './file1' with NULL argv: empty string added [ 36.524528][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 37.118046][ T4476] device team0 entered promiscuous mode [ 37.124299][ T4476] device team_slave_0 entered promiscuous mode [ 37.125613][ T4476] device team_slave_1 entered promiscuous mode [ 37.127076][ T4476] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 37.129947][ T4476] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 37.211023][ T4477] loop2: detected capacity change from 0 to 8 [ 37.215741][ T4477] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 37.291677][ T4477] cramfs: Error -3 while decompressing! [ 37.292807][ T4477] cramfs: 00000000b6ff59d5(26)->00000000f91dce23(4096) [ 37.294161][ T4477] cramfs: Error -3 while decompressing! [ 37.295249][ T4477] cramfs: 00000000cdabf4bf(26)->00000000a947e5a5(4096) [ 37.296568][ T4477] cramfs: Error -3 while decompressing! [ 37.297576][ T4477] cramfs: 00000000cd73c499(16)->0000000047434ea5(4096) [ 37.299070][ T4477] cramfs: Error -3 while decompressing! [ 37.300059][ T4477] cramfs: 00000000b6ff59d5(26)->00000000f91dce23(4096) [ 37.443534][ T4476] bridge0: port 3(vlan2) entered blocking state [ 37.445962][ T4476] bridge0: port 3(vlan2) entered disabled state [ 37.450043][ T4476] device vlan2 entered promiscuous mode [ 37.453238][ T4476] device bond0 entered promiscuous mode [ 37.454330][ T4476] device bond_slave_0 entered promiscuous mode [ 37.455608][ T4476] device bond_slave_1 entered promiscuous mode [ 37.457941][ T4476] device macvlan2 entered promiscuous mode [ 37.468389][ T4314] udevd[4314]: incorrect cramfs checksum on /dev/loop2 [ 37.496177][ T4480] loop0: detected capacity change from 0 to 2048 [ 38.768431][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 38.769552][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 38.770612][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 38.771699][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 38.772740][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 39.258944][ T4492] loop2: detected capacity change from 0 to 8 [ 39.275307][ T4492] SQUASHFS error: xz decompression failed, data probably corrupt [ 39.276938][ T4492] SQUASHFS error: Failed to read block 0x108: -5 [ 39.278024][ T4492] SQUASHFS error: Unable to read metadata cache entry [106] [ 39.279295][ T4492] SQUASHFS error: Unable to read inode 0x101f [ 39.518301][ C1] sched: RT throttling activated [ 39.529905][ T4480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.740922][ T4314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.932239][ T4511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.933932][ T4511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.946551][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 41.013592][ T4511] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 41.049927][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 41.422605][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 41.515064][ T4514] loop3: detected capacity change from 0 to 40427 [ 41.538651][ T4514] F2FS-fs (loop3): Encrypt feature is off [ 42.551869][ T4540] loop1: detected capacity change from 0 to 128 [ 42.804779][ T4542] loop3: detected capacity change from 0 to 16 [ 42.806211][ T4542] ======================================================= [ 42.806211][ T4542] WARNING: The mand mount option has been deprecated and [ 42.806211][ T4542] and is ignored by this kernel. Remove the mand [ 42.806211][ T4542] option from the mount to silence this warning. [ 42.806211][ T4542] ======================================================= [ 42.855141][ T4542] erofs: (device loop3): mounted with root inode @ nid 36. [ 42.941319][ T4542] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 42.943126][ T4542] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 42.960534][ T4334] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 43.044116][ T4336] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 43.048740][ T4334] Bluetooth: hci5: command 0x1003 tx timeout [ 44.619773][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.621920][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.623230][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.625136][ T4566] device bridge_slave_0 left promiscuous mode [ 44.627122][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.664751][ T4566] device bridge_slave_1 left promiscuous mode [ 44.665992][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.597530][ T4336] Bluetooth: Wrong link type (-22) [ 45.598554][ T4566] bond0: (slave bond_slave_0): Releasing backup interface [ 45.642739][ T4566] bond0: (slave bond_slave_1): Releasing backup interface [ 45.967445][ T4587] trusted_key: encrypted_key: insufficient parameters specified [ 45.983102][ T4566] team0: Port device team_slave_0 removed [ 45.991396][ T4566] team0: Port device team_slave_1 removed [ 45.992815][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.994011][ T4566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.996236][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.997547][ T4566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.009795][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 47.218036][ T4607] netlink: 'syz.2.50': attribute type 4 has an invalid length. [ 50.182126][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.209509][ T4639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.194052][ T4663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.212098][ T4663] device veth0 entered promiscuous mode [ 51.214747][ T4663] bond1: (slave macvlan2): making interface the new active one [ 51.216471][ T4663] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 51.218085][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 53.240464][ T4695] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 53.240464][ T4695] The task syz.0.73 (4695) triggered the difference, watch for misbehavior. [ 53.726968][ T4709] device syzkaller0 entered promiscuous mode [ 55.363843][ T4729] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 55.804911][ T4729] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 55.943369][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 56.001084][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 56.005779][ T4756] device vlan2 entered promiscuous mode [ 56.006776][ T4756] device netdevsim2 entered promiscuous mode [ 56.500419][ T4766] loop3: detected capacity change from 0 to 128 [ 56.681724][ T4775] loop2: detected capacity change from 0 to 256 [ 56.690436][ T4766] EXT4-fs (loop3): Test dummy encryption mode enabled [ 56.694426][ T4766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 56.695935][ T4766] System zones: 1-3, 19-19, 35-36 [ 57.170814][ T4766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.102976][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 58.107049][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 58.570666][ T4491] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 58.620319][ T4805] device syzkaller0 entered promiscuous mode [ 58.816386][ T4491] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.819365][ T4491] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.821130][ T4491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.822562][ T4491] usb 1-1: SerialNumber: syz [ 58.831847][ T4491] usb 1-1: bad CDC descriptors [ 59.323653][ T4491] usb 1-1: USB disconnect, device number 2 [ 59.648094][ T4828] capability: warning: `syz.3.113' uses 32-bit capabilities (legacy support in use) [ 60.375900][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.377466][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.426717][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 60.437946][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 60.442449][ T4839] 9pnet_fd: Insufficient options for proto=fd [ 60.461955][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 60.464542][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 60.466931][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 60.495272][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 60.508663][ T4843] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 60.523060][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 60.531586][ T4839] loop3: detected capacity change from 0 to 512 [ 60.540617][ T4839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.569575][ T4839] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.117: corrupted in-inode xattr [ 60.576650][ T4839] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.117: couldn't read orphan inode 15 (err -117) [ 60.584346][ T4839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.978869][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 61.486881][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 61.510021][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 62.035010][ T4861] ptrace attach of "./syz-executor exec"[4321] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x07    "[4861] [ 62.054665][ T4863] loop0: detected capacity change from 0 to 64 [ 62.935151][ T4876] loop0: detected capacity change from 0 to 1024 [ 62.983646][ T4876] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 63.232561][ T4871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 63.535085][ T4886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'. [ 63.537993][ T4886] device ip6gre1 entered promiscuous mode [ 64.439942][ T4892] loop4: detected capacity change from 0 to 256 [ 65.513005][ T4892] FAT-fs (loop4): Directory bread(block 64) failed [ 65.514330][ T4892] FAT-fs (loop4): Directory bread(block 65) failed [ 65.515387][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.515443][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.516549][ T4892] FAT-fs (loop4): Directory bread(block 66) failed [ 65.518838][ T4892] FAT-fs (loop4): Directory bread(block 67) failed [ 65.520093][ T4892] FAT-fs (loop4): Directory bread(block 68) failed [ 65.521199][ T4892] FAT-fs (loop4): Directory bread(block 69) failed [ 65.522502][ T4892] FAT-fs (loop4): Directory bread(block 70) failed [ 65.523564][ T4892] FAT-fs (loop4): Directory bread(block 71) failed [ 65.524608][ T4892] FAT-fs (loop4): Directory bread(block 72) failed [ 65.525603][ T4892] FAT-fs (loop4): Directory bread(block 73) failed [ 65.552223][ T4888] netlink: 'syz.1.128': attribute type 6 has an invalid length. [ 65.553588][ T4888] netlink: 72 bytes leftover after parsing attributes in process `syz.1.128'. [ 65.564751][ T4897] loop0: detected capacity change from 0 to 16 [ 65.576371][ T4897] erofs: (device loop0): erofs_read_inode: unsupported i_format 31 of nid 36 [ 65.654784][ T4314] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.659031][ T4897] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 65.990380][ T4897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.019090][ T4905] bond2: (slave veth3): Enslaving as an active interface with a down link [ 66.055749][ T4897] device veth0_to_bond entered promiscuous mode [ 66.059626][ T4897] device veth0_to_bond left promiscuous mode [ 66.063985][ T4897] bond2: (slave vlan2): making interface the new active one [ 66.069543][ T4897] device veth0_to_bond entered promiscuous mode [ 66.071381][ T4897] device vlan2 entered promiscuous mode [ 66.072612][ T4897] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 66.079808][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 67.560536][ T4930] loop4: detected capacity change from 0 to 1024 [ 67.600946][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 67.669444][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 68.649372][ T4951] Zero length message leads to an empty skb [ 68.901901][ T4948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.927380][ T4948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.982372][ T4957] loop3: detected capacity change from 0 to 512 [ 69.003504][ T4957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 69.038987][ T4957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.043141][ T4957] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 69.048055][ T4957] serio: Serial port ptm0 [ 69.075460][ T4955] loop2: detected capacity change from 0 to 40427 [ 69.080881][ T4955] F2FS-fs (loop2): invalid crc value [ 69.083698][ T4955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.099890][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.102229][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.108877][ T4955] F2FS-fs (loop2): Start checkpoint disabled! [ 69.142630][ T4955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 69.611437][ T3431] cfg80211: failed to load regulatory.db [ 69.670190][ T4971] 9pnet_fd: Insufficient options for proto=fd [ 69.677839][ T4971] loop0: detected capacity change from 0 to 512 [ 69.686228][ T4971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.983339][ T4971] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.149: corrupted in-inode xattr [ 69.987565][ T4971] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.149: couldn't read orphan inode 15 (err -117) [ 69.991459][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 70.084772][ T39] kworker/u4:2: attempt to access beyond end of device [ 70.084772][ T39] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 71.094664][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 71.213586][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 71.397384][ T5004] netlink: 196 bytes leftover after parsing attributes in process `syz.3.156'. [ 73.308232][ T5009] loop0: detected capacity change from 0 to 40427 [ 