last executing test programs: 5m52.97382184s ago: executing program 1 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket(0x2000000000000021, 0x2, 0x10000000000002) fsopen(&(0x7f0000000200)='afs\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x189}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x3}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044002) 5m50.374773172s ago: executing program 1 (id=67): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r1) 5m49.519330409s ago: executing program 1 (id=69): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) flock(0xffffffffffffffff, 0xc) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 5m49.323668597s ago: executing program 1 (id=73): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 5m49.103116377s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 5m48.798014591s ago: executing program 1 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x6) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x110) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d5) 5m33.626393918s ago: executing program 32 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x6) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x110) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d5) 11.323073599s ago: executing program 5 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x0, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a3100000000060002408809000014000480060007400000000608000640210000090500030006"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 10.338860072s ago: executing program 5 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) socket$inet(0xa, 0x801, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x21) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 10.299900724s ago: executing program 2 (id=1638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, 0x0, 0x20008000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x8, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket$can_raw(0x1d, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4950}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x8090) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 8.845486797s ago: executing program 5 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730133000000000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYBLOB='1-', @ANYBLOB='N'], 0x28) 8.659286185s ago: executing program 2 (id=1643): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r4) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 7.738790965s ago: executing program 0 (id=1646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 7.687228247s ago: executing program 5 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) 7.656388688s ago: executing program 3 (id=1648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1) 6.628464253s ago: executing program 3 (id=1650): pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.284284018s ago: executing program 2 (id=1651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0) 5.323066569s ago: executing program 3 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 5.272504572s ago: executing program 4 (id=1653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 5.07566515s ago: executing program 4 (id=1654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5.07497831s ago: executing program 2 (id=1664): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}}], 0x1, 0x0) 4.080332793s ago: executing program 2 (id=1655): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 4.034864745s ago: executing program 4 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x11a}, 0x20) 3.994568067s ago: executing program 0 (id=1657): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.91891882s ago: executing program 2 (id=1658): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc", 0x24) 3.717663519s ago: executing program 0 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}}) 2.838580657s ago: executing program 4 (id=1660): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x80000000}]}}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 2.7724687s ago: executing program 3 (id=1661): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 2.580717548s ago: executing program 0 (id=1662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 2.477723563s ago: executing program 3 (id=1663): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 1.436775698s ago: executing program 5 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r4, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 1.14085952s ago: executing program 0 (id=1666): r0 = socket(0x2b, 0x1, 0x1) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) 1.140165451s ago: executing program 4 (id=1667): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x2007}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x20000000}) 129.656774ms ago: executing program 5 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000d80ffff", 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) 128.971104ms ago: executing program 3 (id=1669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 108.807896ms ago: executing program 0 (id=1670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 4 (id=1671): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89, 0x50108}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "130da108d2"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004c8f4}, 0x4000000) unshare(0x60000480) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) kernel console output (not intermixed with test programs): dv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.785495][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.825473][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.838551][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.855505][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.870337][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.887492][ T4264] device veth0_macvtap entered promiscuous mode [ 61.902832][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.928273][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.945226][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.963067][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.973140][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.984953][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.000349][ T4283] Bluetooth: hci4: unexpected event 0x3e length: 263 > 260 [ 62.000383][ T4283] Bluetooth: hci4: unexpected subevent 0x0d length: 262 > 260 [ 62.017498][ T4283] Bluetooth: hci4: adv larger than maximum supported [ 62.017552][ T4283] Bluetooth: hci4: adv larger than maximum supported [ 62.037063][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.084445][ T4264] device veth1_macvtap entered promiscuous mode [ 62.103399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.122562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.160648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.173779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.199956][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.209960][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.237067][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.252279][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.373200][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.391930][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.403979][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.443658][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.727152][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.779839][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.824869][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.860011][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.888226][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 62.969486][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.993831][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 63.023350][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 63.035911][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 63.042083][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 63.064977][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.082373][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.093551][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.105123][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.117338][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.128796][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.139372][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.150453][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.161029][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.171901][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.183723][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.210380][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.242522][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.256164][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.266334][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.282008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.305050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.310695][ T4411] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.341698][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.380860][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.383269][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.425112][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.440866][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.450425][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.475707][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.490583][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.511055][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.532075][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.551119][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.567166][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.589718][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.595248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.661664][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.684477][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.989062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 63.998894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.008659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.018423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.026935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.035378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.048898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.060695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.071575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 64.081994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 64.761116][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.783228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.014741][ T4423] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.19'. [ 65.085975][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.175618][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.199393][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.337547][ T4433] device syzkaller0 entered promiscuous mode [ 65.511092][ T4441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.536632][ T4441] device bond_slave_0 entered promiscuous mode [ 65.543180][ T4441] device bond_slave_1 entered promiscuous mode [ 65.550736][ T4441] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.559510][ T4441] bond1: (slave macvlan2): making interface the new active one [ 65.569227][ T4441] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 65.587227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 66.956187][ T4453] sched: RT throttling activated [ 69.279460][ T4324] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.491524][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 69.523278][ T4497] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.532405][ T4497] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.541221][ T4497] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.549961][ T4497] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.571578][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.597353][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 69.606296][ T4324] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 69.615965][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.620590][ T4497] Zero length message leads to an empty skb [ 69.639885][ T4324] usb 5-1: config 0 descriptor?? [ 69.666505][ T4324] pwc: Askey VC010 type 2 USB webcam detected. [ 70.176295][ T4324] pwc: recv_control_msg error -32 req 02 val 2b00 [ 70.204976][ T4324] pwc: recv_control_msg error -32 req 02 val 2700 [ 70.283037][ T4324] pwc: recv_control_msg error -32 req 02 val 2c00 [ 70.364664][ T4324] pwc: recv_control_msg error -32 req 04 val 1000 [ 70.442630][ T4324] pwc: recv_control_msg error -32 req 04 val 1300 [ 70.513592][ T4324] pwc: recv_control_msg error -32 req 04 val 1400 [ 70.555259][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059dd9000: rx timeout, send abort [ 70.565442][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059dd9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 70.580145][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ddac00: rx timeout, send abort [ 70.726563][ T4324] pwc: recv_control_msg error -32 req 02 val 2000 [ 70.756465][ T4324] pwc: recv_control_msg error -32 req 02 val 2100 [ 70.795559][ T4512] netlink: 'syz.1.44': attribute type 1 has an invalid length. [ 71.088380][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ddac00: abort rx timeout. Force session deactivation [ 71.120008][ T4324] pwc: recv_control_msg error -71 req 02 val 2500 [ 71.135861][ T4324] pwc: recv_control_msg error -71 req 02 val 2400 [ 71.146128][ T4324] pwc: recv_control_msg error -71 req 02 val 2600 [ 71.160697][ T4324] pwc: recv_control_msg error -71 req 02 val 2900 [ 71.186970][ T4324] pwc: recv_control_msg error -71 req 02 val 2800 [ 71.194327][ T4324] pwc: recv_control_msg error -71 req 04 val 1100 [ 71.217632][ T4324] pwc: recv_control_msg