last executing test programs: 3m4.119047049s ago: executing program 3 (id=4): creat(&(0x7f00000001c0)='./bus\x00', 0x77) r0 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x1) finit_module(r0, 0x0, 0x6) 3m3.927504356s ago: executing program 3 (id=9): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) dup(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) 3m2.511494864s ago: executing program 3 (id=14): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000480)=ANY=[@ANYBLOB='keep_last_dots,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,umask=00000000000000000000013,namecase=1,discard,time_offset=0x0000000000000008,discard,discard,iocharset=maccenteuro,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646d61736b3d30303030303030303030303030303030303030303030302c6f626a5f726f6c653d25328cfee75f1c5d954656faab7be74628f05603027ff261d3a2b517babe95b5c24f848e33bac3689fbb41b46f88e6612dd68eeeab9384ff7f000099bfaa85597f2e099401b6648584b407efbac174d868270700000000000000d95983b0b4c88668ad69d69527e2000000000000000000002dde4b0d285273afe04dcbff0b6a266ba0b69fe36684a217b60a1f0bb5a40fa2aa042d1483733e92418b1ae82ffccb49f3ab55f962ffb3beeec0f97fbf752c736d61636b6673726f6f743d27232a265c2c6f626a5f726f6c653d616eaf261dc74bdfa87e3a447e9846af301ebc102b336edc173c8169e83d85619b2071c951cd3cc042f073f42d1e8b346b53816da95d94234da8ef543f2fc02f03059a3fb25486109abfdf6b688ccd8307a0ea79757ccd69b979285d74c880e6537a37d8fa83b8f0115f48473ebb62182c6d61736b3d5e4d41595f524541442c657569643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x81, 0x1534, &(0x7f0000000e40)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 3m1.499571469s ago: executing program 3 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c000580140002800800020004000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setns(r4, 0x24020000) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x5) landlock_restrict_self(r7, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m59.163692955s ago: executing program 3 (id=23): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r1, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) fcntl$lock(r0, 0x6, &(0x7f00000006c0)={0x0, 0x0, 0x8, 0x10}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x1, 0x20000009, 0x5, 0xffffffffffffffff}) 2m58.347499006s ago: executing program 32 (id=23): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r1, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) fcntl$lock(r0, 0x6, &(0x7f00000006c0)={0x0, 0x0, 0x8, 0x10}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x1, 0x20000009, 0x5, 0xffffffffffffffff}) 21.800012145s ago: executing program 1 (id=389): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0xc0) shmctl$IPC_INFO(0x0, 0x3, 0x0) 14.971151526s ago: executing program 1 (id=404): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x200000000100, 0x200000000130, 0x200000000160, 0x200000000100, 0x200000000100, 0x200000000100], 0x0, 0x0, 0x0}, 0x108) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be", 0x1}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) 13.386004368s ago: executing program 5 (id=408): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 10.873313891s ago: executing program 0 (id=412): r0 = socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 10.055836377s ago: executing program 0 (id=414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 8.518197815s ago: executing program 5 (id=418): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) 8.420719094s ago: executing program 0 (id=419): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000600)={{0xffffffffffffffff, 0x0, 0x2080, &(0x7f00000004c0)={@_ha_fsid={[0xc, 0x53e]}, {0x1, 0x8, 0xfffffffe, 0x100000000000fffe}}, 0x4, 0x0, 0x0}, {[0x109, 0x9, 0x6, 0x6]}, 0x8, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x8001) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x2b, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffd, @multicast1}}]}, 0x50}}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000440)={0x8}) 8.419559239s ago: executing program 1 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000002e00010226bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000400181000fa130012800b00010062617461647600000400028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x30080040) 7.981203789s ago: executing program 5 (id=421): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 7.160957187s ago: executing program 0 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/192, 0x0, 0x80e3001}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="00042dbd7000fd30ef789a1bab89bbeb31646c37d59f669087fd09700d7b69fe"], 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_usb_connect$uac1(0x4, 0xa8, 0x0, 0x0) 6.780493517s ago: executing program 1 (id=423): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r5, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)='i', 0x1) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x84000) 5.774573356s ago: executing program 5 (id=424): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000034030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) geteuid() r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 5.552064755s ago: executing program 4 (id=426): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x3208c00, &(0x7f0000000340)=ANY=[], 0x21, 0xab6, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x2013, r0, 0x0) 5.371119168s ago: executing program 1 (id=427): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0x2) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, &(0x7f0000000000), 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d40)={'ip6gre0\x00', &(0x7f0000000cc0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x9, 0xfffffff0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7, 0x10, 0x101}}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x800) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000280)={0x0, 0x8269, @status={[0x1, 0x1, 0x3, 0xc269, 0x0, 0x101]}, [0x8, 0x40, 0x100000000, 0x2, 0x3, 0x4, 0x7, 0x189, 0x1e, 0x2, 0xa55, 0x3, 0x8000, 0xfffffffffffffffb, 0x101, 0x2, 0xf, 0xc, 0x90000000000, 0x0, 0x0, 0x3, 0x0, 0xd, 0x3, 0xff, 0x3, 0x4, 0xfffffffffffffffa, 0xc62a, 0x14da8afa, 0x2, 0x7, 0x2f, 0xfffffffffffffff3, 0x2a, 0xfffffffffffffff8, 0x4, 0x7, 0x7, 0x7, 0x401, 0xfffffffffffffffe, 0x53f, 0x3, 0x7, 0x8, 0x3d, 0x5, 0x7f, 0x8001, 0x95, 0x7fffffffffffffff, 0xb3af, 0x400, 0x9, 0x100, 0x6, 0xffffffffffffffff, 0x4, 0x4, 0x9, 0xfffffffffffffffa, 0x5]}) 4.798524682s ago: executing program 4 (id=428): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000034030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xd000, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 4.716117925s ago: executing program 2 (id=429): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) 3.638140789s ago: executing program 4 (id=430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="0b04070fe0ff030002004788aa96a13bb1000000b4debfc768f90d3299cfc5822260feb29242d0572099f3978b20be638732320c66f119acbda24463a9f93b4150743eccbceee3b54cdd28cf66aa8c6535671dc57ca5f0bab721bb83c579ef057e6fc4", 0x63, 0x0, &(0x7f0000000000)={0x11, 0x11, r2, 0x1, 0x13, 0x6, @broadcast}, 0x14) 3.584941579s ago: executing program 2 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x1b, 0x18, 0x35f32a6dfa748ddd, 0x70bd67, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000300}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 3.406791541s ago: executing program 2 (id=432): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000600)={{0xffffffffffffffff, 0x0, 0x2080, &(0x7f00000004c0)={@_ha_fsid={[0xc, 0x53e]}, {0x1, 0x8, 0xfffffffe, 0x100000000000fffe}}, 0x4, 0x0, 0x0}, {[0x109, 0x9, 0x6, 0x6]}, 0x8, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x8001) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x2b, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffd, @multicast1}}]}, 0x50}}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000440)={0x8}) 3.349043525s ago: executing program 4 (id=433): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x81, 0xf4b, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x65, 0x0, 0x80, 0x4, 0x0, @loopback, @local}}}}) 2.994256418s ago: executing program 0 (id=434): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.576021665s ago: executing program 4 (id=435): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x80000000000000) io_setup(0x30, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) 2.47990992s ago: executing program 5 (id=436): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3}, 0x50) sendmsg$GTP_CMD_ECHOREQ(r0, 0x0, 0x0) 2.465718077s ago: executing program 2 (id=437): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000002340)={0x0, 0x1, 0x0, &(0x7f0000002280), 0x0, 0xd000}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 2.444761136s ago: executing program 1 (id=438): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc) 1.484352483s ago: executing program 5 (id=439): io_setup(0x8, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.321510214s ago: executing program 0 (id=440): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041cf700c900"], 0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) io_submit(0x0, 0x2, &(0x7f00000000c0)=[0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 598.16658ms ago: executing program 2 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) 86.85929ms ago: executing program 4 (id=442): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$isdn(0x22, 0x3, 0x26) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) 0s ago: executing program 2 (id=443): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 68.129796][ T5822] cgroup: Unknown subsys name 'net' [ 68.252110][ T5822] cgroup: Unknown subsys name 'cpuset' [ 68.261044][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.590692][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.294058][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.300736][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.724167][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.731586][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.742418][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.751343][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.759041][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.775247][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.788081][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.795780][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.795860][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.811723][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.819388][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.820633][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.831238][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.840175][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.842394][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.849679][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.863155][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.864611][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.871505][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.878079][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.885242][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.891824][ T5160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.903265][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.907424][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.913546][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.525235][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 72.581124][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 72.603421][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 72.666704][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.752439][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.884158][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.891595][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.898875][ T5846] bridge_slave_0: entered allmulticast mode [ 72.905825][ T5846] bridge_slave_0: entered promiscuous mode [ 72.914442][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.921580][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.928776][ T5835] bridge_slave_0: entered allmulticast mode [ 72.935750][ T5835] bridge_slave_0: entered promiscuous mode [ 72.955995][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.963159][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.970602][ T5838] bridge_slave_0: entered allmulticast mode [ 72.977451][ T5838] bridge_slave_0: entered promiscuous mode [ 72.985431][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.992822][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.000298][ T5838] bridge_slave_1: entered allmulticast mode [ 73.007226][ T5838] bridge_slave_1: entered promiscuous mode [ 73.015055][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.022163][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.029329][ T5846] bridge_slave_1: entered allmulticast mode [ 73.036191][ T5846] bridge_slave_1: entered promiscuous mode [ 73.043273][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.050475][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.057684][ T5835] bridge_slave_1: entered allmulticast mode [ 73.066176][ T5835] bridge_slave_1: entered promiscuous mode [ 73.086828][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.094623][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.102132][ T5834] bridge_slave_0: entered allmulticast mode [ 73.109179][ T5834] bridge_slave_0: entered promiscuous mode [ 73.146974][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.154604][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.161794][ T5834] bridge_slave_1: entered allmulticast mode [ 73.168900][ T5834] bridge_slave_1: entered promiscuous mode [ 73.221467][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.232915][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.244474][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.273657][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.284904][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.296183][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.313699][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.321706][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.329529][ T5836] bridge_slave_0: entered allmulticast mode [ 73.337566][ T5836] bridge_slave_0: entered promiscuous mode [ 73.347493][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.383718][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.390913][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.398024][ T5836] bridge_slave_1: entered allmulticast mode [ 73.405159][ T5836] bridge_slave_1: entered promiscuous mode [ 73.413716][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.444194][ T5835] team0: Port device team_slave_0 added [ 73.467508][ T5838] team0: Port device team_slave_0 added [ 73.475087][ T5846] team0: Port device team_slave_0 added [ 73.482932][ T5846] team0: Port device team_slave_1 added [ 73.489836][ T5835] team0: Port device team_slave_1 added [ 73.514264][ T5838] team0: Port device team_slave_1 added [ 73.540172][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.551899][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.562607][ T5834] team0: Port device team_slave_0 added [ 73.603591][ T5834] team0: Port device team_slave_1 added [ 73.626760][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.633802][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.659950][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.672028][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.679254][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.705264][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.733840][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.740904][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.766981][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.780476][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.788577][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.814787][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.826594][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.833604][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.859855][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.881044][ T5836] team0: Port device team_slave_0 added [ 73.887505][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.894485][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.920414][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.929247][ T5843] Bluetooth: hci3: command tx timeout [ 73.933796][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.937104][ T5839] Bluetooth: hci0: command tx timeout [ 73.944117][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.975743][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.987515][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.994474][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.008419][ T5839] Bluetooth: hci4: command tx timeout [ 74.020441][ T5843] Bluetooth: hci1: command tx timeout [ 74.026635][ T5839] Bluetooth: hci2: command tx timeout [ 74.032978][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.065974][ T5836] team0: Port device team_slave_1 added [ 74.113946][ T5835] hsr_slave_0: entered promiscuous mode [ 74.120235][ T5835] hsr_slave_1: entered promiscuous mode [ 74.191389][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.198460][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.224721][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.237031][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.244053][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.270342][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.287180][ T5834] hsr_slave_0: entered promiscuous mode [ 74.293536][ T5834] hsr_slave_1: entered promiscuous mode [ 74.299640][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 74.305424][ T5834] Cannot create hsr debugfs directory [ 74.315510][ T5846] hsr_slave_0: entered promiscuous mode [ 74.322023][ T5846] hsr_slave_1: entered promiscuous mode [ 74.328068][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 74.333865][ T5846] Cannot create hsr debugfs directory [ 74.345043][ T5838] hsr_slave_0: entered promiscuous mode [ 74.351233][ T5838] hsr_slave_1: entered promiscuous mode [ 74.357312][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 74.363084][ T5838] Cannot create hsr debugfs directory [ 74.553975][ T5836] hsr_slave_0: entered promiscuous mode [ 74.560278][ T5836] hsr_slave_1: entered promiscuous mode [ 74.566549][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 74.572929][ T5836] Cannot create hsr debugfs directory [ 74.936570][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.960746][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.972929][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.990097][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.037295][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.057294][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.067272][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.089758][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.144301][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.181248][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.192431][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.202791][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.313837][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.324721][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.341388][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.355258][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.367686][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.441901][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.475812][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.483231][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.504675][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.514353][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.537564][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.544854][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.564967][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.572091][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.584848][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.644949][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.685385][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.694005][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.701191][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.712598][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.719733][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.746469][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.796169][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.833372][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.840530][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.884603][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.891816][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.937132][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.009988][ T5839] Bluetooth: hci3: command tx timeout [ 76.010036][ T5843] Bluetooth: hci0: command tx timeout [ 76.036772][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.084682][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.091886][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.099053][ T5843] Bluetooth: hci1: command tx timeout [ 76.103167][ T5839] Bluetooth: hci4: command tx timeout [ 76.104490][ T5160] Bluetooth: hci2: command tx timeout [ 76.133290][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.140456][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.174262][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.194231][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.285342][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.313031][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.320251][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.352949][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.373748][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.380930][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.591309][ T5846] veth0_vlan: entered promiscuous mode [ 76.652172][ T5846] veth1_vlan: entered promiscuous mode [ 76.702852][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.843078][ T5846] veth0_macvtap: entered promiscuous mode [ 76.867874][ T5846] veth1_macvtap: entered promiscuous mode [ 76.880991][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.912470][ T5835] veth0_vlan: entered promiscuous mode [ 76.919556][ T5834] veth0_vlan: entered promiscuous mode [ 76.932816][ T5834] veth1_vlan: entered promiscuous mode [ 76.954841][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.974632][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.990675][ T5835] veth1_vlan: entered promiscuous mode [ 77.003619][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.041143][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.051664][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.071812][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.080729][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.091444][ T5834] veth0_macvtap: entered promiscuous mode [ 77.114207][ T5838] veth0_vlan: entered promiscuous mode [ 77.130090][ T5834] veth1_macvtap: entered promiscuous mode [ 77.175048][ T5835] veth0_macvtap: entered promiscuous mode [ 77.189698][ T5838] veth1_vlan: entered promiscuous mode [ 77.200731][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.224427][ T5835] veth1_macvtap: entered promiscuous mode [ 77.253886][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.294477][ T1328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.303561][ T1328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.324113][ T1328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.333232][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.342026][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.350077][ T1328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.362293][ T5836] veth0_vlan: entered promiscuous mode [ 77.394689][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.426225][ T5838] veth0_macvtap: entered promiscuous mode [ 77.441948][ T5836] veth1_vlan: entered promiscuous mode [ 77.452597][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.465371][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.474563][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.476739][ T1328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508654][ T5838] veth1_macvtap: entered promiscuous mode [ 77.516929][ T1328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.534746][ T1328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.584045][ T1328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.594785][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.713996][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.731475][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.778538][ T168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.809562][ T1328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.830577][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.844601][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.875641][ T1328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.910560][ T5836] veth0_macvtap: entered promiscuous mode [ 77.939745][ T1328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.993733][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.004574][ T5836] veth1_macvtap: entered promiscuous mode [ 78.030000][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.088688][ T5839] Bluetooth: hci0: command tx timeout [ 78.094645][ T5839] Bluetooth: hci3: command tx timeout [ 78.141196][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.169507][ T5843] Bluetooth: hci4: command tx timeout [ 78.174973][ T5843] Bluetooth: hci1: command tx timeout [ 78.180719][ T5843] Bluetooth: hci2: command tx timeout [ 78.192837][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.204320][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.238361][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.282388][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.291311][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.380439][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.389643][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.463227][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.487545][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.502440][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.533754][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.547333][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.556058][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.171058][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.186588][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.441419][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.472289][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.168601][ T5839] Bluetooth: hci3: command tx timeout [ 80.174764][ T5843] Bluetooth: hci0: command tx timeout [ 80.258529][ T5839] Bluetooth: hci1: command tx timeout [ 80.264655][ T5160] Bluetooth: hci4: command tx timeout [ 80.271573][ T5843] Bluetooth: hci2: command tx timeout [ 80.331687][ T5979] loop4: detected capacity change from 0 to 32768 [ 80.416574][ T5979] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 80.446602][ T5972] loop0: detected capacity change from 0 to 131072 [ 80.515769][ T5972] ======================================================= [ 80.515769][ T5972] WARNING: The mand mount option has been deprecated and [ 80.515769][ T5972] and is ignored by this kernel. Remove the mand [ 80.515769][ T5972] option from the mount to silence this warning. [ 80.515769][ T5972] ======================================================= [ 80.579192][ T5972] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 80.586291][ T5972] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.596832][ T5972] F2FS-fs (loop0): invalid crc value [ 80.634718][ T5979] XFS (loop4): Ending clean mount [ 80.683593][ T5972] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 80.713686][ T5972] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.721651][ T5972] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 80.785102][ T5979] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 81.086750][ T5998] loop3: detected capacity change from 0 to 256 [ 81.102513][ T5998] exfat: Deprecated parameter 'namecase' [ 81.115425][ T5998] exfat: Deprecated parameter 'utf8' [ 81.164429][ T5998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 81.203860][ T5835] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 81.760621][ T809] cfg80211: failed to load regulatory.db [ 81.941230][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 82.044910][ T6003] vlan2: entered promiscuous mode [ 82.081514][ T6003] batadv0: entered promiscuous mode [ 82.111880][ T6008] loop1: detected capacity change from 0 to 256 [ 82.195820][ T6008] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 82.796695][ T6008] exFAT-fs (loop1): start_clu is invalid cluster(0xff000008) [ 83.140815][ T6015] netlink: 56 bytes leftover after parsing attributes in process `syz.2.20'. [ 84.096547][ T6024] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.607491][ T1328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.904989][ T6021] loop2: detected capacity change from 0 to 131072 [ 84.923904][ T6021] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 84.931268][ T6021] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.947146][ T6021] F2FS-fs (loop2): invalid crc value [ 84.955046][ T1328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.075752][ T6021] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 85.091719][ T6021] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.098839][ T6021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 85.130601][ T6018] loop4: detected capacity change from 0 to 32768 [ 85.226702][ T6018] (syz.4.13,6018,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 85.274353][ T6018] (syz.4.13,6018,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 85.290463][ T1328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.373694][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.27'. [ 85.402963][ T6018] JBD2: Ignoring recovery information on journal [ 85.534378][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 85.547253][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 85.782057][ T6018] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 85.897472][ T1328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.567615][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.579760][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.591970][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.616664][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.646390][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.464285][ T5835] ocfs2: Unmounting device (7,4) on (node local) [ 88.548222][ T6052] loop1: detected capacity change from 0 to 4096 [ 88.669287][ T1328] bridge_slave_1: left allmulticast mode [ 88.752122][ T1328] bridge_slave_1: left promiscuous mode [ 88.891334][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.231642][ T1328] bridge_slave_0: left allmulticast mode [ 89.265244][ T1328] bridge_slave_0: left promiscuous mode [ 89.297980][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.757285][ T6071] loop4: detected capacity change from 0 to 64 [ 89.769800][ T6071] hfs: unable to locate alternate MDB [ 89.775763][ T6071] hfs: continuing without an alternate MDB [ 89.782345][ T5839] Bluetooth: hci2: command tx timeout [ 90.021013][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.065911][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.095763][ T1328] bond0 (unregistering): Released all slaves [ 90.627894][ T6083] xt_hashlimit: size too large, truncated to 1048576 [ 91.194261][ T6073] loop1: detected capacity change from 0 to 32768 [ 91.453154][ T6073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.33 (6073) [ 91.520651][ T6073] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.571299][ T6089] loop2: detected capacity change from 0 to 512 [ 91.613099][ T6073] BTRFS info (device loop1): using sha256 checksum algorithm [ 91.646922][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 91.909494][ T5839] Bluetooth: hci2: command tx timeout [ 92.449682][ T6089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.28: missing EA_INODE flag [ 92.465134][ T6089] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 92.466783][ T6089] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.28: error while reading EA inode 12 err=-117 [ 92.476195][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 92.476284][ C1] EXT4-fs (loop2): initial error at time 1775079728: ext4_xattr_inode_iget:441: inode 12 [ 92.476316][ C1] EXT4-fs (loop2): last error at time 1775079728: ext4_xattr_inode_iget:441: inode 12 [ 92.526682][ T6084] lo speed is unknown, defaulting to 1000 [ 92.616876][ T6089] loop2: lost filesystem error report for type 5 error -117 [ 92.618888][ T6089] EXT4-fs (loop2): 1 orphan inode deleted [ 92.638247][ T6073] BTRFS info (device loop1): enabling ssd optimizations [ 92.647248][ T6073] BTRFS info (device loop1): turning on async discard [ 92.654728][ T6073] BTRFS info (device loop1): enabling free space tree [ 92.683980][ T6084] lo speed is unknown, defaulting to 1000 [ 92.714763][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.866286][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 92.994058][ T5836] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.074432][ T6084] lo speed is unknown, defaulting to 1000 [ 93.257793][ T6084] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 93.292710][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 93.342274][ T6084] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 93.469140][ T6084] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 93.547920][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.656721][ T6084] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.762070][ T6084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.919400][ T1328] hsr_slave_0: left promiscuous mode [ 93.929797][ T5839] Bluetooth: hci2: command tx timeout [ 93.935152][ T6123] loop1: detected capacity change from 0 to 2048 [ 94.736206][ T1328] hsr_slave_1: left promiscuous mode [ 94.756218][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.774437][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.813508][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.831873][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.876955][ T1328] veth1_macvtap: left promiscuous mode [ 94.885117][ T1328] veth0_macvtap: left promiscuous mode [ 94.885860][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.892164][ T1328] veth1_vlan: left promiscuous mode [ 94.936979][ T1328] veth0_vlan: left promiscuous mode [ 95.393495][ T6139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.011774][ T5839] Bluetooth: hci2: command tx timeout [ 96.158645][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.124038][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 97.147358][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 97.328152][ T6084] lo speed is unknown, defaulting to 1000 [ 97.407312][ T6084] lo speed is unknown, defaulting to 1000 [ 97.538656][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'. [ 97.620163][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.681451][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.724795][ T6048] bridge_slave_0: entered allmulticast mode [ 97.852178][ T6048] bridge_slave_0: entered promiscuous mode [ 97.933255][ T6084] lo speed is unknown, defaulting to 1000 [ 98.004782][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.120094][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.211938][ T6048] bridge_slave_1: entered allmulticast mode [ 98.317864][ T6048] bridge_slave_1: entered promiscuous mode [ 98.437770][ T6084] lo speed is unknown, defaulting to 1000 [ 98.535565][ T6084] lo speed is unknown, defaulting to 1000 [ 98.542947][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.686654][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.949951][ T29] audit: type=1800 audit(1775079734.742:2): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.48" name="file1" dev="tmpfs" ino=75 res=0 errno=0 [ 99.291725][ T6048] team0: Port device team_slave_0 added [ 99.330309][ T6048] team0: Port device team_slave_1 added [ 99.595400][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 99.656282][ T6168] loop1: detected capacity change from 0 to 32768 [ 99.658598][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.698410][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.817486][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.847294][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.855225][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.904109][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.946123][ T6166] loop4: detected capacity change from 0 to 32768 [ 99.993968][ T6166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.46 (6166) [ 100.109085][ T6166] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.142314][ T6166] BTRFS info (device loop4): using sha256 checksum algorithm [ 100.173646][ T6048] hsr_slave_0: entered promiscuous mode [ 100.211299][ T6048] hsr_slave_1: entered promiscuous mode [ 100.332801][ T6048] debugfs: 'hsr0' already exists in 'hsr' [ 100.338875][ T6048] Cannot create hsr debugfs directory [ 100.429534][ T6166] BTRFS info (device loop4): enabling ssd optimizations [ 100.463846][ T6198] loop0: detected capacity change from 0 to 2048 [ 100.488592][ T6166] BTRFS info (device loop4): turning on async discard [ 100.527727][ T6166] BTRFS info (device loop4): enabling free space tree [ 100.592655][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.919018][ T5835] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.149305][ T6218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.986779][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.256604][ T6048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.364449][ T6048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.461696][ T6048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.500431][ T6048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.623340][ T6243] loop0: detected capacity change from 0 to 4096 [ 104.744704][ T6255] siw: device registration error -23 [ 105.508626][ T6243] NILFS (loop0): invalid segment: Checksum error in segment payload [ 105.572445][ T6243] NILFS (loop0): trying rollback from an earlier position [ 105.687027][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.60'. [ 105.730490][ T6243] NILFS (loop0): recovery complete [ 105.753543][ T6263] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.758256][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.861113][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.920614][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.927809][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.963916][ T6268] netlink: 'syz.1.61': attribute type 12 has an invalid length. [ 106.010931][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.018138][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.160405][ T6273] loop2: detected capacity change from 0 to 256 [ 106.200424][ T6273] exfat: Deprecated parameter 'utf8' [ 106.243345][ T6275] loop4: detected capacity change from 0 to 2048 [ 106.323486][ T6273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 106.354053][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.778893][ T6292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.048542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.226765][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.438383][ T6299] netlink: 'syz.0.65': attribute type 4 has an invalid length. [ 107.446529][ T6299] netlink: 152 bytes leftover after parsing attributes in process `syz.0.65'. [ 107.539482][ T6299] .`: renamed from bond0 (while UP) [ 107.874838][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.996393][ T6309] loop4: detected capacity change from 0 to 16 [ 108.116108][ T6309] erofs (device loop4): mounted with root inode @ nid 36. [ 109.204869][ T6313] netlink: 'syz.0.68': attribute type 4 has an invalid length. [ 109.213057][ T6313] netlink: 152 bytes leftover after parsing attributes in process `syz.0.68'. [ 110.214604][ T6324] xt_hashlimit: size too large, truncated to 1048576 [ 111.212448][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 111.570308][ T6048] veth0_vlan: entered promiscuous mode [ 111.636621][ T6048] veth1_vlan: entered promiscuous mode [ 111.884975][ T6048] veth0_macvtap: entered promiscuous mode [ 111.933182][ T6048] veth1_macvtap: entered promiscuous mode [ 112.002098][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.077635][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.806784][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.840257][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.877155][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.998590][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.076783][ T6363] loop4: detected capacity change from 0 to 16 [ 113.117806][ T6363] erofs (device loop4): mounted with root inode @ nid 36. [ 113.469173][ T6366] netlink: 'syz.1.79': attribute type 4 has an invalid length. [ 113.476765][ T6366] netlink: 152 bytes leftover after parsing attributes in process `syz.1.79'. [ 113.488670][ T6366] .`: renamed from bond0 (while UP) [ 113.677645][ T6351] capability: warning: `syz.2.73' uses 32-bit capabilities (legacy support in use) [ 113.720241][ T6351] program syz.2.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.239028][ T6370] Zero length message leads to an empty skb [ 114.258437][ T6358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.275417][ T6358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.516623][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.576495][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.595620][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.83'. [ 115.783236][ T6388] netlink: 'syz.4.84': attribute type 4 has an invalid length. [ 115.793118][ T6388] netlink: 152 bytes leftover after parsing attributes in process `syz.4.84'. [ 115.839259][ T6388] .`: renamed from bond0 (while UP) [ 116.185703][ T6385] xt_CT: No such helper "pptp" [ 116.514887][ T6397] siw: device registration error -23 [ 116.562814][ T6396] xt_hashlimit: size too large, truncated to 1048576 [ 116.760179][ T6399] loop5: detected capacity change from 0 to 32768 [ 117.446438][ T6403] loop4: detected capacity change from 0 to 1024 [ 117.562187][ T6403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.756426][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.143367][ T6415] loop0: detected capacity change from 0 to 16 [ 120.174462][ T6415] erofs (device loop0): mounted with root inode @ nid 36. [ 120.726183][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.95'. [ 120.728204][ T6428] loop1: detected capacity change from 0 to 256 [ 120.809777][ T6428] exfat: Deprecated parameter 'utf8' [ 120.881039][ T6428] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 121.371155][ T6443] loop0: detected capacity change from 0 to 1024 [ 122.156050][ T6443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.410132][ T6463] xt_hashlimit: size too large, truncated to 1048576 [ 122.460308][ T6465] siw: device registration error -23 [ 123.976855][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.078796][ T6485] loop1: detected capacity change from 0 to 16 [ 126.142624][ T6485] erofs (device loop1): mounted with root inode @ nid 36. [ 126.884052][ T6492] netlink: 'syz.2.107': attribute type 4 has an invalid length. [ 126.893550][ T6492] netlink: 152 bytes leftover after parsing attributes in process `syz.2.107'. [ 126.905589][ T6492] .