73.342162][ T5009] F2FS-fs (loop0): invalid crc value [ 73.426390][ T5030] batman_adv: batadv0: Adding interface: dummy0 [ 73.427682][ T5030] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.432949][ T5030] batman_adv: batadv0: Interface activated: dummy0 [ 73.437169][ T5009] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.456432][ T5009] F2FS-fs (loop0): Start checkpoint disabled! [ 73.461243][ T5030] batadv0: mtu less than device minimum [ 73.464379][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.467710][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.470902][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.474044][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.477117][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.480314][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.483538][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.486665][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.489986][ T5030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.498269][ T5009] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 74.306629][ T5045] loop3: detected capacity change from 0 to 16 [ 74.308112][ T5045] erofs: Unknown parameter 'ãé' [ 74.793218][ T4924] kworker/u4:16: attempt to access beyond end of device [ 74.793218][ T4924] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 74.809683][ T4314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.697781][ T5052] loop4: detected capacity change from 0 to 40427 [ 75.701201][ T5052] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 75.702764][ T5052] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.705530][ T5052] F2FS-fs (loop4): invalid crc value [ 75.716298][ T5052] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.722096][ T5070] loop2: detected capacity change from 0 to 256 [ 75.728543][ T5052] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 75.729991][ T5052] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.735761][ T5070] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.741779][ T5070] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 75.755151][ T5070] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5913f139, utbl_chksum : 0xe619d30d) [ 75.846681][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 77.640084][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 77.645760][ T5102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 77.653348][ T5100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 77.674903][ T5104] device gretap1 entered promiscuous mode [ 77.677091][ T5104] batman_adv: batadv0: Adding interface: gretap1 [ 77.680318][ T5104] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 77.695370][ T5104] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 82.201109][ T5166] device gretap1 entered promiscuous mode [ 82.202601][ T5166] batman_adv: batadv0: Adding interface: gretap1 [ 82.203805][ T5166] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 82.426849][ T5166] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 82.663118][ T5171] loop2: detected capacity change from 0 to 512 [ 82.684818][ T5171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.783561][ T5171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.785697][ T5171] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 82.792757][ T5171] serio: Serial port ptm0 [ 83.117873][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.123622][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.143503][ T5189] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.739036][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 85.477351][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 86.452743][ T5230] net_ratelimit: 10 callbacks suppressed [ 86.452755][ T5230] batadv0: mtu less than device minimum [ 86.456576][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.460248][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.463354][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.466556][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.469844][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.472821][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.475976][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.479110][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.482372][ T5230] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 86.521406][ T5233] device gretap1 entered promiscuous mode [ 86.522714][ T5233] batman_adv: batadv0: Adding interface: gretap1 [ 86.523760][ T5233] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 86.527927][ T5233] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 86.819260][ T5224] device vlan2 left promiscuous mode [ 87.664539][ T5236] loop3: detected capacity change from 0 to 40427 [ 87.684402][ T5236] F2FS-fs (loop3): invalid crc value [ 87.693672][ T5236] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.713820][ T5236] F2FS-fs (loop3): Start checkpoint disabled! [ 87.723296][ T5236] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 87.851261][ T5256] loop2: detected capacity change from 0 to 16 [ 87.852789][ T5256] erofs: Unknown parameter 'ãé' [ 88.170178][ T4314] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.277894][ T5224] kworker/u4:17: attempt to access beyond end of device [ 88.277894][ T5224] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 90.328481][ T5293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.146126][ T5299] device syzkaller0 entered promiscuous mode [ 92.092563][ T5316] loop4: detected capacity change from 0 to 16 [ 92.094046][ T5316] erofs: Unknown parameter 'ãé' [ 92.183257][ T5313] loop0: detected capacity change from 0 to 40427 [ 92.198245][ T5313] F2FS-fs (loop0): invalid crc value [ 92.215471][ T5313] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.228920][ T5313] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.240732][ T4313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.235223][ T4324] syz-executor: attempt to access beyond end of device [ 93.235223][ T4324] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.316008][ T5332] device syzkaller0 entered promiscuous mode [ 95.499693][ T5369] fuse: Bad value for 'fd' [ 95.984592][ T5378] loop0: detected capacity change from 0 to 16 [ 95.991597][ T5378] erofs: Unknown parameter 'ãé' [ 96.114057][ T4313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.379196][ C1] vcan0: j1939_tp_rxtimer: 0x0000000003d7cd22: rx timeout, send abort [ 97.382619][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000003d7cd22: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.613165][ T5396] fuse: Bad value for 'fd' [ 98.779948][ T5414] loop3: detected capacity change from 0 to 64 [ 98.928358][ T5413] delete_channel: no stack [ 100.544091][ T5436] device syzkaller0 entered promiscuous mode [ 103.011716][ T5446] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 103.025100][ T5449] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 103.028005][ T5449] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 103.052589][ T5446] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 103.062722][ T5446] device macvlan2 entered promiscuous mode [ 103.067608][ T5446] device bond1 entered promiscuous mode [ 103.070646][ T5446] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.102525][ T5446] device bond1 left promiscuous mode [ 103.427154][ T5453] loop2: detected capacity change from 0 to 8 [ 103.428695][ T5453] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 103.440978][ T5453] cramfs: Error -3 while decompressing! [ 103.441955][ T5453] cramfs: 0000000058c5e21e(26)->000000008ce5cec3(4096) [ 103.443251][ T5453] cramfs: Error -3 while decompressing! [ 103.444166][ T5453] cramfs: 0000000001648bdc(26)->000000006aa3720f(4096) [ 103.445205][ T5453] cramfs: Error -3 while decompressing! [ 103.446001][ T5453] cramfs: 000000006848e4fe(16)->00000000ce5e00f6(4096) [ 103.447067][ T5453] cramfs: Error -3 while decompressing! [ 103.448101][ T5453] cramfs: 0000000058c5e21e(26)->000000008ce5cec3(4096) [ 103.487046][ T4313] udevd[4313]: incorrect cramfs checksum on /dev/loop2 [ 103.514671][ T4313] udevd[4313]: incorrect cramfs checksum on /dev/loop2 [ 103.515416][ T5464] loop3: detected capacity change from 0 to 4096 [ 104.709110][ T5474] overlayfs: './file0' not a directory [ 104.932081][ T5479] loop0: detected capacity change from 0 to 8 [ 104.983431][ T5479] SQUASHFS error: Unable to read inode 0x11f [ 105.245319][ T5484] loop4: detected capacity change from 0 to 512 [ 105.306500][ T5484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.335268][ T4321] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 105.338768][ T4321] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 105.438719][ T4336] Bluetooth: hci4: command 0x0407 tx timeout [ 106.123211][ T5496] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 106.180194][ T5496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.183087][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 106.215591][ T5496] bond2: (slave geneve2): making interface the new active one [ 106.218289][ T5496] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 106.223367][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 107.003130][ T5512] syz.0.292 uses obsolete (PF_INET,SOCK_PACKET) [ 108.394051][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.396470][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.398151][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.403180][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.404758][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.406171][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.281467][ T5535] loop0: detected capacity change from 0 to 512 [ 109.363491][ T5535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.381905][ T5535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.384031][ T5535] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 109.386861][ T5535] serio: Serial port ptm0 [ 109.510652][ T4716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.769982][ T4716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.892474][ T4716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.949725][ T4716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.953774][ T5524] chnl_net:caif_netlink_parms(): no params data found [ 109.968488][ T4368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.972980][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.974346][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.975878][ T5524] device bridge_slave_0 entered promiscuous mode [ 109.977850][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.979177][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.980842][ T5524] device bridge_slave_1 entered promiscuous mode [ 109.988965][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.992422][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.001839][ T5524] team0: Port device team_slave_0 added [ 110.003946][ T5524] team0: Port device team_slave_1 added [ 110.011054][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.012398][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.017183][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.020517][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.021921][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.026263][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.069789][ T5524] device hsr_slave_0 entered promiscuous mode [ 110.108716][ T5524] device hsr_slave_1 entered promiscuous mode [ 110.148452][ T5524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.149794][ T5524] Cannot create hsr debugfs directory [ 110.167286][ T4368] usb 1-1: Using ep0 maxpacket: 32 [ 110.175013][ T4368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.178009][ T4368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.181561][ T4368] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.183148][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.184436][ T4368] usb 1-1: Product: syz [ 110.185185][ T4368] usb 1-1: Manufacturer: syz [ 110.185950][ T4368] usb 1-1: SerialNumber: syz [ 110.430504][ T4368] usb 1-1: USB disconnect, device number 3 [ 110.650298][ T4313] udevd[4313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.951516][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 111.189111][ T5524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.278473][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 111.283014][ T5524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.309583][ T5524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.359544][ T5524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.494275][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.498217][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.503454][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.507192][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.581243][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.582958][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.584475][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.585628][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.587125][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.592104][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.593674][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.595181][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.596318][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.598958][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.601765][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.606569][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.610527][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.612410][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.615451][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.617221][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.623235][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.625223][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.628018][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.630036][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.632666][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.970432][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.971830][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.975720][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.345576][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.347609][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.354052][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.355862][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.357649][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.362670][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.365322][ T5524] device veth0_vlan entered promiscuous mode [ 112.370671][ T5524] device veth1_vlan entered promiscuous mode [ 112.382733][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.384784][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.386356][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.387984][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.448713][ T4716] device hsr_slave_0 left promiscuous mode [ 112.488757][ T4716] device hsr_slave_1 left promiscuous mode [ 112.578424][ T4716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.579627][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.581666][ T4716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.582793][ T4716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.584376][ T4716] device vlan2 left promiscuous mode [ 112.585203][ T4716] device bond0 left promiscuous mode [ 112.586073][ T4716] device bond_slave_0 left promiscuous mode [ 112.587129][ T4716] device bond_slave_1 left promiscuous mode [ 112.588148][ T4716] device macvlan2 left promiscuous mode [ 112.590290][ T4716] bridge0: port 3(vlan2) entered disabled state [ 112.629171][ T4716] device bridge_slave_1 left promiscuous mode [ 112.630359][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.669078][ T4716] device bridge_slave_0 left promiscuous mode [ 112.670206][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.735329][ T4716] device team0 left promiscuous mode [ 112.736333][ T4716] device team_slave_0 left promiscuous mode [ 112.737488][ T4716] device team_slave_1 left promiscuous mode [ 112.839308][ T4716] device veth1_macvtap left promiscuous mode [ 112.840449][ T4716] device veth0_macvtap left promiscuous mode [ 112.841507][ T4716] device veth1_vlan left promiscuous mode [ 112.842559][ T4716] device veth0_vlan left promiscuous mode [ 112.939119][ T4716] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 113.358601][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 115.030640][ T4716] team0 (unregistering): Port device team_slave_1 removed [ 115.200108][ T4716] team0 (unregistering): Port device team_slave_0 removed [ 115.368859][ T4716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.438356][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 115.599450][ T4716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.949658][ T4716] bond0 (unregistering): Released all slaves [ 117.231832][ T5524] device veth0_macvtap entered promiscuous mode [ 117.234938][ T5524] device veth1_macvtap entered promiscuous mode [ 117.238972][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.240562][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.244760][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.246548][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.248223][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.253847][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.255443][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.257406][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.261727][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.263559][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.265288][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.270597][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.272507][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.274244][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.275863][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.277398][ T5524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.283084][ T5524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.285336][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.286598][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.289146][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.293112][ T5524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.294606][ T5524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.296078][ T5524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.297522][ T5524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.327792][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.333878][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.337456][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.344005][ T532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.345229][ T532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.346843][ T87] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.539124][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 117.842460][ T5613] Malformed UNC in devname [ 117.842460][ T5613] [ 117.844054][ T5613] CIFS: VFS: Malformed UNC in devname [ 118.142102][ T27] audit: type=1326 audit(118.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5604 comm="syz.3.304" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x0 [ 118.946903][ T5631] Soft offlining pfn 0x13955f at process virtual address 0x20000000 [ 118.951212][ T5631] Soft offlining pfn 0x1490dc at process virtual address 0x20001000 [ 118.952667][ T5631] Soft offlining pfn 0x1490dd at process virtual address 0x20002000 [ 118.954022][ T5631] Soft offlining pfn 0x1490de at process virtual address 0x20003000 [ 118.955313][ T5631] Soft offlining pfn 0x1490df at process virtual address 0x20004000 [ 118.956698][ T5631] Soft offlining pfn 0x145720 at process virtual address 0x20005000 [ 118.958087][ T5631] Soft offlining pfn 0x145721 at process virtual address 0x20006000 [ 118.959690][ T5631] Soft offlining pfn 0x145722 at process virtual address 0x20007000 [ 118.961066][ T5631] Soft offlining pfn 0x145723 at process virtual address 0x20008000 [ 118.962426][ T5631] Soft offlining pfn 0x146fe8 at process virtual address 0x20009000 [ 118.963802][ T5631] Soft offlining pfn 0x146fe9 at process virtual address 0x2000a000 [ 118.965143][ T5631] Soft offlining pfn 0x146fea at process virtual address 0x2000b000 [ 118.966495][ T5631] Soft offlining pfn 0x146feb at process virtual address 0x2000c000 [ 118.967871][ T5631] Soft offlining pfn 0x145620 at process virtual address 0x2000d000 [ 118.969325][ T5631] Soft offlining pfn 0x145621 at process virtual address 0x2000e000 [ 118.970717][ T5631] Soft offlining pfn 0x145622 at process virtual address 0x2000f000 [ 118.972061][ T5631] Soft offlining pfn 0x145623 at process virtual address 0x20010000 [ 118.973426][ T5631] Soft offlining pfn 0x13a01c at process virtual address 0x20011000 [ 119.394008][ T5642] tipc: Started in network mode [ 119.394822][ T5642] tipc: Node identity aed8aac99e9c, cluster identity 4711 [ 119.397378][ T5644] loop2: detected capacity change from 0 to 1764 [ 119.705719][ T5642] tipc: Enabled bearer , priority 0 [ 119.801117][ T5650] device syzkaller0 entered promiscuous mode [ 120.141583][ T5642] tipc: Resetting bearer [ 120.155593][ T5641] tipc: Resetting bearer [ 120.308874][ T5641] tipc: Disabling bearer [ 120.314227][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 120.432730][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 120.434508][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 120.435797][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.437506][ T4336] Workqueue: hci2 hci_rx_work [ 120.438245][ T4336] Call trace: [ 120.438752][ T4336] dump_backtrace+0x1c0/0x1ec [ 120.439529][ T4336] show_stack+0x2c/0x3c [ 120.440172][ T4336] __dump_stack+0x30/0x40 [ 120.440900][ T4336] dump_stack_lvl+0xf4/0x15c [ 120.441673][ T4336] dump_stack+0x1c/0x5c [ 120.442374][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 120.443333][ T4336] kobject_add_internal+0x598/0xb08 [ 120.444188][ T4336] kobject_add+0x140/0x20c [ 120.444859][ T4336] device_add+0x3f0/0xf90 [ 120.445594][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 120.446394][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 120.447224][ T4336] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 120.448279][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 120.449052][ T4336] hci_event_packet+0x6b8/0xf18 [ 120.449857][ T4336] hci_rx_work+0x328/0xa84 [ 120.450601][ T4336] process_one_work+0x7f8/0x13a4 [ 120.451425][ T4336] worker_thread+0x8c4/0xfec [ 120.452212][ T4336] kthread+0x250/0x2d8 [ 120.452933][ T4336] ret_from_fork+0x10/0x20 [ 120.455827][ T4336] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.458002][ T4336] Bluetooth: hci2: failed to register connection device [ 120.882053][ T5677] loop4: detected capacity change from 0 to 128 [ 121.415972][ T5689] loop2: detected capacity change from 0 to 16 [ 121.427492][ T5689] erofs: (device loop2): mounted with root inode @ nid 36. [ 122.404397][ T5702] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 122.706826][ T5704] tipc: Started in network mode [ 122.707906][ T5704] tipc: Node identity 080211000001, cluster identity 4711 [ 122.710203][ T5704] tipc: Enabled bearer , priority 0 [ 122.711943][ T5704] device syzkaller0 entered promiscuous mode [ 122.807960][ T5707] loop3: detected capacity change from 0 to 64 [ 123.414023][ T5710] tipc: Resetting bearer [ 123.939396][ T4370] tipc: Node number set to 134418688 [ 123.974111][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.975810][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.335838][ T5750] loop4: detected capacity change from 0 to 1024 [ 125.515109][ T5751] capability: warning: `syz.0.338' uses deprecated v2 capabilities in a way that may be insecure [ 126.037760][ T5750] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 126.054099][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.109790][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.281910][ T5763] Bluetooth: MGMT ver 1.22 [ 127.923244][ T5782] loop4: detected capacity change from 0 to 256 [ 127.947202][ T5782] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 130.387007][ T5881] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 130.477937][ T5885] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.491710][ T5885] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 130.518223][ T5881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 130.537658][ T5881] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 130.566297][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'. [ 130.572124][ T5881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.985106][ T5897] loop4: detected capacity change from 0 to 4096 [ 131.657830][ T5897] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 132.415327][ T5897] ntfs3: loop4: mft corrupted [ 132.416365][ T5897] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 132.419654][ T5897] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 132.923434][ T4336] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 135.579571][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.582275][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.336408][ T6016] device syzkaller0 entered promiscuous mode [ 139.341494][ T6016] net_ratelimit: 10 callbacks suppressed [ 139.341506][ T6016] TC_ACT_REPEAT abuse ? [ 141.514681][ T6037] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 141.570326][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 141.703557][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.705286][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.707171][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.713506][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.718114][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.722558][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.725505][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.731801][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.735401][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.739703][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.743336][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.745791][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.797789][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.807960][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.821137][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.827762][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.836680][ T4491] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 141.869480][ T4491] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 143.573532][ T6067] fido_id[6067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.016586][ T6140] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20ffb000 [ 147.067776][ T6140] Memory failure: 0x225a04: recovery action for reserved kernel page: Ignored [ 147.074502][ T6140] loop2: detected capacity change from 0 to 128 [ 147.087319][ T6140] FAT-fs (loop2): bogus number of reserved sectors [ 147.088592][ T6140] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 147.090133][ T6140] FAT-fs (loop2): Can't find a valid FAT filesystem [ 147.321549][ T6133] loop3: detected capacity change from 0 to 8192 [ 147.344023][ T6133] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.346487][ T6133] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 147.348128][ T6133] REISERFS (device loop3): using ordered data mode [ 147.365450][ T6133] reiserfs: using flush barriers [ 147.387600][ T6133] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.390907][ T6133] REISERFS (device loop3): checking transaction log (loop3) [ 148.254343][ T6133] REISERFS (device loop3): Using tea hash to sort names [ 148.261833][ T6133] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 150.033415][ T6181] binder: 6180:6181 tried to acquire reference to desc 0, got 1 instead [ 150.039965][ T6181] binder: 6180:6181 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 150.048427][ T6181] binder: 6181 RLIMIT_NICE not set [ 150.049575][ T6181] binder: 6181 RLIMIT_NICE not set [ 150.052083][ T6181] binder: release 6180:6181 transaction 12 out, still active [ 150.053563][ T6181] binder: release 6180:6181 transaction 5 in, still active [ 150.054996][ T6181] binder: undelivered TRANSACTION_COMPLETE [ 150.059639][ T6181] binder: 6181 RLIMIT_NICE not set [ 150.060908][ T6181] binder: 6181 RLIMIT_NICE not set [ 150.061968][ T6181] binder: 6181:6180 reply target not found [ 150.063174][ T6181] binder: 6180:6181 transaction reply to 0:0 failed 13/29189/0, size 0-0 line 2975 [ 150.064910][ T6181] binder: send failed reply for transaction 12, target dead [ 150.066409][ T6181] binder: send failed reply for transaction 5 to 6180:6181 [ 150.081804][ T3431] binder: undelivered TRANSACTION_ERROR: 29190 [ 150.083245][ T3431] binder: undelivered TRANSACTION_ERROR: 29189 [ 152.765832][ T6213] loop2: detected capacity change from 0 to 164 [ 152.894485][ T6215] loop0: detected capacity change from 0 to 1024 [ 152.911506][ T6215] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=1 [ 152.913353][ T6215] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 152.916434][ T6215] EXT4-fs (loop0): mount failed [ 153.017421][ T5651] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.587403][ T4336] Bluetooth: hci0: command 0x0406 tx timeout [ 154.587482][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 154.589671][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 154.590855][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 155.315852][ T6235] device syzkaller0 entered promiscuous mode [ 157.168447][ T6259] netlink: 'syz.3.437': attribute type 13 has an invalid length. [ 157.215661][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.232249][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.234014][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.612686][ T6272] loop0: detected capacity change from 0 to 16 [ 157.625159][ T6272] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.692868][ T6272] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 157.694525][ T6272] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 157.703768][ T4336] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 159.973257][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 160.025523][ T6289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.542503][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 161.347972][ T6319] loop4: detected capacity change from 0 to 8 [ 161.363399][ T6319] squashfs image failed sanity check [ 162.431075][ T5651] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.502298][ T6319] loop8: detected capacity change from 0 to 4 [ 162.532495][ T6319] Dev loop8: unable to read RDB block 4 [ 162.533574][ T6319] loop8: unable to read partition table [ 162.534582][ T6319] loop8: partition table beyond EOD, truncated [ 162.535629][ T6319] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 163.340306][ T6351] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 163.916160][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 171.971881][ T6471] loop0: detected capacity change from 0 to 16 [ 171.991460][ T6471] erofs: (device loop0): mounted with root inode @ nid 36. [ 174.933219][ T6513] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 176.432865][ T6535] hub 8-0:1.0: USB hub found [ 176.435181][ T6535] hub 8-0:1.0: 8 ports detected [ 177.169447][ T6537] lo: Caught tx_queue_len zero misconfig [ 177.170476][ T6537] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 178.159937][ T6563] loop0: detected capacity change from 0 to 256 [ 178.177645][ T6563] exfat: Deprecated parameter 'utf8' [ 178.494020][ T6563] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 178.545852][ T6560] loop2: detected capacity change from 0 to 32768 [ 178.574207][ T6560] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.514 (6560) [ 178.896248][ T27] audit: type=1326 audit(178.870:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.900179][ T27] audit: type=1326 audit(178.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.903816][ T27] audit: type=1326 audit(178.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.907443][ T27] audit: type=1326 audit(178.870:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.911211][ T27] audit: type=1326 audit(178.870:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.914901][ T27] audit: type=1326 audit(178.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.918674][ T27] audit: type=1326 audit(178.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.922941][ T27] audit: type=1326 audit(178.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.926888][ T27] audit: type=1326 audit(178.870:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 178.930826][ T27] audit: type=1326 audit(178.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 179.195879][ T6560] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 179.198064][ T6560] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 179.201421][ T6560] BTRFS error (device loop2): superblock checksum mismatch [ 179.218840][ T6560] BTRFS error (device loop2): open_ctree failed: -22 [ 180.684117][ T5651] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (5651) [ 183.474822][ T6618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 183.520683][ T6594] loop2: detected capacity change from 0 to 40427 [ 183.532884][ T6594] F2FS-fs (loop2): invalid crc value [ 183.535246][ T6594] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 184.968244][ T6636] tipc: Enabling of bearer rejected, already enabled [ 185.446590][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'. [ 187.924612][ T6735] netlink: 76 bytes leftover after parsing attributes in process `syz.3.539'. [ 188.225875][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.227215][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.328723][ T6746] tipc: Started in network mode [ 188.329735][ T6746] tipc: Node identity dee7149b3648, cluster identity 4711 [ 188.331030][ T6746] tipc: Enabled bearer , priority 0 [ 188.332504][ T6746] device syzkaller0 entered promiscuous mode [ 188.953034][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 189.043695][ T6746] tipc: Resetting bearer [ 189.047447][ T6741] tipc: Resetting bearer [ 189.569369][ T6741] tipc: Disabling bearer [ 189.590319][ T5530] tipc: Node number set to 3903788187 [ 189.727340][ T6768] loop2: detected capacity change from 0 to 8 [ 190.076186][ T6765] loop0: detected capacity change from 0 to 40427 [ 190.119268][ T6765] F2FS-fs (loop0): invalid crc value [ 190.981057][ T6765] F2FS-fs (loop0): Found nat_bits in checkpoint [ 191.004874][ T6765] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 191.011476][ T6765] F2FS-fs (loop0): Start checkpoint disabled! [ 191.016817][ T6765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 192.430282][ T6805] netlink: 72 bytes leftover after parsing attributes in process `syz.2.560'. [ 192.719912][ T39] kworker/u4:2: attempt to access beyond end of device [ 192.719912][ T39] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 192.806407][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 194.962740][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.964169][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.972145][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.982443][ T6831] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 194.996417][ T6831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 195.362831][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.365118][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.366813][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.368137][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.369559][ T6831] virt_wifi0 speed is unknown, defaulting to 1000 [ 196.533506][ T6848] loop2: detected capacity change from 0 to 512 [ 198.171354][ T6848] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.253738][ T6848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.328559][ T6848] __quota_error: 269 callbacks suppressed [ 198.328572][ T6848] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 198.331405][ T6848] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 198.337854][ T6848] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.569: Failed to acquire dquot type 0 [ 198.384047][ T6848] EXT4-fs (loop2): Remounting filesystem read-only [ 198.386427][ T6848] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 198.392434][ T6848] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 198.394136][ T6848] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.569: Failed to acquire dquot type 0 [ 198.396447][ T6848] EXT4-fs (loop2): Remounting filesystem read-only [ 198.401255][ T6848] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 198.403305][ T6848] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 198.404877][ T6848] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.569: Failed to acquire dquot type 0 [ 198.411954][ T6848] EXT4-fs (loop2): Remounting filesystem read-only [ 198.413765][ T6848] EXT4-fs (loop2): 1 orphan inode deleted [ 198.414849][ T6848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.036655][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 201.752054][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 201.779421][ T6901] loop2: detected capacity change from 0 to 64 [ 202.467863][ T6914] hfs: request for non-existent node 131072 in B*Tree [ 202.469314][ T6914] hfs: request for non-existent node 131072 in B*Tree [ 205.417497][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 205.750825][ T6930] bridge3: port 1(veth7) entered blocking state [ 205.752076][ T6930] bridge3: port 1(veth7) entered disabled state [ 205.753556][ T6930] device veth7 entered promiscuous mode [ 205.811312][ T6937] bridge3: port 2(veth0_to_bond) entered blocking state [ 205.815612][ T6937] bridge3: port 2(veth0_to_bond) entered disabled state [ 205.817444][ T6937] device veth0_to_bond entered promiscuous mode [ 205.841351][ T6928] netlink: 56 bytes leftover after parsing attributes in process `syz.0.592'. [ 205.843666][ T6928] IPVS: sed: FWM 3 0x00000003 - no destination available [ 209.567712][ T6982] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 209.582947][ T6983] tipc: Enabled bearer , priority 0 [ 209.584796][ T6983] device syzkaller0 entered promiscuous mode [ 210.118265][ T6982] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 210.121013][ T6982] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 210.151578][ T6991] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 210.156544][ T6993] tipc: Resetting bearer [ 210.181844][ T6994] device macvlan2 entered promiscuous mode [ 210.183543][ T6994] device bond1 entered promiscuous mode [ 210.184687][ T6994] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.278998][ T6994] device bond1 left promiscuous mode [ 210.652210][ T6980] tipc: Resetting bearer [ 210.729399][ T6980] tipc: Disabling bearer [ 211.179253][ T7018] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 211.203554][ T7018] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 211.206281][ T7018] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 211.289520][ T7020] siw: device registration error -23 [ 211.540235][ T7018] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 211.623864][ T7018] device macvlan3 entered promiscuous mode [ 211.625699][ T7018] device bond3 entered promiscuous mode [ 211.628699][ T7018] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 211.702524][ T7018] device bond3 left promiscuous mode [ 214.642439][ T7071] loop4: detected capacity change from 0 to 512 [ 214.658881][ T7071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.666273][ T7071] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 214.689846][ T7071] EXT4-fs (loop4): 1 truncate cleaned up [ 214.690871][ T7071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 214.791363][ T7073] loop0: detected capacity change from 0 to 16 [ 214.842027][ T7073] erofs: (device loop0): mounted with root inode @ nid 36. [ 214.872633][ T7086] siw: device registration error -23 [ 215.667081][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 216.534115][ T7109] loop0: detected capacity change from 0 to 512 [ 217.731166][ T7123] loop4: detected capacity change from 0 to 512 [ 217.732815][ T7123] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.735526][ T7123] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.738092][ T7109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.794947][ T7126] loop2: detected capacity change from 0 to 512 [ 217.840337][ T7123] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 217.842209][ T7123] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 217.843824][ T7123] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.639: Failed to acquire dquot type 0 [ 217.852136][ T7123] EXT4-fs (loop4): Remounting filesystem read-only [ 217.853355][ T7123] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 217.867209][ T7123] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 218.319518][ T7123] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.639: Failed to acquire dquot type 0 [ 218.327279][ T7123] EXT4-fs (loop4): Remounting filesystem read-only [ 218.331345][ T7123] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 218.333789][ T7123] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 218.339577][ T7123] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.639: Failed to acquire dquot type 0 [ 218.344774][ T7123] EXT4-fs (loop4): Remounting filesystem read-only [ 218.347013][ T7123] EXT4-fs (loop4): 1 orphan inode deleted [ 218.348553][ T7123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 218.355624][ T7126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.044105][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 219.046782][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 219.108985][ T7146] tipc: Enabling of bearer rejected, already enabled [ 219.635125][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 220.409218][ T7150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.645'. [ 220.825015][ T7171] random: crng reseeded on system resumption [ 221.011690][ T7168] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 221.174278][ T7172] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 221.179646][ T7172] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 221.203554][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.651'. [ 221.222862][ T7173] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 221.276905][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.651'. [ 221.283900][ T7168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.305938][ T7178] device syzkaller0 entered promiscuous mode [ 221.662405][ T7182] loop0: detected capacity change from 0 to 1024 [ 223.115955][ T7209] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 224.256788][ T7227] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 224.980681][ T7224] netlink: 56 bytes leftover after parsing attributes in process `syz.2.663'. [ 224.986411][ T7224] IPVS: sed: FWM 3 0x00000003 - no destination available [ 225.430635][ T7240] netlink: 188 bytes leftover after parsing attributes in process `syz.4.665'. [ 226.799553][ T7242] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 226.800963][ T7242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.664'. [ 226.802619][ T7242] device team0 entered promiscuous mode [ 226.803595][ T7242] device team_slave_0 entered promiscuous mode [ 226.804646][ T7242] device team_slave_1 entered promiscuous mode [ 226.806791][ T7242] bridge0: port 3(team0) entered blocking state [ 226.807905][ T7242] bridge0: port 3(team0) entered disabled state [ 226.809980][ T7242] bridge0: port 3(team0) entered blocking state [ 226.811018][ T7242] bridge0: port 3(team0) entered forwarding state [ 230.524121][ T7282] loop2: detected capacity change from 0 to 40427 [ 230.641385][ T7282] F2FS-fs (loop2): invalid crc value [ 230.966457][ T7282] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.978175][ T7282] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.581228][ T7299] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 231.585737][ T7297] netlink: 56 bytes leftover after parsing attributes in process `syz.4.680'. [ 231.598037][ T7297] IPVS: sed: FWM 3 0x00000003 - no destination available [ 231.659685][ T7305] random: crng reseeded on system resumption [ 232.358817][ T4329] syz-executor: attempt to access beyond end of device [ 232.358817][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 232.396012][ T7309] loop0: detected capacity change from 0 to 512 [ 232.397443][ T7309] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.412192][ T7309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.562488][ T7309] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 232.564236][ T7309] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 232.565852][ T7309] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.683: Failed to acquire dquot type 0 [ 232.568077][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 232.571496][ T7309] EXT4-fs (loop0): Remounting filesystem read-only [ 232.576509][ T7309] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 232.582075][ T7309] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 232.587087][ T7309] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.683: Failed to acquire dquot type 0 [ 232.593620][ T7309] EXT4-fs (loop0): Remounting filesystem read-only [ 232.596540][ T7309] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 232.599759][ T7309] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 232.601293][ T7309] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.683: Failed to acquire dquot type 0 [ 232.608129][ T7320] tipc: Started in network mode [ 232.609590][ T7320] tipc: Node identity aabd16adeb32, cluster identity 4711 [ 232.610920][ T7320] tipc: Enabled bearer , priority 0 [ 232.959240][ T7320] device syzkaller0 entered promiscuous mode [ 232.962712][ T7309] EXT4-fs (loop0): Remounting filesystem read-only [ 232.964040][ T7309] EXT4-fs (loop0): 1 orphan inode deleted [ 232.965031][ T7309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.778027][ T3897] tipc: Node number set to 1099896493 [ 233.814572][ T7320] tipc: Resetting bearer [ 233.824991][ T7319] tipc: Resetting bearer [ 234.102367][ T7342] loop4: detected capacity change from 0 to 64 [ 234.338993][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 234.399589][ T7319] tipc: Disabling bearer [ 235.858387][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 237.683192][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 239.157048][ T7383] bridge1: port 1(veth3) entered blocking state [ 239.159053][ T7383] bridge1: port 1(veth3) entered disabled state [ 239.161751][ T7383] device veth3 entered promiscuous mode [ 239.177398][ T7394] bridge1: port 2(veth0_to_bond) entered blocking state [ 240.289879][ T7394] bridge1: port 2(veth0_to_bond) entered disabled state [ 240.291948][ T7394] device veth0_to_bond entered promiscuous mode [ 240.400511][ T7383] bridge1: port 3(vlan2) entered blocking state [ 240.401598][ T7383] bridge1: port 3(vlan2) entered disabled state [ 240.405334][ T7383] device vlan2 entered promiscuous mode [ 240.406249][ T7383] device team0 entered promiscuous mode [ 240.407202][ T7383] device team_slave_0 entered promiscuous mode [ 241.031504][ T7415] loop0: detected capacity change from 0 to 64 [ 242.132859][ T7383] device team_slave_1 entered promiscuous mode [ 244.215762][ T7426] loop0: detected capacity change from 0 to 8192 [ 244.247263][ T7426] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.849796][ T7426] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 244.851574][ T7426] REISERFS (device loop0): using ordered data mode [ 244.852499][ T7426] reiserfs: using flush barriers [ 244.857424][ T7426] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.877543][ T7426] REISERFS (device loop0): checking transaction log (loop0) [ 244.886630][ T7426] REISERFS (device loop0): Using r5 hash to sort names [ 244.897903][ T7426] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 245.038714][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 246.971065][ T7472] Malformed UNC in devname [ 246.971065][ T7472] [ 246.972319][ T7472] CIFS: VFS: Malformed UNC in devname [ 246.973954][ T7472] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 246.975995][ T7472] SET target dimension over the limit! [ 248.827750][ T7486] loop2: detected capacity change from 0 to 8 [ 249.305485][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.308731][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.354673][ T7486] SQUASHFS error: Unable to read inode 0x11f [ 255.217128][ T7533] loop4: detected capacity change from 0 to 4096 [ 255.290313][ T7533] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 255.572534][ T7533] ntfs3: loop4: mft corrupted [ 255.573567][ T7533] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 255.599636][ T7533] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 263.945162][ T7635] device syzkaller0 entered promiscuous mode [ 264.238123][ T7642] loop0: detected capacity change from 0 to 4096 [ 264.525461][ T7642] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 264.787679][ T7642] ntfs3: loop0: mft corrupted [ 264.788579][ T7642] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 264.792742][ T7642] ntfs3: loop0: Failed to load $AttrDef -> 0 [ 265.180257][ T7657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.971272][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cd62cb62: rx timeout, send abort [ 266.973107][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000cd62cb62: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.456295][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.459494][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.925389][ T7694] Injecting memory failure for pfn 0x225a04 at process virtual address 0x20ffb000 [ 268.927028][ T7694] Memory failure: 0x225a04: already hardware poisoned [ 270.670541][ T7719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.786304][ T7744] netlink: 'syz.0.808': attribute type 13 has an invalid length. [ 271.795834][ T7744] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 271.799428][ T7744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.805079][ T7744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.806642][ T7744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.733030][ T7744] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 272.776993][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b245aab5: rx timeout, send abort [ 272.778676][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b245aab5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 275.501292][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.504162][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.561834][ T7800] loop0: detected capacity change from 0 to 8 [ 275.563759][ T7800] squashfs image failed sanity check [ 276.185284][ T7130] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.210180][ C1] vcan0: j1939_tp_rxtimer: 0x000000007e9f2f9e: rx timeout, send abort [ 277.211587][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000007e9f2f9e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 278.532191][ T7845] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 284.920121][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.925258][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.157032][ T7934] loop4: detected capacity change from 0 to 512 [ 286.836103][ T7934] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 287.685955][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 287.737546][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 288.590211][ T7964] device syzkaller0 entered promiscuous mode [ 289.168168][ T7977] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 289.476522][ T7981] loop0: detected capacity change from 0 to 8 [ 289.483620][ T7981] squashfs image failed sanity check [ 294.893352][ T8061] virt_wifi0 speed is unknown, defaulting to 1000 [ 295.281967][ T8097] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 296.052825][ T8108] loop0: detected capacity change from 0 to 8 [ 296.071440][ T8108] squashfs image failed sanity check [ 296.603766][ T7130] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.181927][ T8125] loop4: detected capacity change from 0 to 8 [ 297.191547][ T8125] squashfs image failed sanity check [ 297.861735][ T8109] loop2: detected capacity change from 0 to 40427 [ 297.882467][ T8109] F2FS-fs (loop2): invalid crc value [ 298.259619][ T8109] F2FS-fs (loop2): Found nat_bits in checkpoint [ 298.275558][ T8109] F2FS-fs (loop2): Start checkpoint disabled! [ 298.355889][ T8109] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 298.996614][ T87] kworker/u4:3: attempt to access beyond end of device [ 298.996614][ T87] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.756132][ T8165] loop4: detected capacity change from 0 to 1024 [ 299.773689][ T8165] EXT4-fs: Ignoring removed i_version option [ 299.781875][ T8165] EXT4-fs: inline encryption not supported [ 299.795787][ T8165] EXT4-fs (loop4): Test dummy encryption mode enabled [ 299.820724][ T8165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 299.840102][ T8171] loop2: detected capacity change from 0 to 512 [ 300.322169][ T8171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.893: invalid indirect mapped block 10 (level 1) [ 300.373119][ T8171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.893: invalid indirect mapped block 8 (level 1) [ 300.408884][ T8171] EXT4-fs (loop2): 1 truncate cleaned up [ 300.409942][ T8171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 302.057345][ T8171] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #15: comm syz.2.893: inline data