error -71 req 04 val 1200 [ 71.224188][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 71.349806][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364514][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.800007][ T4324] pwc: Registered as video103. [ 71.809683][ T4324] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 71.830289][ T4324] usb 5-1: USB disconnect, device number 2 [ 74.010237][ T4553] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 74.064424][ T4564] process 'syz.2.60' launched './file0' with NULL argv: empty string added [ 76.460047][ T26] cfg80211: failed to load regulatory.db [ 80.179048][ T4651] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 3944. macoff=96 [ 80.278591][ T4653] loop3: detected capacity change from 0 to 512 [ 80.355807][ T4653] ======================================================= [ 80.355807][ T4653] WARNING: The mand mount option has been deprecated and [ 80.355807][ T4653] and is ignored by this kernel. Remove the mand [ 80.355807][ T4653] option from the mount to silence this warning. [ 80.355807][ T4653] ======================================================= [ 80.515686][ T4653] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2769: inode #11: comm syz.3.94: corrupted xattr block 95 [ 80.672556][ T4653] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 80.729716][ T4653] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.94: bg 0: block 7: invalid block bitmap [ 80.803019][ T4653] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 80.844567][ T4653] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2935: inode #11: comm syz.3.94: corrupted xattr block 95 [ 80.895098][ T4653] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 80.954538][ T4653] EXT4-fs (loop3): 1 orphan inode deleted [ 80.978266][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.218076][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 83.814568][ T4708] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 83.853536][ T4710] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.798084][ T4324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.987052][ T4324] usb 5-1: Using ep0 maxpacket: 16 [ 85.002347][ T4324] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 85.021479][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.045999][ T4324] usb 5-1: Product: syz [ 85.059133][ T4324] usb 5-1: Manufacturer: syz [ 85.069574][ T4324] usb 5-1: SerialNumber: syz [ 85.085863][ T4324] usb 5-1: config 0 descriptor?? [ 85.096059][ T4324] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 85.106049][ T4324] usb 5-1: Detected FT232H [ 85.366364][ T4324] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 85.384850][ T4324] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 85.403839][ T4324] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 85.478031][ T4324] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.561226][ T4324] usb 5-1: USB disconnect, device number 3 [ 85.648816][ T4324] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 85.694220][ T4324] ftdi_sio 5-1:0.0: device disconnected [ 86.552950][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 88.083045][ T4789] netlink: 156 bytes leftover after parsing attributes in process `syz.2.141'. [ 88.105605][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 88.225101][ T4791] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 88.286506][ T4791] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 88.397870][ T4791] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 88.463071][ T4791] bond1: (slave vcan1): making interface the new active one [ 88.512191][ T4791] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 88.525974][ T4798] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 88.548135][ T4798] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 88.565466][ T27] audit: type=1326 audit(1764180782.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.3.140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x0 [ 88.735147][ T4807] device team0 entered promiscuous mode [ 88.741867][ T4807] device team_slave_0 entered promiscuous mode [ 88.748677][ T4807] device team_slave_1 entered promiscuous mode [ 88.756461][ T4807] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.796874][ T4807] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 88.873749][ T4807] bridge0: port 3(vlan2) entered blocking state [ 88.881242][ T4807] bridge0: port 3(vlan2) entered disabled state [ 88.894482][ T4807] device vlan2 entered promiscuous mode [ 88.911942][ T4807] device bond0 entered promiscuous mode [ 88.917913][ T4807] device bond_slave_0 entered promiscuous mode [ 88.924328][ T4807] device bond_slave_1 entered promiscuous mode [ 88.931210][ T4807] device macvlan2 entered promiscuous mode [ 90.082791][ T4841] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.102029][ T4841] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.124059][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 90.146066][ T4841] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.190010][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 90.236552][ T4841] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 90.270150][ T4841] UDF-fs: Scanning with blocksize 512 failed [ 90.282167][ T4841] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.300689][ T4841] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.321401][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 90.344322][ T4841] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.365271][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 90.388696][ T4841] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 90.398478][ T4841] UDF-fs: Scanning with blocksize 1024 failed [ 90.409648][ T4841] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.430670][ T4841] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.452024][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 90.473524][ T4841] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.496399][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 90.515150][ T4841] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 90.529783][ T4841] UDF-fs: Scanning with blocksize 2048 failed [ 90.536607][ T4841] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.556126][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 90.566322][ T4841] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 90.576459][ T4841] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 90.586774][ T4841] UDF-fs: Scanning with blocksize 4096 failed [ 90.602406][ T4841] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 90.861943][ T4859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 90.930360][ T4864] xt_connbytes: Forcing CT accounting to be enabled [ 90.937448][ T4864] Cannot find set identified by id 0 to match [ 90.963844][ T4863] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.591133][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 92.644783][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 92.961269][ T4324] Process accounting resumed [ 93.454906][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.465139][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.473902][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.488667][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.499394][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.507813][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.519574][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.629231][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.982098][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.004281][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.108076][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.120869][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.215394][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.226988][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.285009][ T4910] chnl_net:caif_netlink_parms(): no params data found [ 94.373882][ T4932] netlink: 'syz.3.190': attribute type 11 has an invalid length. [ 94.690250][ T4910] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.705028][ T4910] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.727578][ T4910] device bridge_slave_0 entered promiscuous mode [ 94.762388][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.796097][ T4910] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.834544][ T4910] device bridge_slave_1 entered promiscuous mode [ 95.576956][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 96.021825][ T4910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.149028][ T4910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.238435][ T27] audit: type=1800 audit(1764180790.180:3): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.193" name="bus" dev="ramfs" ino=36117 res=0 errno=0 [ 96.340859][ T4910] team0: Port device team_slave_0 added [ 96.539275][ T4968] loop4: detected capacity change from 0 to 2048 [ 96.554593][ T4910] team0: Port device team_slave_1 added [ 96.606671][ T4973] capability: warning: `syz.0.202' uses deprecated v2 capabilities in a way that may be insecure [ 96.694733][ T4968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.802776][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.813142][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.880863][ T4910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.002073][ T4910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.016749][ T4910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.126907][ T4910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.192582][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 97.657023][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 97.668578][ T4910] device hsr_slave_0 entered promiscuous mode [ 97.697578][ T4910] device hsr_slave_1 entered promiscuous mode [ 97.748644][ T4910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.764488][ T4910] Cannot create hsr debugfs directory [ 99.738949][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 100.526337][ T5057] loop3: detected capacity change from 0 to 2048 [ 100.562204][ T5057] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 100.583874][ T5057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.622189][ T46] device hsr_slave_0 left promiscuous mode [ 100.655185][ T46] device hsr_slave_1 left promiscuous mode [ 100.692723][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.751939][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.773903][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.812356][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.835092][ T46] device bridge_slave_1 left promiscuous mode [ 100.857015][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.888955][ T5061] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.221'. [ 100.911483][ T5061] netlink: zone id is out of range [ 100.933360][ T46] device bridge_slave_0 left promiscuous mode [ 100.945177][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.098145][ T46] device veth1_macvtap left promiscuous mode [ 101.104685][ T46] device veth0_macvtap left promiscuous mode [ 101.129389][ T46] device veth1_vlan left promiscuous mode [ 101.136659][ T46] device veth0_vlan left promiscuous mode [ 101.818114][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 102.607729][ T46] team0 (unregistering): Port device team_slave_1 removed [ 102.655389][ T46] team0 (unregistering): Port device team_slave_0 removed [ 102.696327][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.742868][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.900909][ T4337] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.132148][ T4337] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 103.142159][ T4337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.155436][ T4337] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 103.165929][ T4337] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 103.178984][ T4337] usb 3-1: Manufacturer: syz [ 103.185911][ T4337] usb 3-1: config 0 descriptor?? [ 103.196801][ T46] bond0 (unregistering): Released all slaves [ 103.287043][ T4337] rc_core: IR keymap rc-hauppauge not found [ 103.295299][ T4337] Registered IR keymap rc-empty [ 103.303022][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.314155][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.322824][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.324762][ T4337] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 103.349520][ T4337] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 103.356699][ T5073] device bridge_slave_0 left promiscuous mode [ 103.376106][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.395325][ T5073] device bridge_slave_1 left promiscuous mode [ 103.412471][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.425461][ T5073] device vlan2 left promiscuous mode [ 103.431806][ T5073] device bond0 left promiscuous mode [ 103.446121][ T5073] device bond_slave_0 left promiscuous mode [ 103.462910][ T5073] device bond_slave_1 left promiscuous mode [ 103.469787][ T5073] device macvlan2 left promiscuous mode [ 103.486323][ T5073] bond0: (slave bond_slave_0): Releasing backup interface [ 103.542644][ T5073] bond0: (slave bond_slave_1): Releasing backup interface [ 103.581468][ T5073] device team_slave_0 left promiscuous mode [ 103.641502][ T5073] team0: Port device team_slave_0 removed [ 103.658125][ T5073] device team_slave_1 left promiscuous mode [ 103.707458][ T5073] team0: Port device team_slave_1 removed [ 103.715196][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.737442][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.756107][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.763869][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.797123][ T5073] bond0: (slave macvlan2): Releasing backup interface [ 103.826019][ T5073] device team0 left promiscuous mode [ 103.845864][ T5073] bridge0: port 3(vlan2) entered disabled state [ 103.986277][ T4316] usb 3-1: USB disconnect, device number 2 [ 104.001964][ T4910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.056076][ T4910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.110852][ T4910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.143211][ T4910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.628029][ T4910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.709296][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.730658][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.781789][ T4910] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.845443][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.863000][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.909158][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.916354][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.974722][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.005996][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.026252][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.041583][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.048796][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.076789][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.139167][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 105.172240][ T5145] device bridge_slave_1 left promiscuous mode [ 105.179674][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.199697][ T5145] device bridge_slave_0 left promiscuous mode [ 105.216365][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.440813][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.460588][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.501727][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.526248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.541508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.552990][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.571994][ T5155] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 105.613869][ T5155] device bond1 entered promiscuous mode [ 105.620049][ T5155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.630268][ T5157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.249'. [ 105.710969][ T5161] bond1: (slave bridge1): making interface the new active one [ 105.730334][ T5161] device bridge1 entered promiscuous mode [ 105.739020][ T5161] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 105.763498][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 105.802020][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.848679][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.893024][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.927284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.937550][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.946770][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 110.480802][ T5201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.544255][ T5201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.979045][ T5201] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.993375][ T5201] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.002348][ T5201] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.016389][ T5201] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.293414][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.302054][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.326348][ T4910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.360912][ T5201] syz.2.257 (5201) used greatest stack depth: 20768 bytes left [ 111.503313][ T5237] loop2: detected capacity change from 0 to 512 [ 111.590419][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.742008][ T5119] udevd[5119]: incorrect ext4 checksum on /dev/loop2 [ 111.772695][ T5237] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.265: Invalid inode bitmap blk 2678575585 in block_group 0 [ 111.822178][ T5248] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.265: Invalid inode table block 1433565978 in block_group 0 [ 111.904649][ T5248] EXT4-fs warning (device loop2): ext4_group_add:1748: Error opening resize inode [ 112.066471][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 113.263221][ T5276] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 113.276383][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.286783][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.337767][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.346745][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.362043][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.371595][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.385475][ T4910] device veth0_vlan entered promiscuous mode [ 113.436648][ T5284] overlayfs: failed to clone upperpath [ 113.443590][ T4910] device veth1_vlan entered promiscuous mode [ 113.632111][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.646012][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.681078][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.708438][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.738674][ T4910] device veth0_macvtap entered promiscuous mode [ 113.782528][ T4910] device veth1_macvtap entered promiscuous mode [ 113.799851][ T5297] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 113.875330][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.930704][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.983483][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.014458][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.053520][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.094583][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.112830][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.173755][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.192144][ T4281] Bluetooth: Frame is too long (len 16, expected len 4) [ 114.239547][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.300771][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.342977][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.420551][ T4910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.452126][ T4910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.522086][ T4910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.552196][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.574956][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.613050][ T4910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.640094][ T4910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.666137][ T4910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.696037][ T4910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.115560][ T5328] netlink: 156 bytes leftover after parsing attributes in process `syz.2.288'. [ 115.147724][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.174891][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.242064][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.372043][ T4509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.423157][ T4509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.477381][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.856358][ T5343] netlink: 'syz.5.172': attribute type 1 has an invalid length. [ 115.891901][ T5345] syz.2.292 uses obsolete (PF_INET,SOCK_PACKET) [ 115.905149][ T5343] device gre0 entered promiscuous mode [ 116.828182][ T5371] IPVS: sed: FWM 3 0x00000003 - no destination available [ 117.740472][ T5380] tipc: Started in network mode [ 117.758949][ T5380] tipc: Node identity 42088dc441d, cluster identity 4711 [ 117.783335][ T5384] loop3: detected capacity change from 0 to 256 [ 117.800760][ T5380] tipc: Enabled bearer , priority 0 [ 117.902643][ T5384] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 117.984503][ T5386] device syzkaller0 entered promiscuous mode [ 118.037041][ T5386] tipc: Resetting bearer [ 118.154627][ T5376] tipc: Resetting bearer [ 118.459874][ T5402] loop4: detected capacity change from 0 to 1024 [ 118.868851][ T26] tipc: Node number set to 64523716 [ 119.450076][ T5415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.811884][ T5376] tipc: Disabling bearer [ 121.831521][ T5431] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 121.862887][ T5431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'. [ 121.984412][ T5431] team0: Port device geneve0 added [ 122.003917][ T5434] netlink: 'syz.5.321': attribute type 4 has an invalid length. [ 122.058226][ T5436] netlink: 'syz.5.321': attribute type 17 has an invalid length. [ 122.108114][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 123.152973][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'. [ 123.294926][ T5458] netlink: 'syz.5.329': attribute type 1 has an invalid length. [ 124.980848][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 126.021132][ T5507] loop2: detected capacity change from 0 to 4096 [ 126.166983][ T5507] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 126.391014][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bdf4c00: rx timeout, send abort [ 126.443939][ T5507] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 126.471676][ T5507] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 126.891406][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802613fc00: rx timeout, send abort [ 126.899986][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bdf4c00: abort rx timeout. Force session deactivation [ 126.985452][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.994177][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.128865][ T5510] device bond_slave_0 left promiscuous mode [ 127.151240][ T5510] device bond_slave_1 left promiscuous mode [ 127.399738][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802613fc00: abort rx timeout. Force session deactivation [ 128.264077][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.315470][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.916886][ T5510] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.925818][ T5510] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.944538][ T5510] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.955157][ T5510] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.195168][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 129.327536][ T5526] netlink: 'syz.2.347': attribute type 13 has an invalid length. [ 129.341496][ T5526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 129.367638][ T5544] netlink: 'syz.4.352': attribute type 12 has an invalid length. [ 129.696611][ T5559] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 130.026735][ T5571] sock: sock_set_timeout: `syz.0.359' (pid 5571) tries to set negative timeout [ 130.221252][ T5582] netlink: 'syz.0.361': attribute type 4 has an invalid length. [ 130.289767][ T5582] netlink: 'syz.0.361': attribute type 17 has an invalid length. [ 130.306217][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 131.938403][ T5632] sock: sock_set_timeout: `syz.2.373' (pid 5632) tries to set negative timeout [ 132.386188][ T5640] loop5: detected capacity change from 0 to 256 [ 132.502888][ T5640] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 132.780629][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.787173][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034559][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.378'. [ 133.381136][ T5661] fuse: Bad value for 'fd' [ 133.859938][ T5666] loop5: detected capacity change from 0 to 4096 [ 133.882651][ T5666] EXT4-fs: Mount option(s) incompatible with ext3 [ 133.922572][ T5666] Bluetooth: MGMT ver 1.22 [ 134.306008][ T5678] sock: sock_set_timeout: `syz.3.389' (pid 5678) tries to set negative timeout [ 134.890518][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 135.096047][ T27] audit: type=1800 audit(1764180829.030:4): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.388" name="bus" dev="ramfs" ino=38309 res=0 errno=0 [ 135.390187][ T5703] netlink: 'syz.5.395': attribute type 13 has an invalid length. [ 135.401941][ T5703] netlink: 28 bytes leftover after parsing attributes in process `syz.5.395'. [ 136.672362][ T4281] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 136.738426][ T5742] device team0 entered promiscuous mode [ 136.806733][ T5742] device team_slave_0 entered promiscuous mode [ 136.833053][ T5742] device team_slave_1 entered promiscuous mode [ 136.877270][ T5742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.939822][ T5742] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 136.980734][ T5749] bridge0: port 3(vlan2) entered blocking state [ 137.016452][ T5749] bridge0: port 3(vlan2) entered disabled state [ 137.088530][ T5749] device vlan2 entered promiscuous mode [ 137.113913][ T5749] device bond0 entered promiscuous mode [ 137.136321][ T5749] device bond_slave_0 entered promiscuous mode [ 137.169355][ T5749] device bond_slave_1 entered promiscuous mode [ 137.192632][ T5749] device macvlan2 entered promiscuous mode [ 137.409630][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'. [ 137.626048][ T27] audit: type=1800 audit(1764180831.560:5): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.408" name="bus" dev="ramfs" ino=38393 res=0 errno=0 [ 137.650267][ T5768] loop3: detected capacity change from 0 to 1024 [ 137.715908][ T5768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.873477][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 139.338369][ T5793] loop3: detected capacity change from 0 to 512 [ 139.394309][ T5793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.466673][ T5793] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.516581][ T5793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.538907][ T5799] netlink: 'syz.0.420': attribute type 13 has an invalid length. [ 139.546681][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.420'. [ 139.726507][ T5793] EXT4-fs (loop3): 1 truncate cleaned up [ 139.735482][ T5793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.527082][ T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.738705][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.260570][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.316271][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.365775][ T126] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.391436][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.455450][ T126] usb 4-1: config 0 descriptor?? [ 141.572600][ T5818] kernel profiling enabled (shift: 17) [ 141.843750][ T5831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 141.903176][ T126] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 141.994157][ T126] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 142.725211][ T126] usb 4-1: USB disconnect, device number 2 [ 143.321724][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 143.477469][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 145.648946][ T5908] device syzkaller0 entered promiscuous mode [ 145.692003][ T5912] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 145.723302][ T5911] Cannot find set identified by id 0 to match [ 146.340413][ T5923] netlink: 'syz.0.449': attribute type 12 has an invalid length. [ 148.560331][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 148.663285][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 148.873327][ T5983] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 149.004579][ T5983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.031975][ T5990] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 149.054595][ T5987] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 149.088001][ T5988] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 150.842772][ T27] audit: type=1800 audit(1764180844.780:6): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.468" name="bus" dev="ramfs" ino=39843 res=0 errno=0 [ 154.144750][ T6094] netlink: 176 bytes leftover after parsing attributes in process `syz.4.499'. [ 154.700304][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.495'. [ 154.851379][ T6119] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 155.031293][ T6125] device team0 entered promiscuous mode [ 155.044931][ T6125] device team_slave_0 entered promiscuous mode [ 155.062163][ T6125] device team_slave_1 entered promiscuous mode [ 155.082344][ T6125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.118537][ T6125] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 155.155008][ T6126] bridge0: port 3(vlan2) entered blocking state [ 155.175294][ T6126] bridge0: port 3(vlan2) entered disabled state [ 155.196357][ T6126] device vlan2 entered promiscuous mode [ 155.218118][ T6126] device bond0 entered promiscuous mode [ 155.235308][ T6126] device bond_slave_0 entered promiscuous mode [ 155.250606][ T6126] device bond_slave_1 entered promiscuous mode [ 155.264853][ T6126] device macvlan2 entered promiscuous mode [ 155.672825][ T6139] overlayfs: bad index found (index=index/00fb210001289a59d36fd0453ba55366a71439cca4c2175a513e02000000000000, ftype=2000, origin ftype=a000). [ 156.612977][ T6160] mmap: syz.5.507 (6160) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.817486][ T6162] netlink: 'syz.3.508': attribute type 12 has an invalid length. [ 157.220088][ T6170] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 159.016772][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 160.390426][ T6211] netlink: 'syz.0.524': attribute type 12 has an invalid length. [ 160.973899][ T6224] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 161.404919][ T6234] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 161.572839][ T6234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.669699][ T6242] bond1: (slave ip6gretap1): making interface the new active one [ 161.794637][ T6242] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 162.025752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 162.199326][ T6241] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 162.285681][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 162.317369][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.324578][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.801107][ T6255] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 162.978493][ T6255] team0: Device veth1_macvtap failed to register rx_handler [ 163.222552][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 163.297491][ T6265] device syzkaller0 entered promiscuous mode [ 163.319372][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 163.568260][ T6278] loop3: detected capacity change from 0 to 128 [ 163.605893][ T6278] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 163.618823][ T6278] hpfs: filesystem error: improperly stopped [ 163.624842][ T6278] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 163.632637][ T6278] hpfs: You really don't want any checks? You are crazy... [ 163.641578][ T6278] hpfs: hpfs_map_sector(): read error [ 163.647070][ T6278] hpfs: code page support is disabled [ 163.657000][ T6278] hpfs: hpfs_map_4sectors(): unaligned read [ 163.663262][ T6278] hpfs: hpfs_map_4sectors(): unaligned read [ 163.669348][ T6278] hpfs: filesystem error: unable to find root dir [ 164.747034][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 166.045231][ T6306] bridge: RTM_NEWNEIGH with invalid ether address [ 166.254049][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.556'. [ 166.295220][ T6314] loop3: detected capacity change from 0 to 1024 [ 166.295313][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.556'. [ 166.391503][ T6314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.421579][ T6314] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.566343][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 166.751706][ T6330] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 166.776458][ T6330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.792585][ T6330] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 166.824857][ T6330] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 166.994032][ T6336] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 167.527303][ T4358] IPVS: stopping backup sync thread 6336 ... [ 167.870301][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 167.895471][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 168.288707][ T6379] device syzkaller0 entered promiscuous mode [ 169.902252][ T27] audit: type=1326 audit(1764180863.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.5.586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x0 [ 170.582704][ T6393] loop4: detected capacity change from 0 to 40427 [ 170.653995][ T6393] F2FS-fs (loop4): invalid crc value [ 170.931097][ T6393] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.281978][ T6393] F2FS-fs (loop4): Start checkpoint disabled! [ 171.427465][ T6393] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 173.944292][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 174.183814][ T6449] device bridge_slave_0 left promiscuous mode [ 174.236569][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.285674][ T6449] device bridge_slave_1 left promiscuous mode [ 174.316624][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.505967][ T4362] kworker/u4:7: attempt to access beyond end of device [ 174.505967][ T4362] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.118554][ T6449] bond0: (slave bond_slave_0): Releasing backup interface [ 175.152436][ T6449] bond0: (slave bond_slave_1): Releasing backup interface [ 175.189010][ T6449] team0: Port device team_slave_0 removed [ 175.198857][ T6458] overlayfs: failed to clone upperpath [ 175.231487][ T6449] team0: Port device team_slave_1 removed [ 175.275149][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.305429][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.334927][ T6449] team0: Port device geneve0 removed [ 175.355411][ T6449] bond1: (slave macvlan2): Releasing backup interface [ 175.374462][ T6449] bond2: (slave ip6gretap1): Releasing active interface [ 175.753210][ T6462] netlink: 14 bytes leftover after parsing attributes in process `syz.5.605'. [ 175.812557][ T6462] device vlan2 left promiscuous mode [ 175.824101][ T6462] device bond0 left promiscuous mode [ 175.829675][ T6462] device bond_slave_0 left promiscuous mode [ 175.835831][ T6462] device bond_slave_1 left promiscuous mode [ 175.847481][ T6462] device macvlan2 left promiscuous mode [ 175.853461][ T6462] bridge0: port 3(vlan2) entered disabled state [ 175.870752][ T6462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.892203][ T6462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.923165][ T6462] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 175.933773][ T6462] device team0 left promiscuous mode [ 175.944470][ T6462] device team_slave_0 left promiscuous mode [ 175.950984][ T6462] device team_slave_1 left promiscuous mode [ 175.969608][ T6462] bond0 (unregistering): Released all slaves [ 177.400735][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.633'. [ 177.432223][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.5.633'. [ 177.439594][ T6492] loop4: detected capacity change from 0 to 32768 [ 177.468046][ T6492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.615 (6492) [ 177.613243][ T6487] loop3: detected capacity change from 0 to 32768 [ 177.644583][ T6492] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.657569][ T6492] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 177.682454][ T6492] BTRFS info (device loop4): setting nodatacow, compression disabled [ 177.794659][ T6492] BTRFS info (device loop4): enabling auto defrag [ 177.858882][ T6492] BTRFS info (device loop4): max_inline at 0 [ 177.892026][ T6492] BTRFS info (device loop4): using free space tree [ 178.544792][ T6487] JBD2: Ignoring recovery information on journal [ 178.682509][ T6487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.013886][ T6551] SET target dimension over the limit! [ 179.795030][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 180.076091][ T6564] loop5: detected capacity change from 0 to 2048 [ 180.159244][ T6564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.957084][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 180.965008][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 180.971939][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 181.222615][ T4264] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.323455][ T27] audit: type=1326 audit(1764180875.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f801ff8f749 code=0x0 [ 182.118438][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.135872][ T6593] bond0: (slave bond1): Enslaving as an active interface with an up link [ 182.167097][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.645'. [ 182.248169][ T6599] bond0 (unregistering): (slave bond1): Releasing backup interface [ 182.310526][ T6599] bond0 (unregistering): Released all slaves [ 182.351880][ T6603] loop3: detected capacity change from 0 to 8 [ 182.544375][ T6607] netlink: 452 bytes leftover after parsing attributes in process `syz.0.648'. [ 183.264491][ T6623] "syz.4.656" (6623) uses obsolete ecb(arc4) skcipher [ 183.619741][ T6635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.627831][ T6635] bond2: (slave bond3): Enslaving as an active interface with an up link [ 184.658443][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 184.689693][ T6635] bond2 (unregistering): (slave bond3): Releasing backup interface [ 184.788929][ T6635] bond2 (unregistering): Released all slaves [ 185.731975][ T6656] device syzkaller0 entered promiscuous mode [ 186.950149][ T6689] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 188.059169][ T6698] loop5: detected capacity change from 0 to 32768 [ 190.358174][ T6726] "syz.5.689" (6726) uses obsolete ecb(arc4) skcipher [ 192.739501][ T6755] input: syz1 as /devices/virtual/input/input7 [ 193.114654][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 194.220580][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.226992][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.484292][ T6782] loop4: detected capacity change from 0 to 32768 [ 196.128943][ T6782] JBD2: Ignoring recovery information on journal [ 196.191859][ T6782] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 196.453247][ T4264] ocfs2: Unmounting device (7,4) on (node local) [ 196.759338][ T6820] Bluetooth: MGMT ver 1.22 [ 198.995569][ T6839] loop3: detected capacity change from 0 to 32768 [ 199.081133][ T6839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.721 (6839) [ 199.111507][ T6839] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.125080][ T6839] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 199.136332][ T6839] BTRFS info (device loop3): setting nodatacow, compression disabled [ 199.146419][ T6839] BTRFS info (device loop3): enabling auto defrag [ 199.156349][ T6839] BTRFS info (device loop3): max_inline at 0 [ 199.163731][ T6839] BTRFS info (device loop3): using free space tree [ 199.928141][ T6858] input: syz1 as /devices/virtual/input/input8 [ 201.146743][ T4274] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.001319][ T6926] loop5: detected capacity change from 0 to 32768 [ 203.056169][ T6926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.743 (6926) [ 203.139839][ T6945] overlayfs: failed to clone upperpath [ 203.176549][ T6926] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.208858][ T6926] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 203.228331][ T6926] BTRFS info (device loop5): setting nodatacow, compression disabled [ 203.238885][ T6926] BTRFS info (device loop5): enabling auto defrag [ 203.245394][ T6926] BTRFS info (device loop5): max_inline at 0 [ 203.264590][ T6926] BTRFS info (device loop5): using free space tree [ 203.336048][ T6950] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 203.357892][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 203.814334][ T4910] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.291683][ T6981] device syzkaller0 entered promiscuous mode [ 205.245134][ T6988] netlink: 156 bytes leftover after parsing attributes in process `syz.2.760'. [ 205.320061][ T6988] netlink: 156 bytes leftover after parsing attributes in process `syz.2.760'. [ 205.467928][ T6991] loop5: detected capacity change from 0 to 2048 [ 205.552580][ T6991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.731561][ T6998] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.811858][ T6998] device bridge_slave_0 left promiscuous mode [ 205.847557][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.878155][ T6998] device bridge_slave_1 left promiscuous mode [ 205.910027][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.947097][ T6998] device vlan2 left promiscuous mode [ 205.971193][ T6998] device bond0 left promiscuous mode [ 205.993465][ T6998] device bond_slave_0 