`: renamed from bond0 (while UP) [ 126.945302][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 127.181774][ T6503] loop5: detected capacity change from 0 to 256 [ 127.191486][ T6503] exfat: Deprecated parameter 'utf8' [ 127.727883][ T6506] loop2: detected capacity change from 0 to 512 [ 127.746055][ T6503] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 127.800296][ T6506] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.112: missing EA_INODE flag [ 127.812288][ T6506] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 127.818322][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 127.829004][ T6506] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.112: error while reading EA inode 12 err=-117 [ 127.836090][ C0] EXT4-fs (loop2): initial error at time 1775079763: ext4_xattr_inode_iget:441: inode 12 [ 127.857734][ C0] EXT4-fs (loop2): last error at time 1775079763: ext4_xattr_inode_iget:441: inode 12 [ 127.880420][ T6506] loop2: lost filesystem error report for type 5 error -117 [ 127.916507][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'. [ 127.955745][ T6506] EXT4-fs (loop2): 1 orphan inode deleted [ 127.998028][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.277008][ T6517] loop1: detected capacity change from 0 to 1024 [ 128.308906][ T6519] loop0: detected capacity change from 0 to 1024 [ 128.378191][ T6517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.663058][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.801449][ T6531] siw: device registration error -23 [ 128.817146][ T6530] xt_hashlimit: size too large, truncated to 1048576 [ 129.802661][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.950859][ T6537] hfsplus: b-tree write err: -5, ino 2 [ 130.140452][ T6546] loop2: detected capacity change from 0 to 16 [ 130.165509][ T6546] erofs (device loop2): mounted with root inode @ nid 36. [ 131.180919][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.324041][ T6557] loop2: detected capacity change from 0 to 256 [ 131.375376][ T6557] exfat: Deprecated parameter 'utf8' [ 131.457336][ T6557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 131.603096][ T29] audit: type=1800 audit(1775079767.422:3): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=1048617 res=0 errno=0 [ 132.600377][ T29] audit: type=1804 audit(1775079768.422:4): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.120" name="/newroot/7/file0" dev="tmpfs" ino=60 res=1 errno=0 [ 132.749169][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764309][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.221592][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 133.285161][ T6571] vlan2: entered promiscuous mode [ 133.313888][ T6571] batadv0: entered promiscuous mode [ 133.629216][ T6578] loop2: detected capacity change from 0 to 1024 [ 133.705772][ T6578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.762903][ T83] hfsplus: b-tree write err: -5, ino 25 [ 133.806285][ T83] hfsplus: b-tree write err: -5, ino 4 [ 133.857692][ T83] hfsplus: b-tree write err: -5, ino 2 [ 133.890838][ T83] hfsplus: b-tree write err: -5, ino 26 [ 134.036290][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.894405][ T6603] loop4: detected capacity change from 0 to 64 [ 134.909534][ T6603] hfs: unable to locate alternate MDB [ 134.914948][ T6603] hfs: continuing without an alternate MDB [ 135.424978][ T6614] loop1: detected capacity change from 0 to 16 [ 135.535261][ T6614] erofs (device loop1): mounted with root inode @ nid 36. [ 136.160060][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.135'. [ 136.378933][ T6619] fuse: Unknown parameter 'fd0x0000000000000003' [ 136.422335][ T6593] loop0: detected capacity change from 0 to 32768 [ 136.608745][ T6593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.130 (6593) [ 138.435175][ T6633] loop2: detected capacity change from 0 to 32768 [ 138.442976][ T6633] xfs: Deprecated parameter 'attr2' [ 138.448199][ T6633] XFS: attr2 mount option is deprecated. [ 138.475378][ T6633] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.510316][ T6630] loop5: detected capacity change from 0 to 1024 [ 138.550757][ T6633] XFS (loop2): Ending clean mount [ 138.565169][ T6633] XFS (loop2): Quotacheck needed: Please wait. [ 138.789306][ T6633] XFS (loop2): Quotacheck: Done. [ 138.885909][ T6648] hfsplus: b-tree write err: -5, ino 2 [ 139.044437][ T5846] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.603758][ T6645] program syz.1.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.760262][ T6662] loop0: detected capacity change from 0 to 16 [ 140.852137][ T6662] erofs (device loop0): mounted with root inode @ nid 36. [ 141.674422][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 142.220373][ T83] hfsplus: b-tree write err: -5, ino 25 [ 142.226132][ T83] hfsplus: b-tree write err: -5, ino 4 [ 142.240561][ T83] hfsplus: b-tree write err: -5, ino 2 [ 142.261594][ T83] hfsplus: b-tree write err: -5, ino 26 [ 143.086086][ T6678] netlink: 56 bytes leftover after parsing attributes in process `syz.1.149'. [ 143.332655][ T6680] fuse: Unknown parameter 'fd0x0000000000000003' [ 143.438479][ T6675] loop5: detected capacity change from 0 to 32768 [ 143.465217][ T6675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.151 (6675) [ 143.478643][ T6682] loop0: detected capacity change from 0 to 1024 [ 143.558933][ T6682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.582397][ T6675] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.631813][ T6675] BTRFS info (device loop5): using sha256 checksum algorithm [ 143.796245][ T6675] BTRFS info (device loop5): enabling ssd optimizations [ 143.800154][ T6694] loop1: detected capacity change from 0 to 256 [ 143.817835][ T6675] BTRFS info (device loop5): turning on async discard [ 143.867877][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.883266][ T6675] BTRFS info (device loop5): enabling free space tree [ 143.893046][ T6694] exfat: Deprecated parameter 'utf8' [ 143.957391][ T6694] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 144.017575][ T29] audit: type=1800 audit(1775079779.832:5): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.155" name="file1" dev="loop1" ino=1048618 res=0 errno=0 [ 144.301207][ T6048] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.054997][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.160'. [ 146.169076][ T6721] loop1: detected capacity change from 0 to 16 [ 146.188938][ T6719] program syz.2.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.264542][ T6721] erofs (device loop1): mounted with root inode @ nid 36. [ 146.797803][ T6718] loop0: detected capacity change from 0 to 1024 [ 147.126035][ T6723] netlink: 56 bytes leftover after parsing attributes in process `syz.5.163'. [ 147.407104][ T6728] hfsplus: b-tree write err: -5, ino 2 [ 147.559926][ T6730] loop5: detected capacity change from 0 to 32768 [ 147.572632][ T6730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.167 (6730) [ 147.593128][ T6730] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.604070][ T6730] BTRFS info (device loop5): using crc32c checksum algorithm [ 147.731367][ T6730] BTRFS info (device loop5): enabling ssd optimizations [ 147.738427][ T6730] BTRFS info (device loop5): turning on flush-on-commit [ 147.745378][ T6730] BTRFS info (device loop5): enabling free space tree [ 147.752240][ T6730] BTRFS info (device loop5): enabling auto defrag [ 147.758710][ T6730] BTRFS info (device loop5): use lzo compression, level 1 [ 147.765809][ T6730] BTRFS info (device loop5): max_inline set to 4096 [ 147.781092][ T6732] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.155188][ T6750] fuse: Unknown parameter 'fd0x0000000000000003' [ 148.346766][ T6048] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.575164][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'. [ 148.895164][ T6758] loop5: detected capacity change from 0 to 512 [ 149.073873][ T6758] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.169: missing EA_INODE flag [ 149.199772][ T6765] pimreg3: entered allmulticast mode [ 149.649166][ T6758] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 149.650371][ T6758] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.169: error while reading EA inode 12 err=-117 [ 149.659603][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 149.659624][ C1] EXT4-fs (loop5): initial error at time 1775079785: ext4_xattr_inode_iget:441: inode 12 [ 149.659655][ C1] EXT4-fs (loop5): last error at time 1775079785: ext4_xattr_inode_iget:441: inode 12 [ 149.703012][ T6758] loop5: lost filesystem error report for type 5 error -117 [ 149.703389][ T6758] EXT4-fs (loop5): 1 orphan inode deleted [ 149.764027][ T6758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.991137][ T83] hfsplus: b-tree write err: -5, ino 25 [ 150.006105][ T83] hfsplus: b-tree write err: -5, ino 4 [ 150.022027][ T83] hfsplus: b-tree write err: -5, ino 2 [ 150.034137][ T83] hfsplus: b-tree write err: -5, ino 26 [ 150.175244][ T6048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.218364][ T6782] loop1: detected capacity change from 0 to 16 [ 152.927786][ T6782] erofs (device loop1): mounted with root inode @ nid 36. [ 153.412356][ T29] audit: type=1804 audit(1775079789.232:6): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.170" name="/newroot/34/file0" dev="tmpfs" ino=210 res=1 errno=0 [ 153.590432][ T6785] netlink: 'syz.0.178': attribute type 4 has an invalid length. [ 153.598108][ T6785] netlink: 152 bytes leftover after parsing attributes in process `syz.0.178'. [ 153.669989][ T6789] loop1: detected capacity change from 0 to 256 [ 153.744281][ T6789] exfat: Deprecated parameter 'utf8' [ 153.847646][ T6789] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 153.872703][ T29] audit: type=1800 audit(1775079789.692:7): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.179" name="file1" dev="loop1" ino=1048619 res=0 errno=0 [ 154.040108][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.044745][ T6795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.182'. [ 154.185638][ T6799] loop1: detected capacity change from 0 to 512 [ 154.215983][ T6801] loop0: detected capacity change from 0 to 1024 [ 154.230467][ T6799] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.184: missing EA_INODE flag [ 154.255186][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.258023][ T6799] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 154.308790][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 154.332635][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.341791][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.398326][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 154.404853][ C0] EXT4-fs (loop1): initial error at time 1775079790: ext4_xattr_inode_iget:441: inode 12 [ 154.414734][ C0] EXT4-fs (loop1): last error at time 1775079790: ext4_xattr_inode_iget:441: inode 12 [ 154.430258][ T6799] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.184: error while reading EA inode 12 err=-117 [ 154.444443][ T6799] loop1: lost filesystem error report for type 5 error -117 [ 154.446464][ T6799] EXT4-fs (loop1): 1 orphan inode deleted [ 154.466489][ T6799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.620465][ T5920] usb 3-1: config 0 descriptor?? [ 154.700510][ T5920] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 155.101553][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.225800][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 155.657081][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'. [ 156.504841][ T6829] netlink: 'syz.5.192': attribute type 4 has an invalid length. [ 156.596887][ T1558] usb 3-1: USB disconnect, device number 2 [ 156.604273][ T6829] netlink: 152 bytes leftover after parsing attributes in process `syz.5.192'. [ 156.705120][ T6829] .