xattr refers to an external xattr inode [ 302.063819][ T4332] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 302.065300][ T4332] Bluetooth: hci4: Injecting HCI hardware error event [ 302.067499][ T4332] Bluetooth: hci4: hardware error 0x00 [ 302.114073][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 302.121483][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.122619][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.123890][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.127545][ T8179] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 302.133255][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.134680][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.135909][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.137051][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.138269][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 302.139741][ T8179] wlan1 speed is unknown, defaulting to 1000 [ 303.299393][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 303.912010][ T8202] device syzkaller0 entered promiscuous mode [ 303.915730][ T8202] 0: reclassify loop, rule prio 0, protocol 700 [ 304.838123][ T8217] fuse: Bad value for 'fd' [ 305.412546][ T8228] device syzkaller0 entered promiscuous mode [ 305.918462][ T4332] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 307.001780][ T8261] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 307.098486][ T8261] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 307.101265][ T8261] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 307.478557][ T8272] loop0: detected capacity change from 0 to 256 [ 307.505260][ T8272] FAT-fs (loop0): Directory bread(block 64) failed [ 307.506396][ T8272] FAT-fs (loop0): Directory bread(block 65) failed [ 307.507487][ T8272] FAT-fs (loop0): Directory bread(block 66) failed [ 307.508617][ T8272] FAT-fs (loop0): Directory bread(block 67) failed [ 307.509741][ T8272] FAT-fs (loop0): Directory bread(block 68) failed [ 307.510763][ T8272] FAT-fs (loop0): Directory bread(block 69) failed [ 307.511814][ T8272] FAT-fs (loop0): Directory bread(block 70) failed [ 307.512892][ T8272] FAT-fs (loop0): Directory bread(block 71) failed [ 307.513974][ T8272] FAT-fs (loop0): Directory bread(block 72) failed [ 307.515063][ T8272] FAT-fs (loop0): Directory bread(block 73) failed [ 308.379654][ T8261] bond2: (slave gretap2): making interface the new active one [ 308.397541][ T8261] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 308.433555][ T8277] device macvlan2 entered promiscuous mode [ 308.435159][ T8277] device bond2 entered promiscuous mode [ 308.436104][ T8277] device gretap2 entered promiscuous mode [ 308.437460][ T8277] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 310.255344][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.256499][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.358870][ T8277] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 310.388618][ T8285] block device autoloading is deprecated and will be removed. [ 311.502069][ T8277] device bond2 left promiscuous mode [ 311.503128][ T8277] device gretap2 left promiscuous mode [ 312.835255][ T8328] loop2: detected capacity change from 0 to 8192 [ 312.846905][ T8328] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 312.849339][ T8328] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 312.850797][ T8328] REISERFS (device loop2): using ordered data mode [ 312.851774][ T8328] reiserfs: using flush barriers [ 312.852903][ T8328] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 312.855427][ T8328] REISERFS (device loop2): checking transaction log (loop2) [ 312.857623][ T8328] REISERFS (device loop2): Using r5 hash to sort names [ 312.859125][ T8328] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 313.268915][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.270495][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.308604][ T8346] Trying to write to read-only block-device nullb0 [ 314.310882][ T8346] Trying to write to read-only block-device nullb0 [ 314.312360][ T8346] Trying to write to read-only block-device nullb0 [ 314.313773][ T8346] Trying to write to read-only block-device nullb0 [ 314.315099][ T8346] Trying to write to read-only block-device nullb0 [ 314.316499][ T8346] Trying to write to read-only block-device nullb0 [ 314.317733][ T8346] Trying to write to read-only block-device nullb0 [ 314.319115][ T8346] Trying to write to read-only block-device nullb0 [ 314.320340][ T8346] Trying to write to read-only block-device nullb0 [ 314.321695][ T8346] Trying to write to read-only block-device nullb0 [ 314.630907][ T8350] loop4: detected capacity change from 0 to 512 [ 314.673734][ T8350] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 314.675191][ T8350] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 314.685519][ T8350] EXT4-fs (loop4): 1 truncate cleaned up [ 314.686598][ T8350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 315.511218][ T8358] loop2: detected capacity change from 0 to 8 [ 315.519275][ T8358] squashfs image failed sanity check [ 315.531234][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 315.664036][ T8329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.693222][ T8329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.108270][ T8363] loop4: detected capacity change from 0 to 40427 [ 316.120347][ T8363] F2FS-fs (loop4): invalid crc value [ 316.127221][ T8363] F2FS-fs (loop4): Found nat_bits in checkpoint [ 316.153861][ T8363] F2FS-fs (loop4): Start checkpoint disabled! [ 316.160752][ T8363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 316.607415][ T4366] kworker/u4:5: attempt to access beyond end of device [ 316.607415][ T4366] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 317.114156][ T8329] device ip6gre1 left promiscuous mode [ 317.128549][ T8329] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.130287][ T8329] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.131800][ T8329] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.133424][ T8329] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.926264][ T8414] loop0: detected capacity change from 0 to 8 [ 319.938215][ T8414] squashfs image failed sanity check [ 320.447802][ T6918] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.660427][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.772562][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.924544][ T8489] loop0: detected capacity change from 0 to 4096 [ 323.967274][ T8489] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 323.972712][ T8489] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 323.975322][ T8489] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 323.977663][ T8489] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 323.980562][ T8489] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 323.983177][ T8489] ntfs: volume version 3.1. [ 323.985100][ T8489] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 323.987121][ T8489] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 323.990091][ T8489] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 323.993255][ T8489] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 323.994978][ T8489] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 325.935248][ T8518] loop4: detected capacity change from 0 to 8192 [ 326.322360][ T8527] netlink: 'syz.1.987': attribute type 4 has an invalid length. [ 326.532679][ T8518] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 326.534982][ T8518] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 326.537332][ T8518] REISERFS (device loop4): using ordered data mode [ 326.547016][ T8518] reiserfs: using flush barriers [ 326.554063][ T8518] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 326.556967][ T8518] REISERFS (device loop4): checking transaction log (loop4) [ 326.615204][ T8518] REISERFS (device loop4): Using r5 hash to sort names [ 326.616967][ T8518] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 326.632508][ T8534] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 327.331193][ T8534] device bond3 entered promiscuous mode [ 327.368944][ T8550] bond3: (slave ip6gretap1): making interface the new active one [ 327.685494][ T8558] loop0: detected capacity change from 0 to 128 [ 327.987626][ T8550] device ip6gretap1 entered promiscuous mode [ 327.991970][ T8550] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 328.005830][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.991'. [ 328.010829][ T8534] device bond3 left promiscuous mode [ 328.011980][ T8534] device ip6gretap1 left promiscuous mode [ 328.014219][ T8534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.825681][ T8569] loop0: detected capacity change from 0 to 1024 [ 328.830153][ T8569] EXT4-fs: Ignoring removed i_version option [ 328.833604][ T8569] EXT4-fs: inline encryption not supported [ 329.335842][ T8569] EXT4-fs (loop0): Test dummy encryption mode enabled [ 329.636007][ T8569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 330.429290][ T8595] loop4: detected capacity change from 0 to 4096 [ 330.459666][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 330.463340][ T8595] __ntfs_error: 2 callbacks suppressed [ 330.463351][ T8595] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 330.467858][ T8595] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 330.491042][ T8595] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 330.495870][ T8595] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 330.498186][ T8595] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 330.503391][ T8595] ntfs: volume version 3.1. [ 330.505416][ T8595] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 330.507578][ T8595] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 330.511810][ T8595] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 330.514809][ T8595] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 330.516759][ T8595] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 332.216207][ T8634] loop4: detected capacity change from 0 to 8 [ 332.284716][ T8634] squashfs image failed sanity check [ 334.192244][ T8674] overlayfs: failed to clone upperpath [ 334.963012][ T8684] loop2: detected capacity change from 0 to 512 [ 335.383744][ T8684] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1026: inode has both inline data and extents flags [ 335.386566][ T8684] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1026: couldn't read orphan inode 15 (err -117) [ 335.394525][ T8684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 335.920109][ T8696] tipc: Enabling of bearer rejected, failed to enable media [ 336.093745][ T8701] atomic_op 00000000f15224cd conn xmit_atomic 0000000000000000 [ 336.911482][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 337.755283][ T8707] loop0: detected capacity change from 0 to 32768 [ 338.254804][ C1] vcan0: j1939_tp_rxtimer: 0x000000001d7b6b0e: rx timeout, send abort [ 338.256312][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000001d7b6b0e: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.865825][ T8707] XFS (loop0): Mounting V5 Filesystem [ 339.328860][ T8707] XFS (loop0): Ending clean mount [ 339.671914][ T8707] XFS (loop0): Quotacheck needed: Please wait. [ 339.753804][ T8707] XFS (loop0): Quotacheck: Done. [ 340.249339][ T4324] XFS (loop0): Unmounting Filesystem [ 340.296455][ T8771] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 340.300987][ T8771] tipc: Enabled bearer , priority 0 [ 340.303032][ T8771] device syzkaller0 entered promiscuous mode [ 340.362378][ T8771] tipc: Resetting bearer [ 340.379625][ T8770] tipc: Resetting bearer [ 340.459357][ T8770] tipc: Disabling bearer [ 340.603867][ T8777] loop4: detected capacity change from 0 to 64 [ 341.774360][ T8790] hfs: request for non-existent node 131072 in B*Tree [ 341.775560][ T8790] hfs: request for non-existent node 131072 in B*Tree [ 342.882811][ T8797] loop2: detected capacity change from 0 to 8192 [ 343.060991][ T8813] hub 8-0:1.0: USB hub found [ 343.062685][ T8813] hub 8-0:1.0: 8 ports detected [ 343.371648][ T8797] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 343.374430][ T8797] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 343.379559][ T8797] REISERFS (device loop2): using ordered data mode [ 343.384566][ T8797] reiserfs: using flush barriers [ 343.388035][ T8797] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 343.393302][ T8797] REISERFS (device loop2): checking transaction log (loop2) [ 343.395268][ T8797] REISERFS (device loop2): Using r5 hash to sort names [ 343.396587][ T8797] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 345.735794][ T8854] device syzkaller0 left promiscuous mode [ 345.737034][ T8854] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 345.785239][ T8858] loop4: detected capacity change from 0 to 512 [ 345.827991][ T8858] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 345.831432][ T8858] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 345.834662][ T8858] EXT4-fs (loop4): 1 truncate cleaned up [ 345.835855][ T8858] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 346.514688][ T8868] loop2: detected capacity change from 0 to 8 [ 346.547791][ T8868] squashfs image failed sanity check [ 346.686788][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 347.982669][ T8897] syz.2.1079 sent an empty control message without MSG_MORE. [ 349.844871][ T8888] loop0: detected capacity change from 0 to 512 [ 349.869051][ T8888] EXT4-fs: Ignoring removed nobh option [ 349.970226][ T8888] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 