left promiscuous mode [ 206.016196][ T6998] device bond_slave_1 left promiscuous mode [ 206.038798][ T6998] device macvlan2 left promiscuous mode [ 206.058210][ T6998] bond0: (slave bond_slave_0): Releasing backup interface [ 206.094813][ T6998] bond0: (slave bond_slave_1): Releasing backup interface [ 206.143777][ T6998] device team_slave_0 left promiscuous mode [ 206.380560][ T4281] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 206.390269][ T4281] Bluetooth: hci4: Injecting HCI hardware error event [ 206.403697][ T4282] Bluetooth: hci4: hardware error 0x00 [ 207.007049][ T6998] team0: Port device team_slave_0 removed [ 207.014086][ T6998] device team_slave_1 left promiscuous mode [ 207.041963][ T6998] team0: Port device team_slave_1 removed [ 207.060066][ T7016] syz.5.769 (7016): drop_caches: 2 [ 207.067797][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.087776][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.099129][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.120443][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.137772][ T6998] bond1: (slave vcan1): Releasing backup interface [ 207.144468][ T6998] bond1: (slave vcan2): making interface the new active one [ 207.182627][ T6998] bond1: (slave vcan2): Releasing backup interface [ 207.227549][ T6998] bond2: (slave ip6gretap1): Releasing active interface [ 207.255372][ T6998] bond0: (slave macvlan2): Releasing backup interface [ 207.267745][ T6998] device team0 left promiscuous mode [ 207.294712][ T6998] bridge0: port 3(vlan2) entered disabled state [ 207.536016][ T7028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.774'. [ 207.645719][ T7032] tipc: Failed to remove unknown binding: 66,1,1/0:1939263136/1939263138 [ 207.687145][ T7032] tipc: Failed to remove unknown binding: 66,1,1/0:1939263136/1939263138 [ 207.728135][ T7035] loop5: detected capacity change from 0 to 512 [ 207.784006][ T7035] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.909375][ T7035] EXT4-fs (loop5): 1 truncate cleaned up [ 207.948653][ T7035] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 208.617020][ T4282] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 209.089093][ T4910] EXT4-fs (loop5): unmounting filesystem. [ 210.294823][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 210.317065][ T7073] device bridge_slave_0 left promiscuous mode [ 210.324165][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.633201][ T7073] device bridge_slave_1 left promiscuous mode [ 210.737593][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.070434][ T7073] team0: Port device team_slave_0 removed [ 211.188325][ T7073] team0: Port device team_slave_1 removed [ 211.212652][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.238355][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.278745][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.289611][ T7073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.670374][ T7092] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 212.361092][ T7092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.552325][ T7096] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 214.261031][ T7116] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 214.336284][ T7120] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.801'. [ 214.721061][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 216.103751][ T7150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.810'. [ 216.776920][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 218.168812][ T7183] loop5: detected capacity change from 0 to 128 [ 218.241639][ T7183] EXT4-fs (loop5): Test dummy encryption mode enabled [ 218.315929][ T7183] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 218.512357][ T7194] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 218.555932][ T7194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.581767][ T7199] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 218.671981][ T4265] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.694938][ T7194] bond2: (slave ip6gretap1): making interface the new active one [ 218.719992][ T7194] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 218.729465][ T7202] loop3: detected capacity change from 0 to 1024 [ 218.770621][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 218.858405][ T4265] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.053904][ T7209] fido_id[7209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.109956][ T4510] hfsplus: b-tree write err: -5, ino 4 [ 219.247806][ T7215] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 219.334358][ T7215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.365116][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 221.287325][ T7233] futex_wake_op: syz.2.833 tries to shift op by 32; fix this program [ 224.951856][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 225.457046][ T4316] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 226.318279][ T4316] usb 6-1: config 0 has an invalid interface number: 114 but max is 0 [ 226.326507][ T4316] usb 6-1: config 0 has no interface number 0 [ 226.379166][ T4316] usb 6-1: config 0 interface 114 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 226.403309][ T4316] usb 6-1: config 0 interface 114 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 226.430444][ T7286] loop4: detected capacity change from 0 to 128 [ 226.447132][ T4316] usb 6-1: config 0 interface 114 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 226.469672][ T7286] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 226.482224][ T4316] usb 6-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=28.fd [ 226.538523][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.577012][ T4316] usb 6-1: Product: syz [ 226.586582][ T4316] usb 6-1: Manufacturer: syz [ 226.596767][ T4316] usb 6-1: SerialNumber: syz [ 226.608138][ T4316] usb 6-1: config 0 descriptor?? [ 226.614818][ T7286] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 226.643366][ T7274] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 226.685465][ T7286] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 226.730621][ T7293] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 226.782928][ T7286] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 227.139384][ T4316] snd-usb-audio: probe of 6-1:0.114 failed with error -2 [ 227.178483][ T4316] usb 6-1: USB disconnect, device number 2 [ 227.233963][ T5119] udevd[5119]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.114/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.825199][ T7316] loop5: detected capacity change from 0 to 1024 [ 229.318626][ T27] audit: type=1326 audit(1764180923.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 229.397226][ T27] audit: type=1326 audit(1764180923.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 229.451851][ T7314] loop3: detected capacity change from 0 to 32768 [ 229.481941][ T7314] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.867 (7314) [ 229.503142][ T27] audit: type=1326 audit(1764180923.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 229.531398][ T27] audit: type=1326 audit(1764180923.290:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 229.561052][ T7314] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.572028][ T7314] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 229.596383][ T7314] BTRFS info (device loop3): enabling auto defrag [ 229.604806][ T7314] BTRFS info (device loop3): use no compression [ 229.616004][ T27] audit: type=1326 audit(1764180923.290:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 229.644548][ T7314] BTRFS info (device loop3): force clearing of disk cache [ 229.652247][ T7314] BTRFS info (device loop3): max_inline at 4096 [ 229.668872][ T7314] BTRFS info (device loop3): disabling free space tree [ 229.676272][ T27] audit: type=1326 audit(1764180923.290:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 229.763697][ T27] audit: type=1326 audit(1764180923.290:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 229.861430][ T27] audit: type=1326 audit(1764180923.290:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 230.577992][ T27] audit: type=1326 audit(1764180923.290:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 230.600363][ T27] audit: type=1326 audit(1764180923.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7327 comm="syz.5.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 230.669755][ T7314] BTRFS info (device loop3): enabling ssd optimizations [ 230.749353][ T7314] BTRFS info (device loop3): rebuilding free space tree [ 230.823043][ T7370] netlink: 'syz.2.884': attribute type 27 has an invalid length. [ 230.850249][ T7370] netlink: 'syz.2.884': attribute type 4 has an invalid length. [ 230.858540][ T7370] netlink: 144 bytes leftover after parsing attributes in process `syz.2.884'. [ 230.928687][ T7314] BTRFS info (device loop3): disabling free space tree [ 230.945148][ T7314] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.956555][ T7314] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.952827][ T4274] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.362799][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.890'. [ 233.220706][ T7405] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.147857][ T7440] syz.3.906 (7440) used greatest stack depth: 18176 bytes left [ 236.335101][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 236.335114][ T27] audit: type=1326 audit(1764180930.270:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.373990][ T27] audit: type=1326 audit(1764180930.290:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.381446][ T7455] netlink: '': attribute type 10 has an invalid length. [ 236.403318][ T27] audit: type=1326 audit(1764180930.310:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.403383][ T27] audit: type=1326 audit(1764180930.310:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.403409][ T27] audit: type=1326 audit(1764180930.310:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.453109][ T7455] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 236.469115][ T27] audit: type=1326 audit(1764180930.310:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.508760][ T4316] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.519481][ T27] audit: type=1326 audit(1764180930.310:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.540770][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.557562][ T27] audit: type=1326 audit(1764180930.310:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.585339][ T27] audit: type=1326 audit(1764180930.310:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.606658][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.619683][ T27] audit: type=1326 audit(1764180930.310:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338f749 code=0x7ffc0000 [ 236.640974][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.718720][ T4316] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.752665][ T4316] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.811236][ T4316] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.838121][ T4316] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.856779][ T4316] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.879036][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.912704][ T4316] usb 6-1: Product: syz [ 236.920380][ T4316] usb 6-1: Manufacturer: syz [ 236.936166][ T4316] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 237.118969][ T7474] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 237.819823][ T4316] usb 6-1: USB disconnect, device number 3 [ 237.957217][ T7474] bond0: (slave wlan1): Releasing backup interface [ 238.110235][ T7487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 239.030684][ T7487] team0: Failed to send options change via netlink (err -105) [ 239.038717][ T7487] team0: Mode changed to "loadbalance" [ 239.460641][ T7509] loop4: detected capacity change from 0 to 8 [ 239.570343][ T7509] SQUASHFS error: zlib decompression failed, data probably corrupt [ 239.578996][ T7509] SQUASHFS error: Failed to read block 0x9b: -5 [ 239.585456][ T7509] SQUASHFS error: Unable to read metadata cache entry [99] [ 239.592807][ T7509] SQUASHFS error: Unable to read inode 0x127 [ 240.462169][ T7518] loop3: detected capacity change from 0 to 1024 [ 240.666740][ T7521] loop4: detected capacity change from 0 to 2048 [ 240.788264][ T7521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.070204][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 241.225947][ T7536] team0: Failed to send options change via netlink (err -105) [ 241.234948][ T7536] team0: Mode changed to "loadbalance" [ 243.095115][ T7562] binder_alloc: 7561: pid 7561 spamming oneway? 