last executing test programs: 8.976919951s ago: executing program 0 (id=435): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000c000600000000c0000000000c0002000000000000000000040007800c000800000000000000000008000a00000000"], 0x90}}, 0x64000008) 8.007457838s ago: executing program 0 (id=438): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x168, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x130, 0x2, [@TCA_ROUTE4_ACT={0x12c, 0x6, [@m_bpf={0x128, 0xa, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x0, 0x1, 0x9}]}]}, {0xf1, 0x6, "8eb55930760aaf0b59772c5971036fba8994239acc2d66a896c98c740ca7d203000000000000002a326cef7c8ba136d0bce7d5be2f44c0f7df2af8b58cd15301925bdef87ac2e982db6d48439b06b9d7e9e88cb4d0262a5d0900461c33b2f76470602416519436d7f6f3d3dec1bf02a5ce6e83f8664d689fd77f1519cfac04b8ebd7ea20e82977ee8d8e46d44e8f8c8485af903929b1f3288322548d9e6a92389a03899eaaba97faeef8863180bc96804713e41b3d6d0032dc6414d0626a176725767c2a42131583a64bf3c2e43f64d02f9be090aa44978db670068ac547d4aa7dfb2219f8c926b7d6925ec910"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004}, 0x20008885) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.549102745s ago: executing program 0 (id=440): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 6.820556013s ago: executing program 1 (id=441): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000240)={{0x6, @rose, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="08000000010000", 0x7) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) 5.728154121s ago: executing program 1 (id=444): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @pic={0x1, 0xff, 0x8, 0x7f, 0xf, 0x4, 0x6, 0x6, 0x7b, 0x1, 0x2, 0x0, 0x0, 0x9, 0xc3, 0x3}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.573046643s ago: executing program 2 (id=446): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000240)={{0x6, @rose, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="08000000010000", 0x7) 4.558104915s ago: executing program 2 (id=447): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x40002002) 4.515261078s ago: executing program 3 (id=448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000600000000c0000000000c0002000000000000000000040007800c000800000000000000000008000a00000000"], 0x90}}, 0x64000008) 4.404278117s ago: executing program 1 (id=449): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) fanotify_init(0x0, 0x8000) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000340)=@profile={'stack ', 'sched_switch\x00'}, 0x13) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) 4.326496403s ago: executing program 2 (id=450): sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 4.325266043s ago: executing program 3 (id=451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 3.345226212s ago: executing program 1 (id=452): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000240)={{0x6, @rose, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="08000000010000", 0x7) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7082, &(0x7f00000003c0)={0x0, 0x8b9c, 0x8, 0x0, 0x2b8}, &(0x7f0000000100), &(0x7f0000000140)) 2.461375313s ago: executing program 1 (id=453): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1, 0x100, 0x7) 2.387820529s ago: executing program 3 (id=454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.345654352s ago: executing program 2 (id=455): socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.081150333s ago: executing program 3 (id=456): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x3, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3a, 0x4000, @fd_index=0x2, 0x8, 0x0, 0x0, 0x1, 0x1, {0x1}}) io_uring_enter(r1, 0x3517, 0x0, 0x0, 0x0, 0x0) 2.045767176s ago: executing program 2 (id=457): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.905907327s ago: executing program 0 (id=458): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x40002002) 1.878789479s ago: executing program 3 (id=459): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000240)={{0x6, @rose, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="08000000010000", 0x7) 1.74917144s ago: executing program 0 (id=460): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) fanotify_init(0x0, 0x8000) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000340)=@profile={'stack ', 'sched_switch\x00'}, 0x13) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) 131.696049ms ago: executing program 1 (id=461): syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000240)={{0x6, @rose, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="08000000010000", 0x7) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7082, &(0x7f00000003c0)={0x0, 0x8b9c, 0x8, 0x0, 0x2b8}, &(0x7f0000000100), &(0x7f0000000140)) 131.159049ms ago: executing program 2 (id=462): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000ac0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) bind$llc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) eventfd(0xffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 130.81719ms ago: executing program 3 (id=463): sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 0s ago: executing program 0 (id=464): openat(0xffffffffffffff9c, 0x0, 0x0, 0x72) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 57.891304][ T5768] cgroup: Unknown subsys name 'net' [ 58.082420][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.426205][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.925381][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.933481][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.943590][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.951394][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.959802][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.959940][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.968178][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.981514][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.982008][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.990438][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.002042][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.002664][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.010721][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.019095][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.025261][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.031976][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.040569][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.046425][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.051887][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.072090][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.079765][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.088067][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.096725][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.105135][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.547236][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 61.582776][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 61.624010][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 61.758932][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.768224][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.775654][ T5780] bridge_slave_0: entered allmulticast mode [ 61.782462][ T5780] bridge_slave_0: entered promiscuous mode [ 61.799639][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 61.815378][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.822546][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.830200][ T5780] bridge_slave_1: entered allmulticast mode [ 61.837138][ T5780] bridge_slave_1: entered promiscuous mode [ 61.900928][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.908915][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.916207][ T5779] bridge_slave_0: entered allmulticast mode [ 61.922885][ T5779] bridge_slave_0: entered promiscuous mode [ 61.946980][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.954109][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.961976][ T5778] bridge_slave_0: entered allmulticast mode [ 61.968851][ T5778] bridge_slave_0: entered promiscuous mode [ 61.977702][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.984985][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.992231][ T5778] bridge_slave_1: entered allmulticast mode [ 62.000152][ T5778] bridge_slave_1: entered promiscuous mode [ 62.015655][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.022837][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.030092][ T5779] bridge_slave_1: entered allmulticast mode [ 62.036966][ T5779] bridge_slave_1: entered promiscuous mode [ 62.061284][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.101062][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.112565][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.160085][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.196325][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.208538][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.242116][ T5780] team0: Port device team_slave_0 added [ 62.251487][ T5780] team0: Port device team_slave_1 added [ 62.279916][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.287260][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.294401][ T5781] bridge_slave_0: entered allmulticast mode [ 62.301439][ T5781] bridge_slave_0: entered promiscuous mode [ 62.311701][ T5778] team0: Port device team_slave_0 added [ 62.342439][ T5779] team0: Port device team_slave_0 added [ 62.348998][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.356379][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.363537][ T5781] bridge_slave_1: entered allmulticast mode [ 62.370439][ T5781] bridge_slave_1: entered promiscuous mode [ 62.379960][ T5778] team0: Port device team_slave_1 added [ 62.397282][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.404258][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.430962][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.445706][ T5779] team0: Port device team_slave_1 added [ 