349.972541][ T8888] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 349.975438][ T8888] EXT4-fs (loop0): external journal has bad superblock [ 353.717194][ T8953] loop0: detected capacity change from 0 to 512 [ 353.825862][ T8953] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1095: inode has both inline data and extents flags [ 353.831325][ T8953] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1095: couldn't read orphan inode 15 (err -117) [ 353.835190][ T8953] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 355.187945][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 356.066607][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ac3b0e87: rx timeout, send abort [ 356.072135][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ac3b0e87: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 356.625442][ T8996] tipc: Enabled bearer , priority 0 [ 356.627258][ T8996] device syzkaller0 entered promiscuous mode [ 356.635501][ T8996] tipc: Resetting bearer [ 356.637736][ T8993] loop0: detected capacity change from 0 to 8192 [ 356.641884][ T8994] tipc: Resetting bearer [ 356.653210][ T8993] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 356.656467][ T8993] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 356.661328][ T8993] REISERFS (device loop0): using ordered data mode [ 356.662494][ T8993] reiserfs: using flush barriers [ 356.666932][ T8993] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 356.680299][ T8993] REISERFS (device loop0): checking transaction log (loop0) [ 356.685789][ T8993] REISERFS (device loop0): Using r5 hash to sort names [ 356.693737][ T8993] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 356.719302][ T8994] tipc: Disabling bearer [ 358.767067][ T9024] loop0: detected capacity change from 0 to 32768 [ 358.886148][ T9024] XFS (loop0): Mounting V5 Filesystem [ 358.911878][ T9024] XFS (loop0): Ending clean mount [ 359.477001][ T4324] XFS (loop0): Unmounting Filesystem [ 359.872430][ C1] vcan0: j1939_tp_rxtimer: 0x000000006c273af5: rx timeout, send abort [ 360.255373][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000006c273af5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.151807][ T9084] device syzkaller0 entered promiscuous mode [ 362.385394][ T9096] loop4: detected capacity change from 0 to 8 [ 362.396331][ T9096] squashfs image failed sanity check [ 364.109706][ T4332] Bluetooth: Wrong link type (-22) [ 364.275765][ T9128] loop0: detected capacity change from 0 to 512 [ 364.304975][ T9128] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 364.306483][ T9128] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 364.310037][ T9128] EXT4-fs (loop0): 1 truncate cleaned up [ 364.311228][ T9128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 365.230011][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 365.672436][ T9147] loop0: detected capacity change from 0 to 32768 [ 365.678778][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 365.755171][ T9158] loop4: detected capacity change from 0 to 2048 [ 365.761886][ T9147] XFS (loop0): Mounting V5 Filesystem [ 365.825899][ T9147] XFS (loop0): Ending clean mount [ 365.831707][ T9158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 366.396668][ T9174] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 366.819453][ T4324] XFS (loop0): Unmounting Filesystem [ 366.834204][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 366.981787][ T9188] loop2: detected capacity change from 0 to 1024 [ 367.432668][ T9196] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.434308][ T9196] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.435832][ T9196] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.437216][ T9196] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.719873][ T9219] loop4: detected capacity change from 0 to 128 [ 368.729616][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b174e891: rx timeout, send abort [ 368.731239][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b174e891: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 368.776511][ T9219] EXT4-fs (loop4): Test dummy encryption mode enabled [ 368.787699][ T9219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 368.792811][ T9219] System zones: 1-3, 19-19, 35-36 [ 369.107359][ T9219] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 369.115749][ T9219] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.157688][ T9219] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 370.373015][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d2ef9bf8: rx timeout, send abort [ 370.374721][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 370.375930][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000d2ef9bf8: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 370.431868][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 370.482479][ T9236] loop2: detected capacity change from 0 to 8 [ 370.580263][ T9236] squashfs image failed sanity check [ 372.924881][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.926246][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.572820][ T9287] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 375.590066][ T9287] overlayfs: failed to look up (tracing) for ino (-66) [ 378.595157][ T9338] overlayfs: failed to resolve './file1': -2 [ 379.159146][ T9344] loop4: detected capacity change from 0 to 131072 [ 379.705177][ T9344] F2FS-fs (loop4): Found nat_bits in checkpoint [ 379.747931][ T9344] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 380.711839][ T9371] loop4: detected capacity change from 0 to 32768 [ 380.751660][ T9371] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 380.753538][ T9371] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 380.765616][ T9371] BTRFS info (device loop4): setting nodatasum [ 380.766702][ T9371] BTRFS info (device loop4): using free space tree [ 381.123499][ C1] vcan0: j1939_tp_rxtimer: 0x0000000009174943: rx timeout, send abort [ 381.125222][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000009174943: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 381.277803][ T9371] BTRFS info (device loop4): enabling ssd optimizations [ 382.216994][ C0] vcan0: j1939_tp_rxtimer: 0x000000004f16f1b2: rx timeout, send abort [ 382.449397][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000004f16f1b2: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 382.559435][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 385.637542][ T5524] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 387.198585][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 389.750738][ T9497] loop4: detected capacity change from 0 to 512 [ 390.064347][ T9497] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1227: inode has both inline data and extents flags [ 390.067909][ T9497] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1227: couldn't read orphan inode 15 (err -117) [ 390.074381][ T9497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 390.179067][ T9495] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 390.180378][ T9495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.183378][ T9495] vhci_hcd vhci_hcd.0: Device attached [ 390.311542][ C1] vcan0: j1939_tp_rxtimer: 0x000000009ef95950: rx timeout, send abort [ 390.313244][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000009ef95950: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 390.509789][ T4658] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 390.790368][ T9510] overlayfs: failed to resolve './file1': -2 [ 391.100647][ T9498] vhci_hcd: connection reset by peer [ 391.117167][ T5860] vhci_hcd: stop threads [ 391.119650][ T5860] vhci_hcd: release socket [ 391.122551][ T5860] vhci_hcd: disconnect device [ 391.646685][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 395.080879][ T9601] loop0: detected capacity change from 0 to 40427 [ 395.085857][ T9601] F2FS-fs (loop0): invalid crc value [ 395.091921][ T9601] F2FS-fs (loop0): Found nat_bits in checkpoint [ 395.113213][ T9601] F2FS-fs (loop0): Start checkpoint disabled! [ 395.115695][ T9601] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 395.718033][ T5860] kworker/u4:21: attempt to access beyond end of device [ 395.718033][ T5860] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 395.967161][ T4658] vhci_hcd: vhci_device speed not set [ 396.234910][ T9633] loop2: detected capacity change from 0 to 512 [ 396.592594][ T9633] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1247: inode has both inline data and extents flags [ 396.595379][ T9633] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1247: couldn't read orphan inode 15 (err -117) [ 396.597694][ T9633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 397.421754][ T9645] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 397.434317][ T9645] overlayfs: failed to look up (tracing) for ino (-66) [ 398.824605][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 399.155309][ T9671] overlayfs: failed to resolve './file1': -2 [ 399.840866][ T9678] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1252'. [ 400.154098][ T9687] loop0: detected capacity change from 0 to 512 [ 400.247579][ T9684] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 400.248776][ T9684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.250268][ T9684] vhci_hcd vhci_hcd.0: Device attached [ 400.387470][ T9687] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1256: inode has both inline data and extents flags [ 400.391014][ T9687] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1256: couldn't read orphan inode 15 (err -117) [ 400.395009][ T9687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 400.700252][ T4368] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 400.903305][ T9685] vhci_hcd: connection reset by peer [ 400.921848][ T5877] vhci_hcd: stop threads [ 400.922687][ T5877] vhci_hcd: release socket [ 400.923548][ T5877] vhci_hcd: disconnect device [ 401.507577][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 403.159181][ T9714] cgroup: Unknown subsys name 'uid' [ 404.707115][ T9750] loop2: detected capacity change from 0 to 512 [ 404.871282][ T9746] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 404.872548][ T9746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.873927][ T9746] vhci_hcd vhci_hcd.0: Device attached [ 404.914858][ T9750] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1271: inode has both inline data and extents flags [ 404.917534][ T9750] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1271: couldn't read orphan inode 15 (err -117) [ 404.921150][ T9750] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 405.389619][ T9747] vhci_hcd: connection closed [ 405.393862][ T5224] vhci_hcd: stop threads [ 405.395434][ T5224] vhci_hcd: release socket [ 405.396446][ T5224] vhci_hcd: disconnect device [ 405.924983][ T4556] vhci_hcd: vhci_device speed not set [ 405.943051][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 406.026788][ T4368] vhci_hcd: vhci_device speed not set [ 407.999926][ T9804] loop0: detected capacity change from 0 to 128 [ 411.869417][ T9831] loop0: detected capacity change from 0 to 64 [ 412.618893][ T9832] overlayfs: failed to resolve './file1': -2 [ 413.616084][ T9849] loop2: detected capacity change from 0 to 8 [ 413.640790][ T9849] squashfs image failed sanity check [ 414.552247][ T9856] loop0: detected capacity change from 0 to 4096 [ 414.592787][ T9856] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 414.627293][ T9856] ntfs3: loop0: Failed to load $Extend. [ 416.588114][ T9889] overlayfs: failed to resolve './file1': -2 [ 417.333315][ T9900] loop4: detected capacity change from 0 to 8 [ 417.342742][ T9900] squashfs image failed sanity check [ 418.043422][ T7130] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.046725][ T9911] overlayfs: failed to resolve './file1': -2 [ 419.257484][ T9933] loop4: detected capacity change from 0 to 1024 [ 419.266091][ T9933] EXT4-fs: inline encryption not supported [ 419.439343][ T9933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 419.441343][ T9933] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 419.441343][ T9933] [ 419.495657][ T9930] loop0: detected capacity change from 0 to 32768 [ 419.571618][ T9930] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1320 (9930) [ 419.607173][ T7130] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 419.615803][ T9930] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 420.780992][ T9930] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 420.782643][ T9930] BTRFS info (device loop0): setting nodatasum [ 420.791161][ T9930] BTRFS info (device loop0): using free space tree [ 421.832440][ T9930] BTRFS info (device loop0): enabling ssd optimizations [ 423.333971][ T4324] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 424.248228][T10008] loop2: detected capacity change from 0 to 64 [ 426.173946][T10021] loop4: detected capacity change from 0 to 128 [ 427.554577][T10043] loop2: detected capacity change from 0 to 512 [ 427.577166][T10043] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 427.582228][T10043] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 427.592461][T10043] EXT4-fs (loop2): 1 truncate cleaned up [ 427.869694][T10043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 427.990405][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 428.773935][T10061] loop2: detected capacity change from 0 to 16 [ 428.811112][T10061] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 428.830820][T10061] cramfs: unsupported filesystem