2 buffers allocated for a total size of 5360 [ 245.539040][ T7608] trusted_key: encrypted_key: insufficient parameters specified [ 246.300981][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 246.300990][ T27] audit: type=1326 audit(1764180940.240:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98d318f749 code=0x0 [ 246.483451][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 246.594505][ T27] audit: type=1326 audit(1764180940.530:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.0.972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f515338f749 code=0x0 [ 246.669759][ T27] audit: type=1326 audit(1764180940.610:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 246.694533][ T27] audit: type=1326 audit(1764180940.610:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 246.728087][ T27] audit: type=1326 audit(1764180940.640:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 246.751472][ T27] audit: type=1326 audit(1764180940.640:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 246.810692][ T27] audit: type=1326 audit(1764180940.640:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 246.838763][ T27] audit: type=1326 audit(1764180940.640:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 246.862198][ T27] audit: type=1326 audit(1764180940.640:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 246.895292][ T27] audit: type=1326 audit(1764180940.640:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 247.502627][ T7650] netlink: 'syz.4.980': attribute type 3 has an invalid length. [ 248.336263][ T7662] loop3: detected capacity change from 0 to 2048 [ 248.458364][ T7662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 248.602024][ T7662] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 248.628040][ T7662] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 244 with error 28 [ 248.666412][ T7662] EXT4-fs (loop3): This should not happen!! Data will be lost [ 248.666412][ T7662] [ 248.676376][ T7662] EXT4-fs (loop3): Total free blocks count 0 [ 248.689427][ T7662] EXT4-fs (loop3): Free/Dirty block details [ 248.695662][ T7662] EXT4-fs (loop3): free_blocks=2415919504 [ 248.710613][ T7662] EXT4-fs (loop3): dirty_blocks=256 [ 248.716061][ T7662] EXT4-fs (loop3): Block reservation details [ 248.722510][ T7662] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 248.827164][ T4506] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 249.067061][ T6903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 249.138799][ T7686] device syzkaller0 entered promiscuous mode [ 249.307990][ T6903] usb 5-1: Using ep0 maxpacket: 16 [ 249.325251][ T6903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.365444][ T6903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.516177][ T6903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.603570][ T6903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.712596][ T6903] usb 5-1: Product: syz [ 249.757853][ T6903] usb 5-1: Manufacturer: syz [ 249.807375][ T6903] usb 5-1: SerialNumber: syz [ 250.114359][ T6903] usb 5-1: 0:2 : does not exist [ 250.130010][ T6903] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 250.185027][ T6903] usb 5-1: USB disconnect, device number 4 [ 250.356578][ T7700] loop3: detected capacity change from 0 to 512 [ 250.380782][ T7700] EXT4-fs: Ignoring removed oldalloc option [ 250.386738][ T7700] ext4: Unknown parameter 'rootcontext' [ 252.250690][ T5119] udevd[5119]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.607453][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'. [ 252.695074][ T7735] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 253.791928][ T6903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 253.925635][ T7758] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 253.977118][ T7758] bond3: (slave geneve2): making interface the new active one [ 253.985606][ T7758] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 254.011305][ T6903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.025961][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'. [ 254.038279][ T6903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.040338][ T7758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.078257][ T6903] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 254.093290][ T6903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 254.102394][ T6903] usb 5-1: SerialNumber: syz [ 254.503813][ T6903] usb 5-1: 0:2 : does not exist [ 254.619207][ T6903] usb 5-1: unit 7 not found! [ 254.788280][ T6903] usb 5-1: USB disconnect, device number 5 [ 254.863150][ T7770] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 255.017152][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 255.984170][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991542][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.999901][ T5119] udevd[5119]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.356942][ T6903] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 256.577083][ T6903] usb 6-1: Using ep0 maxpacket: 16 [ 256.584769][ T6903] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 257.094307][ T6903] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.127334][ T6903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.151834][ T6903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.161295][ T6903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.179894][ T6903] usb 6-1: Product: syz [ 257.184107][ T6903] usb 6-1: Manufacturer: syz [ 257.272182][ T6903] usb 6-1: SerialNumber: syz [ 258.232941][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 258.821141][ T6903] usb 6-1: 0:2 : does not exist [ 258.852360][ T6903] usb 6-1: USB disconnect, device number 4 [ 259.769583][ T5119] udevd[5119]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.858057][ T7842] loop4: detected capacity change from 0 to 512 [ 259.886117][ T7842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 259.934391][ T7842] EXT4-fs (loop4): 1 truncate cleaned up [ 259.941058][ T7842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.979223][ T7842] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.1052: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 260.002400][ T7849] loop3: detected capacity change from 0 to 8 [ 260.021061][ T7849] SQUASHFS error: zlib decompression failed, data probably corrupt [ 260.029214][ T7849] SQUASHFS error: Failed to read block 0x9b: -5 [ 260.035481][ T7849] SQUASHFS error: Unable to read metadata cache entry [99] [ 260.043299][ T7849] SQUASHFS error: Unable to read inode 0x127 [ 260.144751][ T7842] EXT4-fs (loop4): Remounting filesystem read-only [ 260.171706][ T7842] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 260.200253][ T7842] EXT4-fs (loop4): Remounting filesystem read-only [ 260.207047][ T7842] EXT4-fs warning (device loop4): ext4_rename_delete:3778: inode #2: comm syz.4.1052: Deleting old file: nlink 4, error=-117 [ 260.223939][ T7842] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Out of memory [ 260.234600][ T7842] EXT4-fs (loop4): Remounting filesystem read-only [ 260.241401][ T7842] EXT4-fs error (device loop4): ext4_rename_dir_finish:3670: inode #12: comm syz.4.1052: mark_inode_dirty error [ 260.255411][ T7842] EXT4-fs (loop4): Remounting filesystem read-only [ 260.262381][ T7842] EXT4-fs error (device loop4) in ext4_rename_dir_finish:3673: Out of memory [ 260.272755][ T7842] EXT4-fs (loop4): Remounting filesystem read-only [ 260.317055][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 260.317072][ T27] audit: type=1107 audit(1764180954.250:93): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 260.415606][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 260.820113][ T7864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.093193][ T7884] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 263.192983][ T7898] bond0: (slave bond_slave_0): Releasing backup interface [ 263.247756][ T7898] bond0: (slave bond_slave_1): Releasing backup interface [ 263.267668][ T7898] team0: Port device team_slave_0 removed [ 263.287924][ T7898] team0: Port device team_slave_1 removed [ 263.311634][ T7898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.333612][ T7898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.346613][ T7898] bond1: (slave ip6gretap1): Releasing active interface [ 263.637077][ T7900] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 263.791145][ T7900] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 265.277550][ T7927] syz.2.1067 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 267.556762][ T7964] trusted_key: encrypted_key: insufficient parameters specified [ 267.571037][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 268.060527][ T7975] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 268.073917][ T7975] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 268.289361][ T7982] netlink: 'syz.4.1089': attribute type 4 has an invalid length. [ 268.328857][ T7982] netlink: 'syz.4.1089': attribute type 4 has an invalid length. [ 268.738100][ T7994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1092'. [ 268.748343][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 268.757593][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'. [ 269.087003][ T8003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.407785][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 272.115134][ T8053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.831534][ T27] audit: type=1326 audit(1764180966.770:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 272.869633][ T27] audit: type=1326 audit(1764180966.800:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 272.892256][ T27] audit: type=1326 audit(1764180966.800:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 272.924036][ T8056] device syz_tun entered promiscuous mode [ 273.009612][ T27] audit: type=1326 audit(1764180966.800:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 273.031987][ T27] audit: type=1326 audit(1764180966.800:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 273.209061][ T27] audit: type=1326 audit(1764180966.800:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 273.238653][ T8063] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 273.329349][ T27] audit: type=1326 audit(1764180966.800:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 273.476582][ T27] audit: type=1326 audit(1764180966.800:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 273.509732][ T27] audit: type=1326 audit(1764180966.800:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 273.564642][ T27] audit: type=1326 audit(1764180966.800:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.2.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f801ff8f749 code=0x7ffc0000 [ 274.819206][ T8076] loop4: detected capacity change from 0 to 512 [ 275.300239][ T8076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.319763][ T8076] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.602649][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 276.103653][ T8105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.905756][ T8116] IPv6: sit1: Disabled Multicast RS [ 280.760753][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 280.765711][ T27] audit: type=1107 audit(1764180974.230:116): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 280.919803][ T8154] loop4: detected capacity change from 0 to 512 [ 280.949580][ T8156] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1140'. [ 281.040894][ T8158] loop3: detected capacity change from 0 to 764 [ 282.000293][ T8154] EXT4-fs (loop4): bad s_want_extra_isize: 1536 [ 286.718811][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1161'. [ 287.244129][ T8245] xt_nat: multiple ranges no longer supported [ 287.785552][ T4265] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 287.963518][ T8251] IPv6: sit1: Disabled Multicast RS [ 288.039061][ T4265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.056984][ T4265] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.086418][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.117708][ T4265] usb 4-1: config 0 descriptor?? [ 288.152102][ T4265] pwc: Askey VC010 type 2 USB webcam detected. [ 288.387099][ T4324] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 288.415943][ T8259] loop4: detected capacity change from 0 to 128 [ 288.470888][ T8259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.532451][ T4265] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.548722][ T4265] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.550016][ T8259] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 288.563053][ T4265] pwc: recv_control_msg error -32 req 02 val 2c00 [ 288.596024][ T4265] pwc: recv_control_msg error -32 req 04 val 1000 [ 288.616918][ T4324] usb 6-1: Using ep0 maxpacket: 8 [ 288.623097][ T4265] pwc: recv_control_msg error -32 req 04 val 1300 [ 288.630657][ T4324] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 288.641172][ T4265] pwc: recv_control_msg error -32 req 04 val 1400 [ 288.650410][ T4324] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.668313][ T4265] pwc: recv_control_msg error -32 req 02 val 2000 [ 288.675528][ T4265] pwc: recv_control_msg error -32 req 02 val 2100 [ 288.697099][ T4324] usb 6-1: config 0 has no interface number 0 [ 288.855664][ T4324] usb 6-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 288.867497][ T4265] pwc: recv_control_msg error -32 req 04 val 1500 [ 288.874361][ T4324] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.887649][ T4324] usb 6-1: config 0 interface 52 has no altsetting 0 [ 288.904893][ T4324] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 288.916177][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 288.926922][ T4324] usb 6-1: Product: syz [ 288.931159][ T4324] usb 6-1: SerialNumber: syz [ 289.545860][ T4265] pwc: recv_control_msg error -71 req 02 val 2400 [ 289.553426][ T4265] pwc: recv_control_msg error -71 req 02 val 2600 [ 289.643252][ T4324] usb 6-1: config 0 descriptor?? [ 289.649687][ T4265] pwc: recv_control_msg error -71 req 02 val 2900 [ 289.651784][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 289.662301][ T4265] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.677861][ T4265] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.686916][ T4265] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.707337][ T4265] pwc: Registered as video103. [ 289.713440][ T4265] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 289.772122][ T4265] usb 4-1: USB disconnect, device number 3 [ 289.937975][ T8273] loop3: detected capacity change from 0 to 1024 [ 289.990554][ T8273] EXT4-fs: inline encryption not supported [ 290.043010][ T8273] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.292446][ T6899] usb 6-1: USB disconnect, device number 5 [ 290.375302][ T8273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.533359][ T27] audit: type=1800 audit(1764180984.470:117): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1173" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 290.879863][ T27] audit: type=1800 audit(1764180984.500:118): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1173" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 291.193416][ T8299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1176'. [ 291.645179][ T8301] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 291.728971][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 293.154409][ T8319] overlayfs: failed to clone upperpath [ 