62.477487][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.484462][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.510782][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.532920][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.540118][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.566458][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.610072][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.617164][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.643625][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.665917][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.672961][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.705806][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.718880][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.725963][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.751996][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.767543][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.779967][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.865779][ T5781] team0: Port device team_slave_0 added [ 62.876836][ T5778] hsr_slave_0: entered promiscuous mode [ 62.886651][ T5778] hsr_slave_1: entered promiscuous mode [ 62.909058][ T5779] hsr_slave_0: entered promiscuous mode [ 62.917450][ T5779] hsr_slave_1: entered promiscuous mode [ 62.923606][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.932057][ T5779] Cannot create hsr debugfs directory [ 62.949480][ T5781] team0: Port device team_slave_1 added [ 62.979240][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.986296][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.012654][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.028938][ T5780] hsr_slave_0: entered promiscuous mode [ 63.035570][ T5780] hsr_slave_1: entered promiscuous mode [ 63.041643][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.049468][ T5780] Cannot create hsr debugfs directory [ 63.069153][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.076255][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.085711][ T5101] Bluetooth: hci3: command tx timeout [ 63.102699][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.155267][ T5101] Bluetooth: hci1: command tx timeout [ 63.155287][ T5786] Bluetooth: hci0: command tx timeout [ 63.155488][ T5786] Bluetooth: hci2: command tx timeout [ 63.262944][ T5781] hsr_slave_0: entered promiscuous mode [ 63.269668][ T5781] hsr_slave_1: entered promiscuous mode [ 63.277230][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.284964][ T5781] Cannot create hsr debugfs directory [ 63.553573][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.566501][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.586768][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.597499][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.664023][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.682140][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.692145][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.701514][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.796886][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.807053][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.823069][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.842885][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.916960][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.929468][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.945827][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.971278][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.024737][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.036561][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.080865][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.098767][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.128933][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.136285][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.148684][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.155832][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.199876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.207163][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.238040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.245193][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.322882][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.383492][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.403948][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.422683][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.429884][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.484287][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.491657][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.558723][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.583692][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.590865][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.627346][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.634510][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.747364][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.851608][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.863304][ T5779] veth0_vlan: entered promiscuous mode [ 64.904844][ T5779] veth1_vlan: entered promiscuous mode [ 64.991922][ T5780] veth0_vlan: entered promiscuous mode [ 65.006135][ T5779] veth0_macvtap: entered promiscuous mode [ 65.045528][ T5779] veth1_macvtap: entered promiscuous mode [ 65.082432][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.094213][ T5780] veth1_vlan: entered promiscuous mode [ 65.113232][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.141239][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.150568][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.159929][ T5786] Bluetooth: hci3: command tx timeout [ 65.166787][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175657][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.197075][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.235167][ T5786] Bluetooth: hci2: command tx timeout [ 65.235391][ T50] Bluetooth: hci1: command tx timeout [ 65.240588][ T5786] Bluetooth: hci0: command tx timeout [ 65.258171][ T5780] veth0_macvtap: entered promiscuous mode [ 65.269187][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.288510][ T5780] veth1_macvtap: entered promiscuous mode [ 65.361442][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.372753][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.386585][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.403681][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.417148][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.428991][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.459187][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.468378][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.480553][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.489469][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.510076][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.523433][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.561821][ T5781] veth0_vlan: entered promiscuous mode [ 65.580887][ T5778] veth0_vlan: entered promiscuous mode [ 65.592719][ T5781] veth1_vlan: entered promiscuous mode [ 65.615865][ T5778] veth1_vlan: entered promiscuous mode [ 65.623643][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.632747][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.712447][ T5781] veth0_macvtap: entered promiscuous mode [ 65.733078][ T5781] veth1_macvtap: entered promiscuous mode [ 65.753792][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.760525][ T5778] veth0_macvtap: entered promiscuous mode [ 65.775620][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.803079][ T5778] veth1_macvtap: entered promiscuous mode [ 65.833140][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.843928][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.854264][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.865082][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.877094][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.892758][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.903736][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.913893][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.924426][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.937269][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.962271][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.970156][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.970201][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.970210][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.970221][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.970232][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.970242][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.971697][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.022837][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.045604][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.057929][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.080565][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.092910][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.103523][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.114304][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.132081][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.154615][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.164451][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.177309][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.186545][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.216343][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.225371][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.234233][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.244141][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.370257][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.388033][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.574694][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.583671][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.598697][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.609630][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.650317][ T5873] Zero length message leads to an empty skb [ 66.661702][ T28] audit: type=1107 audit(1755429925.700:2): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 66.697143][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.706236][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.824280][ T5875] syz.3.4[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.868437][ T5875] loop3: detected capacity change from 0 to 16 [ 66.923941][ T5875] erofs: (device loop3): mounted with root inode @ nid 36. [ 67.235120][ T5786] Bluetooth: hci3: command tx timeout [ 67.317438][ T5101] Bluetooth: hci2: command tx timeout [ 67.317438][ T50] Bluetooth: hci1: command tx timeout [ 67.317528][ T5786] Bluetooth: hci0: command tx timeout [ 67.653858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.126937][ T5881] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 68.164950][ T5881] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 68.184931][ T5881] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 68.199895][ T5881] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 68.214331][ T5881] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 68.223650][ T5881] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 68.235088][ T5881] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 68.246799][ T5881] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 68.263534][ T5881] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 68.276685][ T5881] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 68.289376][ T5881] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 68.305166][ T5881] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 68.335600][ T28] audit: type=1800 audit(1755429927.360:3): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 68.645459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.751646][ T5890] loop2: detected capacity change from 0 to 1024 [ 68.764212][ T5890] ======================================================= [ 68.764212][ T5890] WARNING: The mand mount option has been deprecated and [ 68.764212][ T5890] and is ignored by this kernel. Remove the mand [ 68.764212][ T5890] option from the mount to silence this warning. [ 68.764212][ T5890] ======================================================= [ 68.914538][ T5890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.035962][ T5890] EXT4-fs error (device loop2): ext4_xattr_block_find:1886: inode #15: comm syz.2.9: corrupted xattr block 113: invalid header [ 69.316220][ T5786] Bluetooth: hci3: command tx timeout [ 69.395366][ T5786] Bluetooth: hci0: command tx timeout [ 69.395990][ T5101] Bluetooth: hci1: command tx timeout [ 69.400921][ T50] Bluetooth: hci2: command tx timeout [ 69.544614][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.590482][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.661364][ T5904] bridge0: port 3(syz_tun) entered blocking state [ 69.678872][ T5904] bridge0: port 3(syz_tun) entered disabled state [ 69.693615][ T5904] syz_tun: entered allmulticast mode [ 69.714289][ T5904] syz_tun: entered promiscuous mode [ 69.721579][ T5904] bridge0: port 3(syz_tun) entered blocking state [ 69.728465][ T5904] bridge0: port 3(syz_tun) entered forwarding state [ 69.966875][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 70.003081][ T5904] syz_tun: left allmulticast mode [ 70.023573][ T5904] syz_tun: left promiscuous mode [ 70.030439][ T5904] bridge0: port 3(syz_tun) entered disabled state [ 70.067935][ T5904] bridge_slave_0: left allmulticast mode [ 70.073629][ T5904] bridge_slave_0: left promiscuous mode [ 70.082530][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.096536][ T28] audit: type=1107 audit(1755429929.140:4): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 70.106257][ T5918] loop2: detected capacity change from 0 to 16 [ 70.131147][ T5918] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.140976][ T5904] bridge_slave_1: left allmulticast mode [ 70.166002][ T5904] bridge_slave_1: left promiscuous mode [ 70.172543][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.181684][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 70.199160][ T5918] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 70.210363][ T5918] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 70.221703][ T5918] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 70.230845][ T5918] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 70.241875][ T5918] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 70.250995][ T5918] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 70.262040][ T5918] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 70.271292][ T5918] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 70.282674][ T5918] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 70.291764][ T5918] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 70.302854][ T5918] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 70.313954][ T5918] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 70.316812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.323375][ T28] audit: type=1800 audit(1755429929.360:5): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 70.354376][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 70.371098][ T5904] bond0: (slave bond_slave_0): Releasing backup interface [ 70.374929][ T27] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 70.389368][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.405612][ T27] usb 1-1: Product: syz [ 70.409877][ T27] usb 1-1: Manufacturer: syz [ 70.417223][ T27] usb 1-1: SerialNumber: syz [ 70.423277][ T5904] bond0: (slave bond_slave_1): Releasing backup interface [ 70.439007][ T27] usb 1-1: config 0 descriptor?? [ 70.459239][ T5903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.519828][ T5903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.545843][ T27] usb 1-1: ucan: probing device on interface #0 [ 70.553906][ T27] usb 1-1: ucan: invalid EP count (1) [ 70.566739][ T27] usb 1-1: ucan: probe failed; try to update the device firmware [ 70.572852][ T5904] team0: Port device team_slave_0 removed [ 70.615093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.625161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 70.633450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 70.733540][ T5926] QAT: failed to copy from user. [ 70.746464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.757361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 70.766866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.775666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.175505][ T5904] team0: Port device team_slave_1 removed [ 71.378246][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.386922][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.396806][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.404401][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.434413][ T5929] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 71.459009][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18'. [ 71.465162][ T5904] syz.1.11 (5904) used greatest stack depth: 20392 bytes left [ 71.476858][ T5929] team0: entered promiscuous mode [ 71.482152][ T5929] team_slave_0: entered promiscuous mode [ 71.488754][ T5929] team_slave_1: entered promiscuous mode [ 71.494603][ T5929] team0: entered allmulticast mode [ 71.500144][ T5929] team_slave_0: entered allmulticast mode [ 71.506779][ T5929] team_slave_1: entered allmulticast mode [ 71.513355][ T5929] bridge0: port 3(team0) entered blocking state [ 71.520030][ T5929] bridge0: port 3(team0) entered disabled state [ 71.529612][ T5929] bridge0: port 3(team0) entered blocking state [ 71.536032][ T5929] bridge0: port 3(team0) entered forwarding state [ 71.653572][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.666422][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.676360][ T5929] loop3: detected capacity change from 0 to 512 [ 72.141635][ T5929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.212536][ T5929] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.426823][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.578286][ T5946] loop3: detected capacity change from 0 to 64 [ 72.781667][ T5941] loop1: detected capacity change from 0 to 32768 [ 72.813853][ T5863] usb 1-1: USB disconnect, device number 2 [ 72.830973][ T5941] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.20 (5941) [ 72.916348][ T5941] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 72.943059][ T5941] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 72.974975][ T5941] BTRFS info (device loop1): enabling disk space caching [ 72.992823][ T5941] BTRFS info (device loop1): force clearing of disk cache [ 73.038314][ T5941] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 73.123578][ T5941] BTRFS info (device loop1): use zstd compression, level 3 [ 73.136759][ T5941] BTRFS info (device loop1): disk space caching is enabled [ 73.147073][ T5955] loop0: detected capacity change from 0 to 16 [ 73.181344][ T5944] loop2: detected capacity change from 0 to 32768 [ 73.193224][ T5955] erofs: (device loop0): mounted with root inode @ nid 36. [ 73.293396][ T5944] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.306859][ T5955] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 73.318042][ T5955] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 73.329255][ T5955] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 73.338399][ T5955] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 73.349618][ T5955] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 73.358670][ T5955] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 73.369763][ T5955] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 73.378835][ T5955] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 73.390364][ T5955] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 73.400113][ T5955] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 73.411203][ T5955] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 73.422260][ T5955] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 73.440470][ T28] audit: type=1800 audit(1755429932.470:6): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 73.495018][ T5941] BTRFS info (device