`: renamed from bond0 (while UP) [ 156.946359][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'. [ 157.171540][ T6839] loop1: detected capacity change from 0 to 2048 [ 157.279740][ T6839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.436766][ T6847] loop5: detected capacity change from 0 to 32768 [ 157.452676][ T6847] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.197 (6847) [ 157.473801][ T6847] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.484021][ T6847] BTRFS info (device loop5): using sha256 checksum algorithm [ 157.593227][ T6847] BTRFS info (device loop5): enabling ssd optimizations [ 157.600575][ T6847] BTRFS info (device loop5): turning on async discard [ 157.607868][ T6847] BTRFS info (device loop5): enabling free space tree [ 157.833884][ T6863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.336925][ T152] hfsplus: b-tree write err: -5, ino 25 [ 158.357528][ T152] hfsplus: b-tree write err: -5, ino 4 [ 158.376553][ T152] hfsplus: b-tree write err: -5, ino 2 [ 158.455537][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.618726][ T6870] loop2: detected capacity change from 0 to 512 [ 158.714679][ T6870] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.198: missing EA_INODE flag [ 158.728749][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 158.827265][ T6870] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 158.827636][ T6870] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.198: error while reading EA inode 12 err=-117 [ 158.836898][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 158.836919][ C0] EXT4-fs (loop2): initial error at time 1775079794: ext4_xattr_inode_iget:441: inode 12 [ 158.836951][ C0] EXT4-fs (loop2): last error at time 1775079794: ext4_xattr_inode_iget:441: inode 12 [ 158.903781][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 158.982676][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.5.197'. [ 159.006983][ T6870] loop2: lost filesystem error report for type 5 error -117 [ 159.007350][ T6870] EXT4-fs (loop2): 1 orphan inode deleted [ 159.094842][ T6870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.611300][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.793497][ T6048] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.028589][ T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.256124][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.5.204'. [ 160.329106][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.425641][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 161.194784][ T6898] xt_hashlimit: size too large, truncated to 1048576 [ 161.387635][ T6897] siw: device registration error -23 [ 161.639928][ T42] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.649107][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.662203][ T42] usb 3-1: config 0 descriptor?? [ 161.715387][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.207'. [ 161.778599][ T42] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 162.186305][ T6909] loop1: detected capacity change from 0 to 1024 [ 162.819429][ T6924] netlink: 'syz.5.214': attribute type 4 has an invalid length. [ 162.827123][ T6924] netlink: 152 bytes leftover after parsing attributes in process `syz.5.214'. [ 163.613868][ T5919] usb 3-1: USB disconnect, device number 3 [ 163.676365][ T6930] syz.5.215 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.688074][ T6930] ubi31: attaching mtd0 [ 163.695015][ T6930] ubi31: scanning is finished [ 163.699774][ T6930] ubi31: empty MTD device detected [ 164.081793][ T6930] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 164.090484][ T6930] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 164.098866][ T6930] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 164.107374][ T6930] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 164.115153][ T6930] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 164.122060][ T6930] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 164.130258][ T6930] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 584581732 [ 164.140425][ T6930] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 164.153965][ T6934] ubi31: background thread "ubi_bgt31d" started, PID 6934 [ 164.187973][ T6935] loop2: detected capacity change from 0 to 16 [ 164.248022][ T6935] erofs (device loop2): mounted with root inode @ nid 36. [ 165.061116][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 165.715310][ T13] hfsplus: b-tree write err: -5, ino 25 [ 165.794050][ T13] hfsplus: b-tree write err: -5, ino 4 [ 165.866601][ T13] hfsplus: b-tree write err: -5, ino 2 [ 165.947163][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'. [ 166.208010][ T6945] netlink: 'syz.0.220': attribute type 4 has an invalid length. [ 166.272666][ T6945] netlink: 152 bytes leftover after parsing attributes in process `syz.0.220'. [ 166.311618][ T6944] loop1: detected capacity change from 0 to 1024 [ 166.690558][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.219'. [ 166.759050][ T6950] netlink: 56 bytes leftover after parsing attributes in process `syz.1.219'. [ 168.078430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 168.935396][ T6977] loop5: detected capacity change from 0 to 1024 [ 169.843071][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.231'. [ 170.431162][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'. [ 170.805862][ T35] hfsplus: b-tree write err: -5, ino 25 [ 170.825948][ T35] hfsplus: b-tree write err: -5, ino 4 [ 170.855470][ T35] hfsplus: b-tree write err: -5, ino 2 [ 170.959345][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 171.563357][ T7003] ubi: mtd0 is already attached to ubi31 [ 173.287202][ T6994] program syz.0.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.435799][ T7022] loop5: detected capacity change from 0 to 128 [ 173.468695][ T7022] EXT4-fs (loop5): Test dummy encryption mode enabled [ 173.516657][ T7022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 173.562975][ T7022] System zones: 1-3, 19-19, 35-36 [ 173.576297][ T7022] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 173.639186][ T7022] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.917541][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'. [ 174.113474][ T7029] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 174.521518][ T7028] kAFS: unable to lookup cell '(,c¾ûL' [ 174.602808][ T6048] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.552327][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'. [ 176.677148][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'. [ 178.571718][ T7065] netlink: 'syz.4.246': attribute type 4 has an invalid length. [ 178.669131][ T7065] netlink: 152 bytes leftover after parsing attributes in process `syz.4.246'. [ 179.140984][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 179.166969][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.257'. [ 179.315842][ T7075] loop5: detected capacity change from 0 to 32768 [ 179.337957][ T7075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.256 (7075) [ 179.357804][ T7075] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.368030][ T7075] BTRFS info (device loop5): using sha256 checksum algorithm [ 179.452231][ T7075] BTRFS info (device loop5): enabling ssd optimizations [ 179.459229][ T7075] BTRFS info (device loop5): turning on async discard [ 179.465977][ T7075] BTRFS info (device loop5): enabling free space tree [ 179.586106][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.5.256'. [ 179.883805][ T7100] ubi: mtd0 is already attached to ubi31 [ 180.093908][ T6048] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.523504][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.260'. [ 181.774926][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 183.149537][ T7119] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 183.193926][ T7119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.265'. [ 184.122844][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'. [ 184.522537][ T7143] pimreg3: entered allmulticast mode [ 187.216068][ T7155] program syz.4.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.886949][ T7165] ubi: mtd0 is already attached to ubi31 [ 188.828045][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 189.143700][ T7185] netlink: 68 bytes leftover after parsing attributes in process `syz.4.276'. [ 190.791288][ T7192] program syz.1.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.414392][ T7205] loop2: detected capacity change from 0 to 32768 [ 192.461697][ T7205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.292 (7205) [ 192.524296][ T7205] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.554808][ T7205] BTRFS info (device loop2): using sha256 checksum algorithm [ 192.710607][ T7205] BTRFS info (device loop2): enabling ssd optimizations [ 192.736007][ T7205] BTRFS info (device loop2): turning on async discard [ 192.763699][ T7205] BTRFS info (device loop2): enabling free space tree [ 192.963096][ T7231] loop1: detected capacity change from 0 to 16 [ 193.017978][ T7231] erofs (device loop1): mounted with root inode @ nid 36. [ 194.182631][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.458261][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476540][ T5846] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.562811][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 195.176583][ T7247] netlink: 68 bytes leftover after parsing attributes in process `syz.2.296'. [ 196.195692][ T7258] ubi: mtd0 is already attached to ubi31 [ 196.375876][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.382794][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 196.389121][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 198.083797][ T7271] loop2: detected capacity change from 0 to 16 [ 198.403243][ T7271] erofs (device loop2): mounted with root inode @ nid 36. [ 199.551725][ T7280] netlink: 'syz.0.306': attribute type 2 has an invalid length. [ 199.559900][ T7280] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 199.569750][ T7280] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 199.602341][ T7281] netlink: 'syz.2.308': attribute type 2 has an