293.854153][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.866148][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.876353][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.895034][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.909841][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.924161][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.946857][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.956867][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.969502][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.980229][ T8316] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 293.997255][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1186'. [ 295.153282][ T8339] loop3: detected capacity change from 0 to 128 [ 295.285461][ T8342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 295.715254][ T8352] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 295.741704][ T8352] CIFS mount error: No usable UNC path provided in device string! [ 295.741704][ T8352] [ 295.752108][ T8352] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.641980][ T8356] loop3: detected capacity change from 0 to 512 [ 296.687178][ T8356] FAT-fs (loop3): bogus number of FAT sectors [ 296.694173][ T8356] FAT-fs (loop3): Can't find a valid FAT filesystem [ 296.747358][ T5119] blk_print_req_error: 2 callbacks suppressed [ 296.747374][ T5119] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.834848][ T8363] batman_adv: batadv0: Adding interface: dummy0 [ 296.843762][ T8363] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.928252][ T8363] batman_adv: batadv0: Interface activated: dummy0 [ 296.969717][ T8368] batadv0: mtu less than device minimum [ 297.023832][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.036774][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.048965][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.061110][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.073426][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.085659][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.097873][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.110069][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.122204][ T8368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 298.729590][ T8402] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 299.336049][ T8390] loop4: detected capacity change from 0 to 32768 [ 299.538543][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 301.968768][ T8439] 9pnet: Found fid 0 not clunked [ 302.575654][ T8452] xt_nat: multiple ranges no longer supported [ 303.344559][ T8458] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 303.467576][ T8458] net_ratelimit: 11 callbacks suppressed [ 303.467585][ T8458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.208740][ T8473] loop3: detected capacity change from 0 to 128 [ 304.272693][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1232'. [ 305.447950][ T8484] validate_nla: 41 callbacks suppressed [ 305.447969][ T8484] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 305.542026][ T8484] device bond4 entered promiscuous mode [ 305.569127][ T8486] bond4: (slave ip6gretap2): making interface the new active one [ 305.603756][ T8486] device ip6gretap2 entered promiscuous mode [ 305.658435][ T8486] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 305.703762][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1234'. [ 305.725217][ T8490] device bond4 left promiscuous mode [ 305.730706][ T8490] device ip6gretap2 left promiscuous mode [ 305.737586][ T8490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.818841][ T8497] Invalid option length (1032005) for dns_resolver key [ 306.621481][ T8503] qfq: no options [ 306.772560][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.780887][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.791580][ T8507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.887147][ T6899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 307.165710][ T6899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.280207][ T6899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.505602][ T6899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.519088][ T6899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.529061][ T6899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.546879][ T6899] usb 5-1: config 0 descriptor?? [ 308.055741][ T6899] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 308.253075][ T6899] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 308.517022][ T6899] usb 5-1: USB disconnect, device number 6 [ 308.773302][ T8531] fido_id[8531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 315.410643][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 315.449004][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 315.471924][ T8624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.438607][ T8645] overlayfs: failed to clone upperpath [ 317.147722][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.156473][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.468549][ T8671] device macsec0 entered promiscuous mode [ 318.854420][ T8684] xt_nat: multiple ranges no longer supported [ 319.545582][ T8697] netlink: 'syz.5.1280': attribute type 1 has an invalid length. [ 319.729325][ T8700] bond0: (slave veth3): Enslaving as an active interface with a down link [ 319.741243][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1280'. [ 319.766579][ T8697] bond0 (unregistering): (slave veth3): Releasing active interface [ 319.823308][ T8697] bond0 (unregistering): Released all slaves [ 321.956681][ T4281] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 322.017318][ T4281] Bluetooth: hci3: Injecting HCI hardware error event [ 322.027074][ T4282] Bluetooth: hci3: hardware error 0x00 [ 322.716044][ T8733] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 324.667342][ T4282] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 325.525395][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 337.589736][ T8829] loop5: detected capacity change from 0 to 32768 [ 337.609419][ T8829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1315 (8829) [ 337.640429][ T8829] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 337.718512][ T8829] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 337.727358][ T8829] BTRFS info (device loop5): setting nodatacow, compression disabled [ 337.735446][ T8829] BTRFS info (device loop5): enabling auto defrag [ 337.749431][ T8829] BTRFS info (device loop5): max_inline at 0 [ 337.755462][ T8829] BTRFS info (device loop5): using free space tree [ 338.555514][ T8829] BTRFS error (device loop5): open_ctree failed: -12 [ 339.356057][ T8808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (8808) [ 339.887103][ T8910] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 340.433181][ T8922] overlayfs: missing 'lowerdir' [ 343.235700][ T8967] fuse: Bad value for 'fd' [ 344.716417][ T27] audit: type=1326 audit(1764181038.650:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 344.797409][ T27] audit: type=1326 audit(1764181038.680:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 344.897100][ T27] audit: type=1326 audit(1764181038.690:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 345.041468][ T27] audit: type=1326 audit(1764181038.690:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 345.160611][ T27] audit: type=1326 audit(1764181038.690:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 345.257934][ T27] audit: type=1326 audit(1764181038.690:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 345.373388][ T27] audit: type=1326 audit(1764181038.690:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 345.579482][ T27] audit: type=1326 audit(1764181038.690:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 346.378748][ T27] audit: type=1326 audit(1764181038.690:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 346.401805][ T27] audit: type=1326 audit(1764181038.690:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8997 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d318f749 code=0x7ffc0000 [ 350.748328][ T9045] device batadv_slave_1 entered promiscuous mode [ 350.771478][ T9045] device batadv_slave_1 left promiscuous mode [ 353.465761][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1383'. [ 354.692019][ T9093] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 354.713389][ T9097] loop5: detected capacity change from 0 to 128 [ 354.792732][ T9093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.822637][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 354.822653][ T27] audit: type=1800 audit(1764181048.770:154): pid=9099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1389" name="bus" dev="loop5" ino=1048602 res=0 errno=0 [ 354.863039][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 355.610680][ T9111] loop5: detected capacity change from 0 to 128 [ 355.694925][ T9111] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 355.721947][ T9111] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 355.982350][ T4910] EXT4-fs (loop5): unmounting filesystem. [ 359.373650][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'. [ 359.663457][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 360.039323][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'. [ 360.508957][ T9203] kvm: pic: non byte write [ 361.378990][ T9213] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 361.411552][ T9213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.438004][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 363.210039][ T27] audit: type=1326 audit(1764181057.150:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 363.257117][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 363.301312][ T27] audit: type=1326 audit(1764181057.150:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 363.377163][ T27] audit: type=1326 audit(1764181057.150:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 363.438103][ T27] audit: type=1326 audit(1764181057.150:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 363.502113][ T27] audit: type=1326 audit(1764181057.150:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 363.556587][ T27] audit: type=1326 audit(1764181057.150:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 364.566203][ T27] audit: type=1326 audit(1764181057.150:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 364.676311][ T27] audit: type=1326 audit(1764181057.150:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 364.835442][ T27] audit: type=1326 audit(1764181057.150:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 364.987027][ T27] audit: type=1326 audit(1764181057.150:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9235 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd040d8f749 code=0x7ffc0000 [ 367.536927][ T6596] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 368.475791][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1447'. [ 369.862254][ T6596] usb 5-1: device descriptor read/all, error -71 [ 370.069251][ T9320] loop4: detected capacity change from 0 to 512 [ 370.175991][ T9320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 370.199649][ T9320] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.424758][ T9320] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.1455: invalid size [ 370.472895][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 371.551398][ T9342] sctp: [Deprecated]: syz.4.1459 (pid 9342) Use of int in max_burst socket option. [ 371.551398][ T9342] Use struct sctp_assoc_value instead [ 374.093496][ T9384] loop5: detected capacity change from 0 to 16 [ 377.352383][ T9431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.452581][ T9431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.490567][ T9431] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 377.502548][ T9431] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 377.529664][ T9435] device macvlan2 entered promiscuous mode [ 377.535829][ T9435] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 380.885151][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.891550][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.885742][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1496'. [ 382.532631][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1496'. [ 387.169640][ T9537] loop5: detected capacity change from 0 to 128 [ 387.239361][ T9537] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 387.292134][ T9537] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 388.329492][ T9555] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 388.383029][ T9555] netlink: 'syz.2.1521': attribute type 6 has an invalid length. [ 388.390888][ T9555] netlink: 'syz.2.1521': attribute type 3 has an invalid length. [ 388.398719][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1521'. [ 389.339214][ T4910] EXT4-fs (loop5): unmounting filesystem. [ 391.716711][ T9596] overlayfs: failed to clone upperpath [ 392.875216][ T9609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'. [ 394.610034][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 394.610048][ T27] audit: type=1326 audit(1764181088.550:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 394.746358][ T27] audit: type=1326 audit(1764181088.590:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 394.778613][ T27] audit: type=1326 audit(1764181088.590:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 394.802021][ T27] audit: type=1326 audit(1764181088.590:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 394.841739][ T27] audit: type=1326 audit(1764181088.590:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 394.955550][ T27] audit: type=1326 audit(1764181088.590:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 395.036934][ T27] audit: type=1326 audit(1764181088.590:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 395.059674][ T27] audit: type=1326 audit(1764181088.590:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 395.215897][ T27] audit: type=1326 audit(1764181088.590:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 395.243484][ T27] audit: type=1326 audit(1764181088.590:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.3.