loop1): enabling ssd optimizations [ 73.508642][ T5941] BTRFS info (device loop1): auto enabling async discard [ 73.556212][ T5941] BTRFS info (device loop1): rebuilding free space tree [ 73.626331][ T5941] BTRFS info (device loop1): disabling free space tree [ 73.642318][ T5941] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.653446][ T5941] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.677716][ T5944] XFS (loop2): Ending clean mount [ 74.186656][ T5986] ptrace attach of "./syz-executor exec"[5780] was attempted by ""[5986] [ 74.730690][ T28] audit: type=1107 audit(1755429933.760:7): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 75.223374][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 75.262587][ T28] audit: type=1804 audit(1755429934.290:8): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.20" name="/newroot/3/file1/file0/bus" dev="loop1" ino=268 res=1 errno=0 [ 76.163024][ T5996] sctp: failed to load transform for md5: -4 [ 77.102339][ T6007] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 77.232244][ T5779] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 77.261031][ T6014] QAT: failed to copy from user. [ 77.709964][ T6015] sctp: [Deprecated]: syz.0.33 (pid 6015) Use of int in maxseg socket option. [ 77.709964][ T6015] Use struct sctp_assoc_value instead [ 78.903800][ T6020] loop2: detected capacity change from 0 to 16 [ 78.936610][ T6020] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.986520][ T6020] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 78.997658][ T6020] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 79.008817][ T6020] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 79.017907][ T6020] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 79.029223][ T6020] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 79.038312][ T6020] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 79.049455][ T6020] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 79.058499][ T6020] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 79.069555][ T6020] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 79.078848][ T6020] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 79.089932][ T6020] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 79.100970][ T6020] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 79.109862][ T28] audit: type=1800 audit(1755429938.150:9): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.35" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 79.725239][ T28] audit: type=1107 audit(1755429938.580:10): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 80.463014][ T6033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.737164][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.125041][ T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.280187][ T6056] loop2: detected capacity change from 0 to 2048 [ 81.329085][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 81.349620][ T55] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 81.369140][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.418399][ T55] usb 4-1: Product: syz [ 81.419448][ T6057] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.422590][ T55] usb 4-1: Manufacturer: syz [ 81.422606][ T55] usb 4-1: SerialNumber: syz [ 81.508691][ T55] r8152-cfgselector 4-1: config 0 descriptor?? [ 81.819832][ T6060] loop0: detected capacity change from 0 to 16 [ 81.986299][ T55] r8152-cfgselector 4-1: Unknown version 0x0000 [ 82.032252][ T6060] erofs: (device loop0): mounted with root inode @ nid 36. [ 82.032992][ T786] cfg80211: failed to load regulatory.db [ 82.045136][ T55] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 82.696191][ T6060] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 82.707728][ T6060] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 82.718848][ T6060] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 82.727947][ T6060] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 82.739108][ T6060] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 82.748154][ T6060] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 82.759237][ T6060] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 82.768365][ T6060] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 82.779526][ T6060] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 82.788600][ T6060] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 82.799719][ T6060] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 82.811108][ T6060] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 82.821091][ T28] audit: type=1800 audit(1755429941.860:11): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 84.192741][ T6079] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.220449][ T6094] loop0: detected capacity change from 0 to 40427 [ 86.241772][ T6094] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50010) [ 86.254064][ T6094] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.270653][ T6094] F2FS-fs (loop0): invalid crc value [ 86.289952][ T6094] F2FS-fs (loop0): invalid journal entries nats 0 sits 16390 [ 86.312567][ T6094] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-22) [ 86.449430][ T6096] loop2: detected capacity change from 0 to 40427 [ 86.464145][ T6096] F2FS-fs (loop2): invalid crc value [ 86.510829][ T6096] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.701735][ T6096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 87.748967][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 87.759271][ T6107] ceph: No mds server is up or the cluster is laggy [ 87.776634][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 88.781107][ T6118] loop0: detected capacity change from 0 to 8 [ 88.798125][ T6120] loop2: detected capacity change from 0 to 16 [ 88.852694][ T6122] loop3: detected capacity change from 0 to 64 [ 88.874248][ T6120] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.923784][ T6120] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 88.935209][ T6120] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 88.946264][ T6120] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 88.955568][ T6120] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 88.966627][ T6120] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 88.975694][ T6120] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 88.986730][ T6120] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 88.995803][ T6120] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 89.006845][ T6120] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 89.015972][ T6120] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 89.027021][ T6120] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 89.038099][ T6120] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 89.046943][ T28] audit: type=1800 audit(1755429948.090:12): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.57" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 89.116069][ T6118] SQUASHFS error: Unable to read directory block [631:26] [ 89.120437][ T6122] MINIX-fs: deleted inode referenced: 1 [ 89.136853][ T6122] MINIX-fs: get root inode failed [ 89.360694][ T6129] loop0: detected capacity change from 0 to 1764 [ 89.465171][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.665994][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 89.706684][ T27] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 89.728064][ T27] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 89.752201][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.768671][ T27] usb 4-1: Product: syz [ 89.783799][ T27] usb 4-1: Manufacturer: syz [ 89.802309][ T27] usb 4-1: SerialNumber: syz [ 89.822988][ T27] usb 4-1: config 0 descriptor?? [ 89.858140][ T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 89.879540][ T27] usb 4-1: setting power ON [ 89.884634][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 89.922645][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.942588][ T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 89.964115][ T27] usb 4-1: media controller created [ 90.016732][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.066953][ T27] usb 4-1: selecting invalid altsetting 6 [ 90.077500][ T27] usb 4-1: digital interface selection failed (-22) [ 90.086870][ T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 90.131095][ T6126] loop2: detected capacity change from 0 to 32768 [ 90.140106][ T27] usb 4-1: setting power OFF [ 90.149795][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 90.161503][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 90.172913][ T27] (NULL device *): no alternate interface [ 90.406705][ T6126] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.454173][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 90.514193][ T27] usb 4-1: USB disconnect, device number 3 [ 90.536096][ T6126] XFS (loop2): Ending clean mount [ 90.588078][ T6126] XFS (loop2): Quotacheck needed: Please wait. [ 90.825422][ T6126] XFS (loop2): Quotacheck: Done. [ 93.183433][ T6170] loop3: detected capacity change from 0 to 16 [ 93.212288][ T6170] erofs: (device loop3): mounted with root inode @ nid 36. [ 93.296524][ T6170] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 93.307727][ T6170] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 93.318797][ T6170] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 93.328165][ T6170] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 93.339244][ T6170] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 93.348579][ T6170] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 93.360026][ T6170] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 93.369118][ T6170] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 93.380169][ T6170] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 93.389238][ T6170] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 93.402161][ T6170] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 93.413231][ T6170] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 93.430669][ T28] audit: type=1800 audit(1755429952.460:13): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.73" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 93.779757][ T6177] loop1: detected capacity change from 0 to 8 [ 93.825171][ T6177] SQUASHFS error: Unable to read directory block [631:26] [ 93.837118][ T6179] loop0: detected capacity change from 0 to 16 [ 93.880859][ T6179] erofs: (device loop0): mounted with root inode @ nid 36. [ 94.045904][ T6180] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 94.068161][ T6180] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 94.096459][ T6180] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 94.107810][ T6180] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 94.124340][ T6180] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 94.143022][ T6180] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 94.154800][ T6180] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 94.180800][ T6180] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 94.195552][ T6180] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 94.205440][ T6180] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 94.227027][ T6180] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 94.238835][ T6180] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 94.447987][ T28] audit: type=1800 audit(1755429953.300:14): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.84" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 94.635698][ T6182] 8021q: VLANs not supported on caif0 [ 94.868309][ T6175] loop3: detected capacity change from 0 to 32768 [ 94.885886][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 95.111799][ T6175] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.255783][ T6175] XFS (loop3): Ending clean mount [ 95.751161][ T6200] ptrace attach of "./syz-executor exec"[5781] was attempted by ""[6200] [ 96.336122][ T5781] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.802504][ T6182] loop1: detected capacity change from 0 to 32768 [ 97.065515][ T6182] JBD2: Ignoring recovery information on journal [ 97.558346][ T6211] loop2: detected capacity change from 0 to 32768 [ 97.578114][ T6182] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 98.307328][ T6217] bridge0: port 4(syz_tun) entered blocking state [ 98.314096][ T6217] bridge0: port 4(syz_tun) entered disabled state [ 98.321935][ T6217] syz_tun: entered allmulticast mode [ 98.330179][ T6217] syz_tun: entered promiscuous mode [ 98.375981][ T6217] bridge0: port 4(syz_tun) entered blocking state [ 98.383126][ T6217] bridge0: port 4(syz_tun) entered forwarding state [ 98.399882][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 98.450149][ T6222] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET) [ 98.990032][ T6229] loop3: detected capacity change from 0 to 16 [ 99.013895][ T6231] loop1: detected capacity change from 0 to 64 [ 99.020512][ T6229] erofs: (device loop3): mounted with root inode @ nid 36. [ 99.043406][ T6231] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 99.223854][ T6232] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 99.243275][ T6232] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 99.257793][ T6232] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 99.271540][ T6232] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 99.291947][ T6232] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 99.312546][ T6232] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 99.324853][ T6232] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 99.334058][ T6232] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 99.349213][ T6232] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 99.359776][ T6232] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 99.372748][ T6232] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 99.384612][ T6232] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 99.605451][ T28] audit: type=1800 audit(1755429958.440:15): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.88" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 100.069655][ T6223] block nbd2: shutting down sockets [ 100.116400][ T6238] loop1: detected capacity change from 0 to 1024 [ 100.316368][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.158748][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.392569][ T6249] loop1: detected capacity change from 0 to 256 [ 102.719550][ T6246] loop0: detected capacity change from 0 to 32768 [ 102.797280][ T6246] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.92 (6246) [ 102.841065][ T6246] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.892059][ T6246] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 102.910151][ T6246] BTRFS info (device loop0): enabling auto defrag [ 102.951525][ T6246] BTRFS info (device loop0): ignoring bad roots [ 102.978224][ T6246] BTRFS info (device loop0): force zlib compression, level 3 [ 103.014876][ T6246] BTRFS info (device loop0): turning on async discard [ 103.021787][ T6246] BTRFS info (device loop0): enabling ssd optimizations [ 103.061167][ T6246] BTRFS info (device loop0): using spread ssd allocation scheme [ 103.083493][ T6246] BTRFS info (device loop0): using free space tree [ 103.226478][ T6252] loop2: detected capacity change from 0 to 32768 [ 103.235043][ T6282] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 103.281434][ T6284] loop1: detected capacity change from 0 to 16 [ 103.305352][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 103.349203][ T6246] BTRFS error (device loop0): failed to load root extent [ 103.357205][ T6286] QAT: failed to copy from user. [ 103.362987][ T6284] erofs: (device loop1): mounted with root inode @ nid 36. [ 103.374558][ T1124] BTRFS warning (device loop0): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 103.532570][ T6287] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 103.545238][ T6287] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 103.557139][ T6287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 103.566507][ T6287] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 103.577883][ T6287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 103.587577][ T6287] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 103.601576][ T6287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 103.611456][ T6287] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 103.623176][ T6287] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 103.633344][ T6287] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 103.645035][ T6287] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 103.656487][ T6287] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 103.669229][ T28] audit: type=1800 audit(1755429962.710:16): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.99" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 103.953477][ T6246] BTRFS error (device loop0): failed to load root free space [ 104.065153][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 104.182127][ T3427] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 104.205061][ T6291] syz_tun: left allmulticast mode [ 104.205084][ T6291] syz_tun: left promiscuous mode [ 104.205279][ T6291] bridge0: port 4(syz_tun) entered disabled state [ 104.254665][ T6291] bridge0: port 3(team0) entered disabled state [ 104.304684][ T6291] bridge_slave_0: left allmulticast mode [ 104.325937][ T6291] bridge_slave_0: left promiscuous mode [ 104.331726][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.424691][ T6246] BTRFS error (device loop0): open_ctree failed: -4 [ 104.492110][ T6291] bridge_slave_1: left allmulticast mode [ 104.647553][ T6291] bridge_slave_1: left promiscuous mode [ 105.705510][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.795408][ T6291] bond0: (slave bond_slave_0): Releasing backup interface [ 105.859496][ T6291] bond0: (slave bond_slave_1): Releasing backup interface [ 105.911003][ T6291] team_slave_0: left promiscuous mode [ 106.034325][ T6291] team_slave_0: left allmulticast mode [ 106.164114][ T6291] team0: Port device team_slave_0 removed [ 106.190390][ T6291] team_slave_1: left promiscuous mode [ 106.199634][ T6291] team_slave_1: left allmulticast mode [ 106.241023][ T6291] team0: Port device team_slave_1 removed [ 106.248813][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.261023][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.309707][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.344704][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.608390][ T6322] QAT: failed to copy from user. [ 107.812067][ T6334] loop3: detected capacity change from 0 to 256 [ 109.034875][ T6355] QAT: failed to copy from user. [ 110.073709][ T6361] loop0: detected capacity change from 0 to 256 [ 110.111929][ T6336] loop3: detected capacity change from 0 to 32768 [ 110.160192][ T6336] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.113 (6336) [ 110.245997][ T6336] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 110.285201][ T6336] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 110.315724][ T6336] BTRFS info (device loop3): enabling auto defrag [ 110.322943][ T6336] BTRFS info (device loop3): ignoring bad roots [ 110.346725][ T6336] BTRFS info (device loop3): force zlib compression, level 3 [ 110.380199][ T6336] BTRFS info (device loop3): turning on async discard [ 110.400722][ T6336] BTRFS info (device loop3): enabling ssd optimizations [ 110.450036][ T6336] BTRFS info (device loop3): using spread ssd allocation scheme [ 110.509200][ T6336] BTRFS info (device loop3): using free space tree [ 110.646541][ T3427] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 110.740004][ T6336] BTRFS error (device loop3): failed to load root extent [ 110.778845][ T3427] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 110.919737][ T6336] BTRFS error (device loop3): failed to load root free space [ 110.937330][ T1124] BTRFS warning (device loop3): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 111.075281][ T5880] BTRFS warning (device loop3): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 111.277150][ T6336] BTRFS error (device loop3): open_ctree failed: -4 [ 111.482185][ T6399] overlayfs: failed to resolve './file0/file0': -40 [ 111.908289][ T6402] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 112.000762][ T6404] QAT: failed to copy from user. [ 112.683365][ T6406] loop3: detected capacity change from 0 to 8 [ 112.696388][ T6408] loop0: detected