features [ 429.007538][T10053] loop2: detected capacity change from 0 to 32768 [ 429.022958][T10053] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1350 (10053) [ 429.246503][T10053] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.246584][T10053] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 429.246806][T10053] BTRFS warning (device loop2): excessive commit interval 65536 [ 429.246826][T10053] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 429.382158][T10053] BTRFS error (device loop2): open_ctree failed: -22 [ 430.510372][ T7130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (7130) [ 433.172088][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.596916][T10144] loop4: detected capacity change from 0 to 64 [ 435.746307][T10165] overlayfs: failed to resolve './file1': -2 [ 439.987077][T10211] loop2: detected capacity change from 0 to 64 [ 441.040164][T10223] loop2: detected capacity change from 0 to 32768 [ 441.168348][T10223] XFS (loop2): Mounting V5 Filesystem [ 441.190895][T10223] XFS (loop2): Ending clean mount [ 441.732022][ T4329] XFS (loop2): Unmounting Filesystem [ 443.129768][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bdd9d6d6: rx timeout, send abort [ 443.131310][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000bdd9d6d6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.659443][T10265] loop4: detected capacity change from 0 to 512 [ 443.935094][T10264] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 443.936276][T10264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.937678][T10264] vhci_hcd vhci_hcd.0: Device attached [ 443.949655][T10265] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1399: inode has both inline data and extents flags [ 443.953126][T10265] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1399: couldn't read orphan inode 15 (err -117) [ 443.955584][T10265] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 444.368625][ T7] usb 10-1: new low-speed USB device number 3 using vhci_hcd [ 444.496082][T10266] vhci_hcd: connection reset by peer [ 444.603424][ T4586] vhci_hcd: stop threads [ 444.606263][ T4586] vhci_hcd: release socket [ 444.610174][ T4586] vhci_hcd: disconnect device [ 445.432650][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 446.469531][T10291] device macvtap1 entered promiscuous mode [ 446.918918][T10296] device syzkaller0 entered promiscuous mode [ 446.922017][T10296] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 448.076630][T10323] loop0: detected capacity change from 0 to 512 [ 448.108596][T10323] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 448.110096][T10323] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 448.115179][T10323] EXT4-fs (loop0): 1 truncate cleaned up [ 448.169330][T10323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 448.217537][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 449.459915][ C0] vcan0: j1939_tp_rxtimer: 0x000000004f82ad02: rx timeout, send abort [ 449.461399][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000004f82ad02: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 449.569031][ T7] vhci_hcd: vhci_device speed not set [ 452.346116][T10381] overlayfs: missing 'lowerdir' [ 452.411983][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 452.413979][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1427'. [ 452.415924][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 452.417424][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 457.233601][T10425] loop0: detected capacity change from 0 to 512 [ 457.454857][T10425] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1439: inode has both inline data and extents flags [ 457.457710][T10425] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1439: couldn't read orphan inode 15 (err -117) [ 457.480444][T10425] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 457.896388][T10424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 457.897473][T10424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 457.899311][T10424] vhci_hcd vhci_hcd.0: Device attached [ 458.112387][T10426] vhci_hcd: connection closed [ 458.116576][ T5886] vhci_hcd: stop threads [ 458.118196][ T5886] vhci_hcd: release socket [ 458.128208][ T5886] vhci_hcd: disconnect device [ 458.189520][ T4370] vhci_hcd: vhci_device speed not set [ 458.800607][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 460.261108][T10454] loop4: detected capacity change from 0 to 32768 [ 460.301773][T10454] XFS (loop4): Mounting V5 Filesystem [ 460.334910][T10454] XFS (loop4): Ending clean mount [ 460.816970][ T5524] XFS (loop4): Unmounting Filesystem [ 461.598017][T10496] device syzkaller0 entered promiscuous mode [ 464.039174][T10546] loop4: detected capacity change from 0 to 512 [ 464.181903][T10543] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 464.183123][T10543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.184617][T10543] vhci_hcd vhci_hcd.0: Device attached [ 464.198395][T10546] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1467: inode has both inline data and extents flags [ 464.201719][T10546] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1467: couldn't read orphan inode 15 (err -117) [ 464.204108][T10546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 464.627104][ T4368] usb 10-1: new low-speed USB device number 4 using vhci_hcd [ 464.635770][T10550] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 464.648739][ T4544] vhci_hcd: stop threads [ 464.649524][ T4544] vhci_hcd: release socket [ 464.650422][ T4544] vhci_hcd: disconnect device [ 465.314398][ T5524] EXT4-fs (loop4): unmounting filesystem. [ 465.362519][T10559] device syzkaller0 entered promiscuous mode [ 468.366997][T10612] loop4: detected capacity change from 0 to 40427 [ 468.375359][T10612] F2FS-fs (loop4): invalid crc value [ 468.426022][T10612] F2FS-fs (loop4): Found nat_bits in checkpoint [ 468.453841][T10612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 468.649731][T10623] syz.4.1487: attempt to access beyond end of device [ 468.649731][T10623] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 469.314635][ T5524] syz-executor: attempt to access beyond end of device [ 469.314635][ T5524] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 470.021816][ T4368] vhci_hcd: vhci_device speed not set [ 470.902142][T10668] loop0: detected capacity change from 0 to 512 [ 470.936610][T10668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 470.945561][T10668] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.757733][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 471.777040][T10683] loop2: detected capacity change from 0 to 8 [ 471.793153][T10683] squashfs image failed sanity check [ 472.774950][T10696] loop0: detected capacity change from 0 to 40427 [ 472.784240][T10692] device macvtap1 entered promiscuous mode [ 472.811459][T10696] F2FS-fs (loop0): Found nat_bits in checkpoint [ 472.822521][T10696] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 474.936464][T10729] overlayfs: missing 'lowerdir' [ 474.999797][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 475.001372][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1516'. [ 475.002833][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 475.004255][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 476.114963][T10745] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1523'. [ 477.690100][T10785] overlayfs: missing 'lowerdir' [ 477.700293][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 477.702015][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 477.703382][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 477.704816][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1532'. [ 478.051318][T10788] loop0: detected capacity change from 0 to 8 [ 478.062885][T10788] squashfs image failed sanity check [ 479.721278][T10825] loop4: detected capacity change from 0 to 8 [ 479.721403][T10818] siw: device registration error -23 [ 479.733090][T10825] squashfs image failed sanity check [ 482.894217][T10874] loop4: detected capacity change from 0 to 256 [ 482.918577][T10874] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d) [ 482.921196][T10874] exFAT-fs (loop4): failed to load alloc-bitmap [ 482.922653][T10874] exFAT-fs (loop4): failed to recognize exfat type [ 484.576570][T10881] loop2: detected capacity change from 0 to 32768 [ 484.585222][T10881] XFS (loop2): Mounting V5 Filesystem [ 484.599844][T10881] XFS (loop2): Ending clean mount [ 484.995905][ T4329] XFS (loop2): Unmounting Filesystem [ 485.911812][T10926] loop0: detected capacity change from 0 to 512 [ 486.242482][T10924] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 486.243734][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.245083][T10924] vhci_hcd vhci_hcd.0: Device attached [ 486.281745][T10926] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1572: inode has both inline data and extents flags [ 486.284635][T10926] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1572: couldn't read orphan inode 15 (err -117) [ 486.287170][T10926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 486.668370][ T22] usb 2-1: new low-speed USB device number 4 using vhci_hcd [ 486.799080][T10925] vhci_hcd: connection reset by peer [ 486.800846][ T5880] vhci_hcd: stop threads [ 486.801626][ T5880] vhci_hcd: release socket [ 486.802439][ T5880] vhci_hcd: disconnect device [ 487.327873][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 488.999035][T10938] overlayfs: failed to clone upperpath [ 491.921438][ T22] vhci_hcd: vhci_device speed not set [ 492.227828][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 492.227836][ T27] audit: type=1326 audit(2000000344.701:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 492.236046][ T27] audit: type=1326 audit(2000000344.711:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 492.253144][T11000] ------------[ cut here ]------------ [ 492.254425][T11000] WARNING: CPU: 0 PID: 11000 at security/landlock/fs.c:752 collect_domain_accesses+0x6d8/0x738 [ 492.255943][ T27] audit: type=1326 audit(2000000344.731:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 492.256213][T11000] Modules linked in: [ 492.260711][T11000] CPU: 0 PID: 11000 Comm: syz.4.1595 Not tainted syzkaller #0 [ 492.261894][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 492.263482][T11000] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 492.264693][T11000] pc : collect_domain_accesses+0x6d8/0x738 [ 492.265838][T11000] lr : collect_domain_accesses+0x6d4/0x738 [ 492.266839][T11000] sp : ffff800020ed78c0 [ 492.267556][T11000] x29: ffff800020ed7900 x28: 0000000000000001 x27: ffff800020ed79fa [ 492.268968][T11000] x26: ffff0000cb60d0ac x25: 0000000000000000 x24: ffff0000e0cd7608 [ 492.269604][ T27] audit: type=1326 audit(2000000344.731:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff963786e0 code=0x7ffc0000 [ 492.270238][T11000] x23: 0000000000002004 x22: ffffffffffffffff x21: ffffffffffffffff [ 492.275093][T11000] x20: ffff0000e0cd6000 x19: 0000000000000000 x18: 0000000000000000 [ 492.276351][T11000] x17: 0000000000000000 x16: ffff8000082d7db8 x15: 0000000000000000 [ 492.277581][T11000] x14: 0000000000000001 x13: 1ffff00002a44071 x12: 0000000000080000 [ 492.278908][T11000] x11: 0000000000001246 x10: ffff8000333af000 x9 : ffff80000a58af80 [ 492.280231][ T27] audit: type=1326 audit(2000000344.731:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9635b8ac code=0x7ffc0000 [ 492.280318][T11000] x8 : 0000000000001247 x7 : ffff80000a586678 x6 : 0000000000000000 [ 492.285623][T11000] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 492.287084][T11000] x2 : 0000000000000008 x1 : ffff800011b9ebc0 x0 : ffff0000e0cd7658 [ 492.288544][T11000] Call trace: [ 492.288831][ T27] audit: type=1326 audit(2000000344.731:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff9637878c code=0x7ffc0000 [ 492.289137][T11000] collect_domain_accesses+0x6d8/0x738 [ 492.294002][T11000] current_check_refer_path+0x408/0x804 [ 492.294960][T11000] hook_path_rename+0x4c/0x60 [ 492.295735][T11000] security_path_rename+0x154/0x1f0 [ 492.296655][T11000] do_renameat2+0x5b8/0xa74 [ 492.297331][ T27] audit: type=1326 audit(2000000344.731:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9635b8ac code=0x7ffc0000 [ 492.297431][T11000] __arm64_sys_renameat2+0xe0/0xfc [ 492.301816][T11000] invoke_syscall+0x98/0x2b4 [ 492.302637][T11000] el0_svc_common+0x138/0x258 [ 492.303381][T11000] do_el0_svc+0x58/0x130 [ 492.304083][T11000] el0_svc+0x58/0x128 [ 492.304845][T11000] el0t_64_sync_handler+0x84/0xf0 [ 492.305741][T11000] el0t_64_sync+0x18c/0x190 [ 492.306274][ T27] audit: type=1326 audit(2000000344.731:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9635b8ac code=0x7ffc0000 [ 492.306533][T11000] irq event stamp: 1750 [ 492.311020][T11000] hardirqs last enabled at (1749): [] mod_objcg_state+0x338/0x4fc [ 492.312579][T11000] hardirqs last disabled at (1750): [] el1_dbg+0x24/0x80 [ 492.313921][T11000] softirqs last enabled at (1720): [] local_bh_enable+0x10/0x34 [ 492.315458][T11000] softirqs last disabled at (1718): [] local_bh_disable+0x10/0x34 [ 492.316971][T11000] ---[ end trace 0000000000000000 ]--- [ 492.380089][ T27] audit: type=1326 audit(2000000344.731:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 492.383969][ T27] audit: type=1326 audit(2000000344.731:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.3.1593" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff963789e8 code=0x7ffc0000 [ 494.558761][ T2059] ieee802154 phy0 wpan0: encryption failed: -22