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f28a4d8f749 code=0x7ffc0000 [ 395.479874][ T9663] UBIFS error (pid: 9663): cannot open "./file0", error -22 [ 396.402044][ T9676] syz.3.1560[9676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.701064][ T9676] syz.3.1560[9676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.254141][ T9700] tipc: Started in network mode [ 398.354136][ T9700] tipc: Node identity 4, cluster identity 4711 [ 398.361430][ T9700] tipc: Node number set to 4 [ 398.630380][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 399.838956][ T9722] Malformed UNC in devname [ 399.838956][ T9722] [ 399.846005][ T9722] CIFS: VFS: Malformed UNC in devname [ 402.361187][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 402.402080][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 402.435518][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 402.545432][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 402.692142][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 402.818931][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 402.975511][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 403.037670][ T9762] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 403.167401][ T9766] bond5: (slave gretap1): making interface the new active one [ 403.233980][ T9766] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 403.272980][ T9765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'. [ 403.293729][ T9765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.959319][ T9782] device bridge0 entered promiscuous mode [ 404.885432][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1599'. [ 405.025824][ T9794] loop5: detected capacity change from 0 to 16 [ 405.085868][ T9794] erofs: (device loop5): mounted with root inode @ nid 36. [ 406.701671][ T9814] device batadv1 entered promiscuous mode [ 406.743721][ T9814] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 406.930240][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 407.025328][ T9830] netlink: 'syz.5.1608': attribute type 4 has an invalid length. [ 407.244133][ T9837] netlink: 'syz.3.1610': attribute type 2 has an invalid length. [ 407.923355][ T9841] loop5: detected capacity change from 0 to 1024 [ 407.970612][ T9841] EXT4-fs: Ignoring removed bh option [ 408.015116][ T9841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.125519][ T9841] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 409.705261][ T4910] EXT4-fs (loop5): unmounting filesystem. [ 410.015918][ T9868] MPTCP: kernel_bind error, err=-99 [ 414.351965][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1634'. [ 414.436534][ T9926] netlink: 'syz.5.1633': attribute type 7 has an invalid length. [ 415.157463][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'. [ 415.378513][ T9927] bond5 (unregistering): Released all slaves [ 415.577454][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1636'. [ 415.723716][ T9938] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 418.942388][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 419.024777][ T9975] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.034012][ T9975] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.042801][ T9975] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.051632][ T9975] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.295332][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 419.369354][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 419.596178][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 422.753258][T10015] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 422.767024][T10015] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 425.537992][ C1] ------------[ cut here ]------------ [ 425.543588][ C1] WARNING: CPU: 1 PID: 4317 at net/mac80211/ocb.c:64 ieee80211_ocb_rx_no_sta+0x574/0x650 [ 425.553513][ C1] Modules linked in: [ 425.557475][ C1] CPU: 1 PID: 4317 Comm: kworker/1:5 Not tainted syzkaller #0 [ 425.564943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.575078][ C1] Workqueue: mld mld_ifc_work [ 425.579843][ C1] RIP: 0010:ieee80211_ocb_rx_no_sta+0x574/0x650 [ 425.586112][ C1] Code: c3 40 09 00 00 48 c7 c7 40 7f a7 8b 48 89 de 4c 89 fa 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 84 61 00 e8 2c 95 d5 f7 <0f> 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c7 00 00 00 44 [ 425.605806][ C1] RSP: 0018:ffffc900001e0838 EFLAGS: 00010246 [ 425.611940][ C1] RAX: ffffffff89ab4134 RBX: ffff888057b10c80 RCX: ffff888018691dc0 [ 425.619956][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 425.627968][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff215c449 [ 425.635950][ C1] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: ffffffff89ab3c67 [ 425.643977][ C1] R13: ffff88802ef70e80 R14: 0000000000000001 R15: ffff888054e8f03a [ 425.652003][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 425.660984][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.667614][ C1] CR2: 0000001b2f91dff8 CR3: 00000000186d0000 CR4: 00000000003526e0 [ 425.675627][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 425.683669][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 425.691709][ C1] Call Trace: [ 425.695002][ C1] [ 425.697923][ C1] ieee80211_prepare_and_rx_handle+0x3d8d/0x6240 [ 425.704306][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 425.709419][ C1] ? ieee80211_rx_8023+0x1640/0x1640 [ 425.714743][ C1] ? sta_info_get_bss+0x50/0x320 [ 425.719763][ C1] ? sta_info_get_bss+0x50/0x320 [ 425.724733][ C1] ? sta_info_get_bss+0x303/0x320 [ 425.729831][ C1] ? ieee80211_rx_for_interface+0x2ef/0x3c0 [ 425.735752][ C1] ieee80211_rx_list+0x24d8/0x2d00 [ 425.740944][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 425.747157][ C1] ? read_lock_is_recursive+0x10/0x10 [ 425.752554][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 425.758515][ C1] ? ieee80211_rx_napi+0xc8/0x3c0 [ 425.763558][ C1] ieee80211_rx_napi+0x1a6/0x3c0 [ 425.768553][ C1] ? ieee80211_rx_list+0x2d00/0x2d00 [ 425.773856][ C1] ? skb_dequeue+0x10a/0x140 [ 425.778500][ C1] ieee80211_handle_queued_frames+0x105/0x1b0 [ 425.784589][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 425.790284][ C1] tasklet_action_common+0x298/0x400 [ 425.795587][ C1] ? trace_raw_output_softirq+0xd0/0xd0 [ 425.801178][ C1] ? lock_chain_count+0x20/0x20 [ 425.806054][ C1] ? sched_clock_cpu+0x6e/0x250 [ 425.810964][ C1] handle_softirqs+0x2a1/0x920 [ 425.815770][ C1] ? do_softirq+0x13b/0x200 [ 425.820329][ C1] ? do_softirq+0x200/0x200 [ 425.824860][ C1] do_softirq+0x13b/0x200 [ 425.829256][ C1] [ 425.832198][ C1] [ 425.835138][ C1] ? __local_bh_enable_ip+0x1b0/0x1b0 [ 425.840573][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 425.846583][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 425.851953][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 425.857127][ C1] __local_bh_enable_ip+0x174/0x1b0 [ 425.862355][ C1] ? _local_bh_enable+0xa0/0xa0 [ 425.867280][ C1] ? ieee80211_select_queue+0x416/0x520 [ 425.872859][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 425.878024][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 425.883250][ C1] __dev_queue_xmit+0x15c9/0x3760 [ 425.888336][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 425.893464][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 425.898794][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 425.904204][ C1] ? _local_bh_enable+0xa0/0xa0 [ 425.909129][ C1] ? memcpy+0x3c/0x60 [ 425.913144][ C1] ? eth_header+0x117/0x200 [ 425.917697][ C1] ? llc_sysctl_exit+0x60/0x60 [ 425.922481][ C1] ? neigh_resolve_output+0x614/0x730 [ 425.927929][ C1] ip6_finish_output2+0xda2/0x1590 [ 425.933072][ C1] ? ip6_finish_output2+0x593/0x1590 [ 425.938444][ C1] ? nf_hook+0x370/0x370 [ 425.942704][ C1] ? ip6_finish_output+0x577/0x820 [ 425.947878][ C1] NF_HOOK+0x15d/0x460 [ 425.951971][ C1] ? mld_send_report+0x2e0/0x2e0 [ 425.956956][ C1] ? NF_HOOK+0x460/0x460 [ 425.961229][ C1] ? icmp6_dst_alloc+0x3ea/0x460 [ 425.966276][ C1] mld_sendpack+0x893/0xe80 [ 425.970847][ C1] ? mld_sendpack+0x1f7/0xe80 [ 425.975547][ C1] ? add_grec+0x1660/0x1660 [ 425.980116][ C1] mld_ifc_work+0x836/0xb40 [ 425.984638][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 425.989890][ C1] ? process_one_work+0x7a1/0x1160 [ 425.995011][ C1] process_one_work+0x898/0x1160 [ 426.000009][ C1] ? worker_detach_from_pool+0x240/0x240 [ 426.005660][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 426.010732][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 426.016119][ C1] ? kthread_data+0x4b/0xc0 [ 426.020691][ C1] worker_thread+0xaa2/0x1250 [ 426.025405][ C1] ? __kthread_parkme+0x162/0x1c0 [ 426.030486][ C1] kthread+0x29d/0x330 [ 426.034587][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 426.039652][ C1] ? kthread_blkcg+0xd0/0xd0 [ 426.044262][ C1] ret_from_fork+0x1f/0x30 [ 426.048747][ C1] [ 426.052223][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 426.059499][ C1] CPU: 1 PID: 4317 Comm: kworker/1:5 Not tainted syzkaller #0 [ 426.066955][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.077022][ C1] Workqueue: mld mld_ifc_work [ 426.081735][ C1] Call Trace: [ 426.085024][ C1] [ 426.087875][ C1] dump_stack_lvl+0x168/0x22e [ 426.092563][ C1] ? memcpy+0x3c/0x60 [ 426.096555][ C1] ? show_regs_print_info+0x12/0x12 [ 426.101765][ C1] ? load_image+0x3b0/0x3b0 [ 426.106291][ C1] panic+0x2c9/0x710 [ 426.110201][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 426.114733][ C1] ? ret_from_fork+0x1f/0x30 [ 426.119432][ C1] __warn+0x2f8/0x4f0 [ 426.123434][ C1] ? ieee80211_ocb_rx_no_sta+0x574/0x650 [ 426.129081][ C1] ? ieee80211_ocb_rx_no_sta+0x574/0x650 [ 426.134722][ C1] report_bug+0x2ba/0x4f0 [ 426.139060][ C1] ? ieee80211_ocb_rx_no_sta+0x574/0x650 [ 426.144823][ C1] handle_bug+0x3a/0x70 [ 426.149005][ C1] exc_invalid_op+0x16/0x40 [ 426.153523][ C1] asm_exc_invalid_op+0x16/0x20 [ 426.158385][ C1] RIP: 0010:ieee80211_ocb_rx_no_sta+0x574/0x650 [ 426.164662][ C1] Code: c3 40 09 00 00 48 c7 c7 40 7f a7 8b 48 89 de 4c 89 fa 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 84 61 00 e8 2c 95 d5 f7 <0f> 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c7 00 00 00 44 [ 426.184370][ C1] RSP: 0018:ffffc900001e0838 EFLAGS: 00010246 [ 426.190444][ C1] RAX: ffffffff89ab4134 RBX: ffff888057b10c80 RCX: ffff888018691dc0 [ 426.198416][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 426.206390][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff215c449 [ 426.214364][ C1] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: ffffffff89ab3c67 [ 426.222352][ C1] R13: ffff88802ef70e80 R14: 0000000000000001 R15: ffff888054e8f03a [ 426.230344][ C1] ? ieee80211_ocb_rx_no_sta+0xa7/0x650 [ 426.235910][ C1] ? ieee80211_ocb_rx_no_sta+0x574/0x650 [ 426.241566][ C1] ? ieee80211_ocb_rx_no_sta+0x574/0x650 [ 426.247221][ C1] ieee80211_prepare_and_rx_handle+0x3d8d/0x6240 [ 426.253586][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 426.258632][ C1] ? ieee80211_rx_8023+0x1640/0x1640 [ 426.263939][ C1] ? sta_info_get_bss+0x50/0x320 [ 426.268899][ C1] ? sta_info_get_bss+0x50/0x320 [ 426.273858][ C1] ? sta_info_get_bss+0x303/0x320 [ 426.278907][ C1] ? ieee80211_rx_for_interface+0x2ef/0x3c0 [ 426.284826][ C1] ieee80211_rx_list+0x24d8/0x2d00 [ 426.290012][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 426.296247][ C1] ? read_lock_is_recursive+0x10/0x10 [ 426.301630][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 426.307520][ C1] ? ieee80211_rx_napi+0xc8/0x3c0 [ 426.312532][ C1] ieee80211_rx_napi+0x1a6/0x3c0 [ 426.317461][ C1] ? ieee80211_rx_list+0x2d00/0x2d00 [ 426.322733][ C1] ? skb_dequeue+0x10a/0x140 [ 426.327313][ C1] ieee80211_handle_queued_frames+0x105/0x1b0 [ 426.333373][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 426.338992][ C1] tasklet_action_common+0x298/0x400 [ 426.344267][ C1] ? trace_raw_output_softirq+0xd0/0xd0 [ 426.349795][ C1] ? lock_chain_count+0x20/0x20 [ 426.354631][ C1] ? sched_clock_cpu+0x6e/0x250 [ 426.359473][ C1] handle_softirqs+0x2a1/0x920 [ 426.364232][ C1] ? do_softirq+0x13b/0x200 [ 426.368727][ C1] ? do_softirq+0x200/0x200 [ 426.373229][ C1] do_softirq+0x13b/0x200 [ 426.377552][ C1] [ 426.380466][ C1] [ 426.383381][ C1] ? __local_bh_enable_ip+0x1b0/0x1b0 [ 426.388743][ C1] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 426.394719][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 426.399993][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 426.405090][ C1] __local_bh_enable_ip+0x174/0x1b0 [ 426.410282][ C1] ? _local_bh_enable+0xa0/0xa0 [ 426.415125][ C1] ? ieee80211_select_queue+0x416/0x520 [ 426.420667][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 426.425763][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 426.430857][ C1] __dev_queue_xmit+0x15c9/0x3760 [ 426.435871][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 426.440966][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 426.446239][ C1] ? __local_bh_enable_ip+0x12a/0x1b0 [ 426.451609][ C1] ? _local_bh_enable+0xa0/0xa0 [ 426.456448][ C1] ? memcpy+0x3c/0x60 [ 426.460419][ C1] ? eth_header+0x117/0x200 [ 426.464912][ C1] ? llc_sysctl_exit+0x60/0x60 [ 426.469662][ C1] ? neigh_resolve_output+0x614/0x730 [ 426.475028][ C1] ip6_finish_output2+0xda2/0x1590 [ 426.480153][ C1] ? ip6_finish_output2+0x593/0x1590 [ 426.485433][ C1] ? nf_hook+0x370/0x370 [ 426.489666][ C1] ? ip6_finish_output+0x577/0x820 [ 426.494769][ C1] NF_HOOK+0x15d/0x460 [ 426.498830][ C1] ? mld_send_report+0x2e0/0x2e0 [ 426.503759][ C1] ? NF_HOOK+0x460/0x460 [ 426.507991][ C1] ? icmp6_dst_alloc+0x3ea/0x460 [ 426.512919][ C1] mld_sendpack+0x893/0xe80 [ 426.517422][ C1] ? mld_sendpack+0x1f7/0xe80 [ 426.522089][ C1] ? add_grec+0x1660/0x1660 [ 426.526598][ C1] mld_ifc_work+0x836/0xb40 [ 426.531090][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 426.536284][ C1] ? process_one_work+0x7a1/0x1160 [ 426.541381][ C1] process_one_work+0x898/0x1160 [ 426.546329][ C1] ? worker_detach_from_pool+0x240/0x240 [ 426.551950][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 426.556965][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 426.562326][ C1] ? kthread_data+0x4b/0xc0 [ 426.566823][ C1] worker_thread+0xaa2/0x1250 [ 426.571500][ C1] ? __kthread_parkme+0x162/0x1c0 [ 426.576519][ C1] kthread+0x29d/0x330 [ 426.580578][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 426.585587][ C1] ? kthread_blkcg+0xd0/0xd0 [ 426.590166][ C1] ret_from_fork+0x1f/0x30 [ 426.594578][ C1] [ 426.597890][ C1] Kernel Offset: disabled [ 426.602242][ C1] Rebooting in 86400 seconds..