capacity change from 0 to 512 [ 112.703579][ T6408] EXT4-fs: Ignoring removed nobh option [ 112.775413][ T6408] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.134: iget: bad i_size value: 38620345925642 [ 112.945022][ T6408] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.134: couldn't read orphan inode 15 (err -117) [ 112.994421][ T6408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.034226][ T6412] loop1: detected capacity change from 0 to 1764 [ 114.090354][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.166052][ T6437] loop1: detected capacity change from 0 to 8 [ 116.452759][ T6441] QAT: failed to copy from user. [ 117.660487][ T6443] bridge0: port 3(syz_tun) entered blocking state [ 117.667311][ T6443] bridge0: port 3(syz_tun) entered disabled state [ 117.674112][ T6443] syz_tun: entered allmulticast mode [ 117.681490][ T6443] syz_tun: entered promiscuous mode [ 117.687651][ T6443] bridge0: port 3(syz_tun) entered blocking state [ 117.694341][ T6443] bridge0: port 3(syz_tun) entered forwarding state [ 117.731832][ T6446] loop1: detected capacity change from 0 to 8 [ 117.780631][ T6449] 8021q: VLANs not supported on caif0 [ 118.598919][ T6464] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 120.023247][ T6450] loop2: detected capacity change from 0 to 32768 [ 120.400950][ T6476] QAT: failed to copy from user. [ 121.039316][ T6450] JBD2: Ignoring recovery information on journal [ 121.319413][ T6450] JBD2: journal reset failed [ 122.448358][ T6450] (syz.2.146,6450,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 122.534921][ T6450] (syz.2.146,6450,0):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 123.300688][ T28] audit: type=1107 audit(1755429982.340:17): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 123.521698][ T6501] bridge0: port 3(syz_tun) entered blocking state [ 123.644097][ T6501] bridge0: port 3(syz_tun) entered disabled state [ 123.707562][ T6501] syz_tun: entered allmulticast mode [ 123.789648][ T6501] syz_tun: entered promiscuous mode [ 123.810958][ T6501] bridge0: port 3(syz_tun) entered blocking state [ 123.817610][ T6501] bridge0: port 3(syz_tun) entered forwarding state [ 124.874356][ T6504] loop1: detected capacity change from 0 to 32768 [ 124.912891][ T6504] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.973124][ T5863] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 125.061586][ T5863] XFS (loop1): Unmount and run xfs_repair [ 125.077793][ T5863] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 125.098072][ T5863] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 125.193900][ T5863] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 125.225037][ T5863] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 125.244336][ T5863] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 125.263111][ T5863] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 125.308801][ T5863] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 125.341495][ T5863] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 125.413588][ T5863] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 125.450520][ T6527] QAT: failed to copy from user. [ 125.532232][ T6504] XFS (loop1): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 125.599616][ T6504] XFS (loop1): Error -117 reserving per-AG metadata reserve pool. [ 125.710749][ T6504] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592). Shutting down filesystem. [ 126.239969][ T6504] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 126.258370][ T6504] XFS (loop1): Ending clean mount [ 126.265288][ T6504] XFS (loop1): Error -5 reserving per-AG metadata reserve pool. [ 126.801344][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'. [ 126.938878][ T6533] loop3: detected capacity change from 0 to 16 [ 127.086564][ T6533] erofs: (device loop3): erofs_read_inode: unsupported i_format 31 of nid 36 [ 127.411294][ T6541] bridge0: port 1(syz_tun) entered blocking state [ 127.418949][ T6541] bridge0: port 1(syz_tun) entered disabled state [ 127.435265][ T6541] syz_tun: entered allmulticast mode [ 127.463236][ T6541] syz_tun: entered promiscuous mode [ 127.493256][ T6541] bridge0: port 1(syz_tun) entered blocking state [ 127.499944][ T6541] bridge0: port 1(syz_tun) entered forwarding state [ 129.719328][ T28] audit: type=1400 audit(1755429988.760:18): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6539 comm="syz.0.170" [ 130.039076][ T28] audit: type=1107 audit(1755429989.080:19): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 130.187945][ T6565] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 130.329958][ T6567] QAT: failed to copy from user. [ 132.035266][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.717857][ T6587] 8021q: VLANs not supported on caif0 [ 132.755209][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.764707][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.790953][ T27] usb 1-1: config 0 descriptor?? [ 132.817428][ T27] cp210x 1-1:0.0: cp210x converter detected [ 133.017509][ T27] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 133.025499][ T27] cp210x 1-1:0.0: querying part number failed [ 133.079395][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.085815][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096401][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 134.353969][ T6596] loop3: detected capacity change from 0 to 128 [ 134.638520][ T55] usb 1-1: USB disconnect, device number 3 [ 134.669541][ T55] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 134.694348][ T55] cp210x 1-1:0.0: device disconnected [ 134.832517][ T28] audit: type=1400 audit(1755429993.870:20): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6590 comm="syz.1.184" [ 135.212051][ T6604] QAT: failed to copy from user. [ 135.643418][ T28] audit: type=1107 audit(1755429994.450:21): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 136.807896][ T6620] 8021q: VLANs not supported on caif0 [ 137.570024][ T6624] loop0: detected capacity change from 0 to 32768 [ 137.582512][ T6624] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.194 (6624) [ 137.648612][ T6624] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 137.665567][ T6624] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 137.684058][ T6624] BTRFS info (device loop0): using free space tree [ 138.465025][ T6624] BTRFS info (device loop0): enabling ssd optimizations [ 138.472185][ T6624] BTRFS info (device loop0): auto enabling async discard [ 139.586297][ T6655] loop2: detected capacity change from 0 to 16 [ 139.602601][ T6655] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 139.904490][ T5778] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 140.415228][ T28] audit: type=1107 audit(1755429999.290:22): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 140.461588][ T6663] QAT: failed to copy from user. [ 141.032916][ T6655] erofs: DAX unsupported by block device. Turning off DAX. [ 141.050857][ T6655] erofs: (device loop2): mounted with root inode @ nid 36. [ 142.375773][ T28] audit: type=1400 audit(1755430001.410:23): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6668 comm="syz.0.200" [ 143.308804][ T6678] loop1: detected capacity change from 0 to 256 [ 145.577719][ T6696] QAT: failed to copy from user. [ 147.133792][ T28] audit: type=1400 audit(1755430006.170:24): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6701 comm="syz.3.211" [ 147.317541][ T6711] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 147.327125][ T6711] ref_ctr increment failed for inode: 0x158 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801786df00 [ 147.928696][ T6713] loop1: detected capacity change from 0 to 256 [ 149.167218][ T28] audit: type=1107 audit(1755430008.210:25): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 151.132927][ T6728] loop1: detected capacity change from 0 to 64 [ 152.520699][ T6732] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.889066][ T5779] hfs: walked past end of dir [ 153.137730][ T6740] QAT: failed to copy from user. [ 154.054653][ T6745] loop0: detected capacity change from 0 to 16 [ 154.076310][ T6745] erofs: (device loop0): mounted with root inode @ nid 36. [ 154.237033][ T6748] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 154.294210][ T6748] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 154.328028][ T6748] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 154.427856][ T6748] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 154.464158][ T6748] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 154.474179][ T6748] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 154.506753][ T6748] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 154.543188][ T6748] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 154.592465][ T6748] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 154.745915][ T6748] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 154.762299][ T6748] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 154.788411][ T6748] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 154.804978][ T28] audit: type=1800 audit(1755430013.850:26): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.222" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 156.482390][ T6767] libceph: resolve '4..' (ret=-3): failed [ 156.719724][ T6774] QAT: failed to copy from user. [ 157.874490][ T28] audit: type=1400 audit(1755430016.910:27): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6775 comm="syz.2.231" [ 158.884009][ T6808] loop1: detected capacity change from 0 to 512 [ 158.918513][ T6808] ext3: Unknown parameter 'permit_directio' [ 158.991831][ T6064] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.911787][ T6808] loop1: detected capacity change from 0 to 131072 [ 159.956704][ T6808] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 159.965125][ T6808] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 159.983571][ T6808] F2FS-fs (loop1): invalid crc value [ 160.024930][ T6808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.147777][ T6808] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 160.154946][ T6808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 160.387088][ T6829] netlink: zone id is out of range [ 