invalid length. [ 199.611114][ T7281] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 199.638739][ T7279] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.649743][ T7279] block device autoloading is deprecated and will be removed. [ 199.659260][ T7282] loop0: detected capacity change from 0 to 128 [ 199.724482][ T7281] loop2: detected capacity change from 0 to 128 [ 200.053685][ T7280] kthread_run failed with err -4 [ 200.425627][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'. [ 200.492963][ T7292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.311'. [ 201.877427][ T7303] loop5: detected capacity change from 0 to 32768 [ 201.884432][ T7303] xfs: Deprecated parameter 'attr2' [ 201.889685][ T7303] XFS: attr2 mount option is deprecated. [ 201.937906][ T7303] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.013570][ T7303] XFS (loop5): Ending clean mount [ 202.025509][ T7303] XFS (loop5): Quotacheck needed: Please wait. [ 202.588498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 202.874285][ T29] audit: type=1804 audit(1775079838.692:8): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.315" name="/newroot/62/file0" dev="tmpfs" ino=352 res=1 errno=0 [ 202.982743][ T7303] XFS (loop5): Quotacheck: Done. [ 203.082746][ T7318] kAFS: unable to lookup cell '(,c¾ûL' [ 203.174370][ T6048] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.751612][ T7320] loop4: detected capacity change from 0 to 4096 [ 203.971838][ T7326] loop5: detected capacity change from 0 to 16 [ 203.998583][ T7326] erofs (device loop5): mounted with root inode @ nid 36. [ 204.275696][ T7320] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 205.808159][ T6011] ntfs3(loop4): ino=5, mi_enum_attr [ 206.358941][ T7347] netlink: 68 bytes leftover after parsing attributes in process `syz.4.322'. [ 206.660925][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 207.503715][ T7355] loop4: detected capacity change from 0 to 32768 [ 207.511578][ T7355] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.328 (7355) [ 207.525987][ T7355] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.536126][ T7355] BTRFS info (device loop4): using crc32c checksum algorithm [ 207.652601][ T7355] BTRFS info (device loop4): enabling ssd optimizations [ 207.659612][ T7355] BTRFS info (device loop4): turning on flush-on-commit [ 207.666531][ T7355] BTRFS info (device loop4): enabling free space tree [ 207.673355][ T7355] BTRFS info (device loop4): enabling auto defrag [ 207.679787][ T7355] BTRFS info (device loop4): use lzo compression, level 1 [ 207.686874][ T7355] BTRFS info (device loop4): max_inline set to 4096 [ 208.707465][ T5835] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.163246][ T7385] program syz.0.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.914102][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 211.379654][ T7397] loop1: detected capacity change from 0 to 16 [ 211.573938][ T7397] erofs (device loop1): mounted with root inode @ nid 36. [ 211.610064][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 212.384167][ T7399] netlink: 68 bytes leftover after parsing attributes in process `syz.1.338'. [ 213.359633][ T7381] loop2: detected capacity change from 0 to 40427 [ 213.394483][ T7381] F2FS-fs (loop2): Unable to read 1th superblock [ 213.467028][ T7381] F2FS-fs (loop2): invalid crc value [ 213.507502][ T7381] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 213.564856][ T7381] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 215.894549][ T7417] loop2: detected capacity change from 0 to 32768 [ 215.907985][ T7417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.341 (7417) [ 215.925685][ T7417] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.935837][ T7417] BTRFS info (device loop2): using crc32c checksum algorithm [ 216.468771][ T7428] program syz.4.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.201490][ T7417] BTRFS info (device loop2): enabling ssd optimizations [ 217.210284][ T7417] BTRFS info (device loop2): turning on flush-on-commit [ 217.217247][ T7417] BTRFS info (device loop2): enabling free space tree [ 217.224099][ T7417] BTRFS info (device loop2): enabling auto defrag [ 217.231458][ T7417] BTRFS info (device loop2): use lzo compression, level 1 [ 217.238643][ T7417] BTRFS info (device loop2): max_inline set to 4096 [ 217.391525][ T5846] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.560434][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 218.074362][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.347'. [ 218.423998][ T7445] loop2: detected capacity change from 0 to 16 [ 218.530335][ T7445] erofs (device loop2): mounted with root inode @ nid 36. [ 218.988806][ T7447] netlink: 'syz.5.344': attribute type 4 has an invalid length. [ 219.030169][ T7447] netlink: 152 bytes leftover after parsing attributes in process `syz.5.344'. [ 219.551038][ T7453] loop0: detected capacity change from 0 to 32768 [ 221.839070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 222.097195][ T7468] loop2: detected capacity change from 0 to 8 [ 222.125745][ T7468] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 222.232804][ T5849] udevd[5849]: incorrect cramfs checksum on /dev/loop2 [ 222.294375][ T5849] udevd[5849]: incorrect cramfs checksum on /dev/loop2 [ 222.333533][ T7468] cramfs: bad data blocksize 4294934200 [ 223.038485][ T7468] cramfs: bad data blocksize 4294934200 [ 223.069395][ T29] audit: type=1800 audit(1775079858.892:9): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.352" name="file1" dev="loop2" ino=33092 res=0 errno=0 [ 223.731723][ T7476] loop2: detected capacity change from 0 to 32768 [ 224.258358][ T7476] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.357 (7476) [ 224.273071][ T7476] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.283171][ T7476] BTRFS info (device loop2): using crc32c checksum algorithm [ 224.532909][ T7476] BTRFS info (device loop2): enabling ssd optimizations [ 224.540125][ T7476] BTRFS info (device loop2): turning on flush-on-commit [ 224.547086][ T7476] BTRFS info (device loop2): enabling free space tree [ 224.553924][ T7476] BTRFS info (device loop2): enabling auto defrag [ 224.561463][ T7476] BTRFS info (device loop2): use lzo compression, level 1 [ 224.568647][ T7476] BTRFS info (device loop2): max_inline set to 4096 [ 225.821705][ T5846] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.271461][ T7503] netlink: 'syz.4.361': attribute type 4 has an invalid length. [ 226.279339][ T7503] netlink: 152 bytes leftover after parsing attributes in process `syz.4.361'. [ 228.160770][ T7511] loop4: detected capacity change from 0 to 32768 [ 231.097200][ T7535] loop5: detected capacity change from 0 to 32768 [ 231.109000][ T7535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.370 (7535) [ 231.147130][ T7535] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.158214][ T7535] BTRFS info (device loop5): using crc32c checksum algorithm [ 231.324242][ T7535] BTRFS info (device loop5): enabling ssd optimizations [ 231.331373][ T7535] BTRFS info (device loop5): turning on flush-on-commit [ 231.338426][ T7535] BTRFS info (device loop5): enabling free space tree [ 231.345199][ T7535] BTRFS info (device loop5): enabling auto defrag [ 231.351689][ T7535] BTRFS info (device loop5): use lzo compression, level 1 [ 231.358848][ T7535] BTRFS info (device loop5): max_inline set to 4096 [ 231.370112][ T7551] ubi: mtd0 is already attached to ubi31 [ 231.640362][ T6048] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.213640][ T7569] netlink: 'syz.0.374': attribute type 4 has an invalid length. [ 234.221516][ T7569] netlink: 152 bytes leftover after parsing attributes in process `syz.0.374'. [ 234.684621][ T7575] loop4: detected capacity change from 0 to 16 [ 234.703120][ T7575] erofs (device loop4): mounted with root inode @ nid 36. [ 235.868471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 236.371204][ T7583] loop0: detected capacity change from 0 to 32768 [ 236.672545][ T7584] loop2: detected capacity change from 0 to 128 [ 237.016253][ T7584] EXT4-fs (loop2): Test dummy encryption mode enabled [ 237.065546][ T7584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 237.101593][ T7584] System zones: 1-3, 19-19, 35-36 [ 237.126598][ T7584] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 237.202719][ T7584] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.944907][ T7596] kAFS: unable to lookup cell '(,c¾ûL' [ 238.033987][ T5846] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.319136][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 241.028992][ T7627] ubi: mtd0 is already attached to ubi31 [ 241.251580][ T7629] netlink: 'syz.1.388': attribute type 4 has an invalid length. [ 241.259460][ T7629] netlink: 152 bytes leftover after parsing attributes in process `syz.1.388'. [ 243.423177][ T7642] loop2: detected capacity change from 0 to 32768 [ 247.992067][ T7670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.401'. [ 248.316112][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 248.491753][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.519931][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.547599][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.596901][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.620803][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.647296][ T24] usb 3-1: config 0 descriptor?? [ 249.083480][ T7683] loop4: detected capacity change from 0 to 16 [ 249.129893][ T7683] erofs (device loop4): mounted with root inode @ nid 36. [ 249.772174][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 249.874706][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 249.888431][ T24] usb 3-1: USB disconnect, device number 4 [ 250.985385][ T7692] ubi: mtd0 is already attached to ubi31 [ 251.242196][ T7694] loop4: detected capacity change from 0 to 128 [ 254.417055][ T7703] loop4: detected capacity change from 0 to 32768 [ 254.465650][ T7703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.410 (7703) [ 254.587705][ T7703] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.623348][ T7703] BTRFS info (device loop4): using sha256 checksum algorithm [ 254.795566][ T7703] BTRFS info (device loop4): enabling ssd optimizations [ 254.802902][ T7703] BTRFS info (device loop4): turning on async discard [ 254.810631][ T7703] BTRFS info (device loop4): enabling free space tree [ 254.856389][ T7703] BTRFS error (device loop4): target device is invalid! [ 254.938138][ T5835] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.282376][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 255.645821][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.657838][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.648373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 257.653108][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.668025][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.685665][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.706321][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.719991][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.736630][ T5920] usb 3-1: config 0 descriptor?? [ 258.113564][ T7767] loop4: detected capacity change from 0 to 2048 [ 258.137341][ T7767] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 258.166871][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 258.194879][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 258.212296][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 258.243290][ T5844] udevd[5844]: incorrect nilfs2 checksum on /dev/loop4 [ 258.265983][ T5920] usb 3-1: USB disconnect, device number 5 [ 258.278664][ T7772] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.418760][ T29] audit: type=1800 audit(1775079894.242:10): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.426" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 258.459883][ T7774] ubi: mtd0 is already attached to ubi31 [ 259.863355][ T7771] loop1: detected capacity change from 0 to 32768 [ 259.908006][ T7771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.427 (7771) [ 259.932703][ T7771] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.958402][ T7771] BTRFS info (device loop1): using sha256 checksum algorithm [ 260.289932][ T7771] BTRFS info (device loop1): enabling ssd optimizations [ 260.333566][ T7771] BTRFS info (device loop1): turning on async discard [ 260.472471][ T7771] BTRFS info (device loop1): enabling free space tree [ 260.916710][ T7771] BTRFS error (device loop1): target device is invalid! [ 261.105535][ T5836] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.920858][ T29] audit: type=1804 audit(1775079898.732:11): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.435" name="/newroot/83/file0" dev="tmpfs" ino=485 res=1 errno=0 [ 263.697482][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 263.703377][ T7833] ------------[ cut here ]------------ [ 263.712027][ T7833] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 263.732506][ T7833] WARNING: kernel/bpf/verifier.c:2850 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.5.439/7833 [ 263.743843][ T7833] Modules linked in: [ 263.747757][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.5.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.758713][ T7833] Tainted: [L]=SOFTLOCKUP [ 263.763026][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 263.773593][ T7833] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 263.780066][ T7833] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 263.799810][ T7833] RSP: 0018:ffffc90004756f30 EFLAGS: 00010246 [ 263.805920][ T7833] RAX: dffffc0000000000 RBX: 1ffff11006d3c404 RCX: 0000000000000000 [ 263.814511][ T7833] RDX: ffffffff8bd479e0 RSI: ffffffff8bd501c0 RDI: ffffffff9035b220 [ 263.823235][ T7833] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 263.831695][ T7833] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff8880369e2020 [ 263.839716][ T7833] R13: 0000000000000000 R14: 1ffff11006d3c403 R15: 0000000000000000 [ 263.847675][ T7833] FS: 00007f468d8556c0(0000) GS:ffff88812525c000(0000) knlGS:0000000000000000 [ 263.856637][ T7833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.863461][ T7833] CR2: 000000110c41a4c6 CR3: 000000007a8ce000 CR4: 00000000003526f0 [ 263.871510][ T7833] Call Trace: [ 263.874808][ T7833] [ 263.877788][ T7833] reg_set_min_max+0x28c/0x340 [ 263.882615][ T7833] check_cond_jmp_op+0x1db1/0x3270 [ 263.887729][ T7833] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 263.893217][ T7833] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 263.899321][ T7833] do_check+0x7938/0x105f0 [ 263.903768][ T7833] ? __pfx_do_check+0x10/0x10 [ 263.908484][ T7833] ? init_func_state+0x1ad5/0x2910 [ 263.913594][ T7833] do_check_common+0x1a21/0x2600 [ 263.918658][ T7833] bpf_check+0x23b2/0x1ccc0 [ 263.923172][ T7833] ? finish_task_switch+0x41f/0xbe0 [ 263.929208][ T7833] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.934409][ T7833] ? finish_task_switch+0x41f/0xbe0 [ 263.940123][ T7833] ? trace_sched_exit_tp+0x3a/0x130 [ 263.945337][ T7833] ? __pfx___schedule+0x10/0x10 [ 263.950242][ T7833] ? irqentry_exit+0x61a/0x700 [ 263.954997][ T7833] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.960226][ T7833] ? irqentry_exit+0x61a/0x700 [ 263.964981][ T7833] ? rcu_is_watching+0x15/0xb0 [ 263.969771][ T7833] ? __pfx_bpf_check+0x10/0x10 [ 263.974518][ T7833] ? ktime_get_with_offset+0x93/0x2d0 [ 263.979929][ T7833] ? seqcount_lockdep_reader_access+0xea/0x100 [ 263.986079][ T7833] ? __asan_memset+0x22/0x50 [ 263.990692][ T7833] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 263.995880][ T7833] ? security_bpf_prog_load+0x125/0x3c0 [ 264.001502][ T7833] bpf_prog_load+0x1484/0x1ae0 [ 264.006297][ T7833] ? __pfx_bpf_prog_load+0x10/0x10 [ 264.011530][ T7833] ? bpf_lsm_bpf+0x9/0x20 [ 264.015851][ T7833] ? security_bpf+0x7e/0x2d0 [ 264.020591][ T7833] __sys_bpf+0x618/0x950 [ 264.024829][ T7833] ? __pfx___sys_bpf+0x10/0x10 [ 264.030289][ T7833] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 264.036355][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.042913][ T7833] __x64_sys_bpf+0x7c/0x90 [ 264.047337][ T7833] do_syscall_64+0x15f/0xf80 [ 264.051970][ T7833] ? clear_bhb_loop+0x40/0x90 [ 264.056634][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.062563][ T7833] RIP: 0033:0x7f468c99c819 [ 264.066972][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.086665][ T7833] RSP: 002b:00007f468d855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.095341][ T7833] RAX: ffffffffffffffda RBX: 00007f468cc16180 RCX: 00007f468c99c819 [ 264.103363][ T7833] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 264.111357][ T7833] RBP: 00007f468ca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 264.119368][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.127324][ T7833] R13: 00007f468cc16218 R14: 00007f468cc16180 R15: 00007ffe04e504b8 [ 264.135993][ T7833] [ 264.139486][ T7833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.146755][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.5.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.157499][ T7833] Tainted: [L]=SOFTLOCKUP [ 264.161806][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.171847][ T7833] Call Trace: [ 264.175115][ T7833] [ 264.178029][ T7833] vpanic+0x56c/0xa60 [ 264.182006][ T7833] ? __pfx__printk+0x10/0x10 [ 264.186577][ T7833] ? __pfx_vpanic+0x10/0x10 [ 264.191066][ T7833] ? is_bpf_text_address+0x292/0x2b0 [ 264.196338][ T7833] ? is_bpf_text_address+0x26/0x2b0 [ 264.201524][ T7833] panic+0xc5/0xd0 [ 264.205263][ T7833] ? __pfx_panic+0x10/0x10 [ 264.209673][ T7833] __warn+0x315/0x4c0 [ 264.213641][ T7833] ? reg_bounds_sanity_check+0x201/0xc30 [ 264.219258][ T7833] ? reg_bounds_sanity_check+0x201/0xc30 [ 264.224898][ T7833] __report_bug+0x29a/0x540 [ 264.229390][ T7833] ? __pfx_stack_trace_save+0x10/0x10 [ 264.234748][ T7833] ? reg_bounds_sanity_check+0x201/0xc30 [ 264.240385][ T7833] ? __pfx___report_bug+0x10/0x10 [ 264.245399][ T7833] ? check_cond_jmp_op+0x1c51/0x3270 [ 264.250668][ T7833] ? do_check+0x7938/0x105f0 [ 264.255258][ T7833] ? do_check_common+0x1a21/0x2600 [ 264.260349][ T7833] ? bpf_check+0x23b2/0x1ccc0 [ 264.265004][ T7833] ? bpf_prog_load+0x1484/0x1ae0 [ 264.269921][ T7833] ? __sys_bpf+0x618/0x950 [ 264.274318][ T7833] ? __x64_sys_bpf+0x7c/0x90 [ 264.278887][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.284935][ T7833] report_bug_entry+0x19a/0x290 [ 264.289770][ T7833] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 264.295390][ T7833] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 264.301037][ T7833] handle_bug+0xce/0x200 [ 264.305272][ T7833] exc_invalid_op+0x1a/0x50 [ 264.309782][ T7833] asm_exc_invalid_op+0x1a/0x20 [ 264.314615][ T7833] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 264.320846][ T7833] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 264.340434][ T7833] RSP: 0018:ffffc90004756f30 EFLAGS: 00010246 [ 264.346489][ T7833] RAX: dffffc0000000000 RBX: 1ffff11006d3c404 RCX: 0000000000000000 [ 264.354440][ T7833] RDX: ffffffff8bd479e0 RSI: ffffffff8bd501c0 RDI: ffffffff9035b220 [ 264.362395][ T7833] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 264.370353][ T7833] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff8880369e2020 [ 264.378309][ T7833] R13: 0000000000000000 R14: 1ffff11006d3c403 R15: 0000000000000000 [ 264.386292][ T7833] reg_set_min_max+0x28c/0x340 [ 264.391051][ T7833] check_cond_jmp_op+0x1db1/0x3270 [ 264.396155][ T7833] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 264.401600][ T7833] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 264.407563][ T7833] do_check+0x7938/0x105f0 [ 264.411991][ T7833] ? __pfx_do_check+0x10/0x10 [ 264.416650][ T7833] ? init_func_state+0x1ad5/0x2910 [ 264.421745][ T7833] do_check_common+0x1a21/0x2600 [ 264.426669][ T7833] bpf_check+0x23b2/0x1ccc0 [ 264.431154][ T7833] ? finish_task_switch+0x41f/0xbe0 [ 264.436338][ T7833] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.441538][ T7833] ? finish_task_switch+0x41f/0xbe0 [ 264.446726][ T7833] ? trace_sched_exit_tp+0x3a/0x130 [ 264.451920][ T7833] ? __pfx___schedule+0x10/0x10 [ 264.456761][ T7833] ? irqentry_exit+0x61a/0x700 [ 264.461507][ T7833] ? lockdep_hardirqs_on+0x7a/0x110 [ 264.466710][ T7833] ? irqentry_exit+0x61a/0x700 [ 264.471458][ T7833] ? rcu_is_watching+0x15/0xb0 [ 264.476205][ T7833] ? __pfx_bpf_check+0x10/0x10 [ 264.480947][ T7833] ? ktime_get_with_offset+0x93/0x2d0 [ 264.486301][ T7833] ? seqcount_lockdep_reader_access+0xea/0x100 [ 264.492461][ T7833] ? __asan_memset+0x22/0x50 [ 264.497036][ T7833] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 264.502220][ T7833] ? security_bpf_prog_load+0x125/0x3c0 [ 264.507756][ T7833] bpf_prog_load+0x1484/0x1ae0 [ 264.512511][ T7833] ? __pfx_bpf_prog_load+0x10/0x10 [ 264.517617][ T7833] ? bpf_lsm_bpf+0x9/0x20 [ 264.521925][ T7833] ? security_bpf+0x7e/0x2d0 [ 264.526502][ T7833] __sys_bpf+0x618/0x950 [ 264.530728][ T7833] ? __pfx___sys_bpf+0x10/0x10 [ 264.535484][ T7833] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 264.541544][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.547600][ T7833] __x64_sys_bpf+0x7c/0x90 [ 264.551999][ T7833] do_syscall_64+0x15f/0xf80 [ 264.556579][ T7833] ? clear_bhb_loop+0x40/0x90 [ 264.561241][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.567119][ T7833] RIP: 0033:0x7f468c99c819 [ 264.571540][ T7833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.591132][ T7833] RSP: 002b:00007f468d855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.599537][ T7833] RAX: ffffffffffffffda RBX: 00007f468cc16180 RCX: 00007f468c99c819 [ 264.607490][ T7833] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 264.615445][ T7833] RBP: 00007f468ca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 264.623407][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.631363][ T7833] R13: 00007f468cc16218 R14: 00007f468cc16180 R15: 00007ffe04e504b8 [ 264.639328][ T7833] [ 264.642782][ T7833] Kernel Offset: disabled [ 264.647094][ T7833] Rebooting in 86400 seconds..