160.812918][ T6832] QAT: failed to copy from user. [ 162.148050][ T6839] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 162.441809][ T6839] team0: Port device team_slave_0 removed [ 162.449831][ T6839] syz.2.243 (6839) used greatest stack depth: 19856 bytes left [ 163.317869][ T28] audit: type=1400 audit(1755430021.790:28): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6840 comm="syz.0.244" [ 163.567592][ T6848] loop0: detected capacity change from 0 to 16 [ 163.610012][ T6848] erofs: (device loop0): mounted with root inode @ nid 36. [ 163.796285][ T6849] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 163.808280][ T6849] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 163.820337][ T6849] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 163.830261][ T6849] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 163.842209][ T6849] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 163.851521][ T6849] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 163.863184][ T6849] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 163.874086][ T6849] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 163.885382][ T6849] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 163.894648][ T6849] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 163.906941][ T6849] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 163.919150][ T6849] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 164.259595][ T28] audit: type=1800 audit(1755430023.010:29): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.246" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 166.506603][ T6871] QAT: failed to copy from user. [ 167.440206][ T6873] loop3: detected capacity change from 0 to 2048 [ 167.479955][ T6873] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 167.527268][ T6878] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.381215][ T6885] loop1: detected capacity change from 0 to 4096 [ 170.240648][ T28] audit: type=1400 audit(1755430029.200:30): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6895 comm="syz.2.260" [ 170.480905][ T6905] loop3: detected capacity change from 0 to 512 [ 170.796571][ T6905] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 170.859865][ T6905] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 170.886851][ T6905] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.258: Failed to acquire dquot type 1 [ 170.962608][ T6905] EXT4-fs (loop3): 1 truncate cleaned up [ 170.995699][ T6917] QAT: failed to copy from user. [ 171.713247][ T6905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.726612][ T6905] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.863043][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.448719][ T6946] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 175.819894][ T28] audit: type=1400 audit(1755430034.860:31): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6951 comm="syz.2.271" [ 176.393045][ T6957] loop0: detected capacity change from 0 to 512 [ 176.514285][ T6957] Quota error (device loop0): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 176.549815][ T6957] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 176.570350][ T6957] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.273: Failed to acquire dquot type 1 [ 176.591054][ T6957] EXT4-fs (loop0): 1 truncate cleaned up [ 176.603693][ T6957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.620471][ T6964] QAT: failed to copy from user. [ 176.630871][ T6957] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.921781][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.233373][ T6958] loop3: detected capacity change from 0 to 32768 [ 178.956581][ T6958] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop3": -EINTR [ 179.112192][ T6985] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 179.130428][ T6985] ref_ctr increment failed for inode: 0x195 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807f20df00 [ 182.793936][ T28] audit: type=1400 audit(1755430041.820:32): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=6991 comm="syz.2.283" [ 183.153774][ T7000] loop2: detected capacity change from 0 to 256 [ 183.205385][ T7000] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 183.792371][ T7006] QAT: failed to copy from user. [ 183.924246][ T6997] loop0: detected capacity change from 0 to 40427 [ 183.939318][ T6997] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 183.957010][ T6997] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 184.011832][ T6997] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.187162][ T7012] netlink: 76 bytes leftover after parsing attributes in process `syz.2.290'. [ 184.586665][ T6997] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 184.594954][ T6997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 184.934319][ T28] audit: type=1107 audit(1755430043.950:33): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 186.611670][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 186.617965][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 186.624086][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 188.115532][ T28] audit: type=1400 audit(1755430047.140:34): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7032 comm="syz.1.295" [ 188.379018][ T28] audit: type=1800 audit(1755430047.250:35): pid=7022 uid=60929 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.284" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 188.400962][ T28] audit: type=1800 audit(1755430047.390:36): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.284" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 188.769519][ T7048] Bluetooth: MGMT ver 1.22 [ 189.547996][ T7053] loop3: detected capacity change from 0 to 16 [ 189.567265][ T7053] erofs: (device loop3): mounted with root inode @ nid 36. [ 189.863442][ T7054] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 189.877759][ T7054] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 189.889114][ T7054] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 189.898538][ T7054] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 189.910351][ T7054] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 189.924685][ T7054] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 189.936218][ T7054] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 189.945502][ T7054] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 189.956821][ T7054] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 189.966256][ T7054] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 189.977578][ T7054] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 189.989046][ T7054] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 190.113445][ T28] audit: type=1800 audit(1755430049.050:37): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.301" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 190.447442][ T7049] loop2: detected capacity change from 0 to 32768 [ 190.496460][ T7049] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.300 (7049) [ 190.570372][ T7049] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 191.456311][ T7049] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 191.517865][ T7049] BTRFS info (device loop2): using free space tree [ 191.555117][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 191.792789][ T7049] BTRFS error (device loop2): open_ctree failed: -4 [ 191.987309][ T7080] QAT: failed to copy from user. [ 192.117834][ T7082] bridge0: port 1(syz_tun) entered blocking state [ 192.127567][ T7082] bridge0: port 1(syz_tun) entered disabled state [ 192.134590][ T7082] syz_tun: entered allmulticast mode [ 192.141908][ T7082] syz_tun: entered promiscuous mode [ 192.163422][ T7082] bridge0: port 1(syz_tun) entered blocking state [ 192.170080][ T7082] bridge0: port 1(syz_tun) entered forwarding state [ 192.206073][ T6064] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (6064) [ 193.548053][ T28] audit: type=1400 audit(1755430052.590:38): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7092 comm="syz.3.306" [ 194.916496][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.922837][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.253396][ T7102] loop1: detected capacity change from 0 to 40427 [ 196.267190][ T7102] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 196.289860][ T7102] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.337301][ T7102] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.441634][ T7102] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.456855][ T7102] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.635367][ T7119] libceph: resolve '4..' (ret=-3): failed [ 197.548845][ T7138] QAT: failed to copy from user. [ 199.760584][ T28] audit: type=1400 audit(1755430058.140:39): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7141 comm="syz.0.318" [ 199.804141][ T28] audit: type=1800 audit(1755430058.800:40): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 201.190588][ T7160] loop0: detected capacity change from 0 to 256 [ 201.252653][ T7160] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 201.664914][ T7162] libceph: resolve '4..' (ret=-3): failed [ 203.158219][ T28] audit: type=1400 audit(1755430062.200:41): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7174 comm="syz.1.327" [ 204.209944][ T7191] loop1: detected capacity change from 0 to 16 [ 204.262722][ T7191] erofs: (device loop1): mounted with root inode @ nid 36. [ 204.384223][ T7196] QAT: failed to copy from user. [ 206.265236][ T7199] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 206.277788][ T7199] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 206.289756][ T7199] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 206.299778][ T7199] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 206.316769][ T7199] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 206.326764][ T7199] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 206.339769][ T7199] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 206.350759][ T7199] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 206.363774][ T7199] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 206.374726][ T7199] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 206.386772][ T7199] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 206.398759][ T7199] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 206.660755][ T28] audit: type=1800 audit(1755430065.460:42): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.331" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 208.590199][ T28] audit: type=1107 audit(1755430067.620:43): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 209.665846][ T7220] libceph: resolve '4..' (ret=-3): failed [ 210.158162][ T28] audit: type=1400 audit(1755430069.200:44): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7222 comm="syz.0.339" [ 210.222879][ T7228] netlink: 76 bytes leftover after parsing attributes in process `syz.3.340'. [ 210.923379][ T7230] libceph: resolve '4..' (ret=-3): failed [ 211.285721][ T7232] loop0: detected capacity change from 0 to 64 [ 211.351865][ T7232] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 211.735830][ T7234] loop3: detected capacity change from 0 to 32768 [ 211.763013][ T7234] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 211.775763][ T7234] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 211.803562][ T7234] BTRFS info (device loop3): using free space tree [ 211.828805][ T7242] QAT: failed to copy from user. [ 211.932283][ T7234] BTRFS info (device loop3): enabling ssd optimizations [ 211.956245][ T7234] BTRFS info (device loop3): auto enabling async discard [ 212.097272][ T28] audit: type=1800 audit(1755430071.140:45): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.342" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 212.582204][ T7261] loop1: detected capacity change from 0 to 64 [ 212.900239][ T5781] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 214.069977][ T28] audit: type=1400 audit(1755430073.070:46): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7269 comm="syz.1.350" [ 214.427438][ T28] audit: type=1107 audit(1755430073.310:47): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I' [ 215.064298][ T7283] netlink: 76 bytes leftover after parsing attributes in process `syz.2.352'. [ 215.081503][ T7281] loop0: detected capacity change from 0 to 4096 [ 215.116690][ T7281] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 215.123618][ T7285] loop1: detected capacity change from 0 to 64 [ 215.174431][ T7285] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 215.351989][ T28] audit: type=1804 audit(1755430074.390:48): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.351" name="/newroot/100/file1/bus" dev="loop0" ino=33 res=1 errno=0 [ 215.531728][ T7296] QAT: failed to copy from user. [ 217.138298][ T28] audit: type=1400 audit(1755430076.180:49): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7304 comm="syz.2.361" [ 217.538891][ T7315] libceph: resolve '4..' (ret=-3): failed [ 218.113593][ T7326] loop2: detected capacity change from 0 to 64 [ 218.138925][ T7326] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2 [ 219.515368][ T7319] loop3: detected capacity change from 0 to 32768 [ 219.532427][ T7319] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 219.541726][ T7319] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.595126][ T7319] XFS (loop3): Ending clean mount [ 219.624286][ T7319] XFS (loop3): Quotacheck needed: Please wait. [ 219.835315][ T7319] XFS (loop3): Quotacheck: Done. [ 220.071812][ T7346] QAT: failed to copy from user. [ 220.209792][ T5781] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.458913][ T7348] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 220.992470][ T28] audit: type=1400 audit(1755430079.990:50): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7353 comm="syz.1.372" [ 223.047770][ T7379] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 223.061785][ T7379] bridge0: port 1(syz_tun) entered disabled state [ 223.085072][ T7379] syz_tun: left allmulticast mode [ 223.090394][ T7379] bridge0: port 1(syz_tun) entered disabled state [ 223.129413][ T7379] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 223.516809][ T7392] libceph: resolve '4..' (ret=-3): failed [ 223.898186][ T28] audit: type=1400 audit(1755430082.940:51): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7395 comm="syz.2.384" [ 224.376575][ T27] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 225.731557][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 225.741414][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.751079][ T27] usb 4-1: Product: syz [ 225.755591][ T27] usb 4-1: Manufacturer: syz [ 225.757777][ T7410] program syz.2.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.760991][ T27] usb 4-1: SerialNumber: syz [ 225.780318][ T27] usb 4-1: config 0 descriptor?? [ 226.016489][ T27] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 226.245101][ T5770] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 226.609240][ T5770] usb 3-1: Using ep0 maxpacket: 16 [ 226.633347][ T5770] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 226.642744][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 226.655057][ T5770] usb 3-1: Product: syz [ 226.659256][ T5770] usb 3-1: Manufacturer: syz [ 226.664037][ T5770] usb 3-1: SerialNumber: syz [ 227.259541][ T5770] usb 3-1: config 0 descriptor?? [ 227.575133][ T5770] usb 3-1: USB disconnect, device number 2 [ 228.218840][ T28] audit: type=1400 audit(1755430087.260:52): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7462 comm="syz.1.397" [ 228.780013][ T27] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 229.446590][ T27] usb 4-1: USB disconnect, device number 4 [ 232.924962][ T28] audit: type=1400 audit(1755430091.350:53): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7523 comm="syz.3.407" [ 233.127376][ T7532] loop0: detected capacity change from 0 to 256 [ 233.134565][ T7532] exfat: Deprecated parameter 'utf8' [ 233.284971][ T7532] exfat: Deprecated parameter 'utf8' [ 233.355382][ T7532] exfat: Deprecated parameter 'utf8' [ 233.511494][ T7532] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 235.030568][ T28] audit: type=1400 audit(1755430094.070:54): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=7553 comm="syz.3.416" [ 237.000128][ T7585] loop0: detected capacity change from 0 to 2048 [ 237.188369][ T7585] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.015330][ T7600] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.217553][ T7651] loop3: detected capacity change from 0 to 2048 [ 241.246062][ T7651] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 241.312940][ T7656] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.291439][ T7674] capability: warning: `syz.2.442' uses deprecated v2 capabilities in a way that may be insecure [ 244.943673][ T7704] loop3: detected capacity change from 0 to 1024 [ 244.955958][ T7704] EXT4-fs: Ignoring removed nobh option [ 244.972274][ T7704] EXT4-fs: Ignoring removed bh option [ 245.062253][ T7704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.840272][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.009160][ T7721] binder: 7719:7721 unknown command 0 [ 247.018801][ T7721] binder: 7719:7721 ioctl c0306201 200000000300 returned -22 [ 249.258604][ T7749] [ 249.261140][ T7749] ============================= [ 249.266076][ T7749] WARNING: suspicious RCU usage [ 249.270969][ T7749] 6.6.102-syzkaller #0 Not tainted [ 249.276214][ T7749] ----------------------------- [ 249.281064][ T7749] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 249.289676][ T7749] [ 249.289676][ T7749] other info that might help us debug this: [ 249.289676][ T7749] [ 249.300083][ T7749] [ 249.300083][ T7749] rcu_scheduler_active = 2, debug_locks = 1 [ 249.308231][ T7749] 1 lock held by syz.0.464/7749: [ 249.313351][ T7749] #0: ffffffff8cd2fd80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 249.323670][ T7749] [ 249.323670][ T7749] stack backtrace: [ 249.329654][ T7749] CPU: 0 PID: 7749 Comm: syz.0.464 Not tainted 6.6.102-syzkaller #0 [ 249.337649][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.347736][ T7749] Call Trace: [ 249.351028][ T7749] [ 249.353976][ T7749] dump_stack_lvl+0x16c/0x230 [ 249.358677][ T7749] ? show_regs_print_info+0x20/0x20 [ 249.363893][ T7749] ? load_image+0x3b0/0x3b0 [ 249.368427][ T7749] lockdep_rcu_suspicious+0x1e1/0x300 [ 249.373819][ T7749] get_callchain_entry+0x2a9/0x3c0 [ 249.378932][ T7749] get_perf_callchain+0xa3/0x4b0 [ 249.383862][ T7749] ? put_callchain_entry+0xb0/0xb0 [ 249.388963][ T7749] ? plist_add+0x3d8/0x490 [ 249.393379][ T7749] __bpf_get_stack+0x2d7/0x510 [ 249.398152][ T7749] ? stack_map_get_build_id_offset+0x720/0x720 [ 249.404298][ T7749] ? __cant_sleep+0x210/0x210 [ 249.408963][ T7749] ? bpf_prog_d43750871481577d+0x45/0x49 [ 249.414597][ T7749] bpf_get_stack_raw_tp+0x1a9/0x210 [ 249.419800][ T7749] bpf_prog_d43750871481577d+0x45/0x49 [ 249.425249][ T7749] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 249.430629][ T7749] bpf_prog_test_run_syscall+0x311/0x490 [ 249.436261][ T7749] ? sock_gen_cookie+0x60/0x60 [ 249.441030][ T7749] ? sock_gen_cookie+0x60/0x60 [ 249.445787][ T7749] bpf_prog_test_run+0x321/0x390 [ 249.450722][ T7749] __sys_bpf+0x440/0x800 [ 249.454971][ T7749] ? bpf_link_show_fdinfo+0x350/0x350 [ 249.460352][ T7749] ? lock_chain_count+0x20/0x20 [ 249.465202][ T7749] __x64_sys_bpf+0x7c/0x90 [ 249.469618][ T7749] do_syscall_64+0x55/0xb0 [ 249.474028][ T7749] ? clear_bhb_loop+0x40/0x90 [ 249.478696][ T7749] ? clear_bhb_loop+0x40/0x90 [ 249.483367][ T7749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.489260][ T7749] RIP: 0033:0x7f6c1778ebe9 [ 249.493683][ T7749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.513306][ T7749] RSP: 002b:00007f6c185c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.521732][ T7749] RAX: ffffffffffffffda RBX: 00007f6c179b5fa0 RCX: 00007f6c1778ebe9 [ 249.529709][ T7749] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 249.537680][ T7749] RBP: 00007f6c17811e19 R08: 0000000000000000 R09: 0000000000000000 [ 249.545649][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.553609][ T7749] R13: 00007f6c179b6038 R14: 00007f6c179b5fa0 R15: 00007ffecb070cf8 [ 249.561586][ T7749] [ 255.958542][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.964992][ T1276] ieee802154 phy1 wpan1: encryption failed: -22