last executing test programs: 3m1.540339141s ago: executing program 0 (id=29): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x22) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000002c0)={r0, 0x0, 0x42882, &(0x7f0000000140)={@align, {0x4, 0x5, 0xd, 0x8}}, 0x2, 0x0, &(0x7f0000000240)=0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m1.288256189s ago: executing program 1 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r4}) 3m0.69910127s ago: executing program 0 (id=33): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r2, 0xf3a, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000090) 3m0.213507663s ago: executing program 0 (id=34): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 2m59.266538931s ago: executing program 0 (id=35): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x1000000, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0xab) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000100)=',', 0x1, 0xffff) sendfile(r0, r0, 0x0, 0x7a680000) 2m58.139305397s ago: executing program 0 (id=37): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 2m57.413181184s ago: executing program 0 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000000000000000000002"], 0x30}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x8980) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close(0x4) 2m50.177396082s ago: executing program 1 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89", 0x5}], 0x1}, 0x24008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) syz_open_dev$tty1(0xc, 0x4, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@uuid_off}]}) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32323b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdc69c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d9560ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f733b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 2m45.939468806s ago: executing program 1 (id=55): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(r0, &(0x7f0000000140)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r4, &(0x7f0000000080), 0x0, 0x9, 0x100) 2m38.976138855s ago: executing program 32 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000000000000000000002"], 0x30}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x8980) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close(0x4) 2m38.834122738s ago: executing program 1 (id=59): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x154, &(0x7f0000000b40)="$eJzs27HK02AUBuCTtmrVpbM4BFycinoFilQQA4rSQSeF6tJKwS7RqZfi7XgH3oQgnbp9oimt1nb4hzT92+dZcuAlcM6QHL5A3t7+OB5NZx+mLxbRzbLoPIw8lln0ohXtqMwDADgly5TiZ0opXZvH9a+RUmq6IwCgbvY/AJwf+x8Azs9/+7/VdEcAQN1evX7z7FFRDF7meTfix7wclsPqWuVPnhaDe/kfvc1di7Icttf5/SrP/82vxI1V/mBnfjXu3qny39nj58VWfjNG9Y8PAAAAZ6Gfr+083/f7+/Kq+uv7wNb5vRO3OgcbAwC4gNnnL+N3k8n7T5e9yFYDHUs/ilqL798ijqCNEy4afjEBtds89E13AgAAAAAAAAAAAAAA7HOI34manhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/QoAAP//v8RNww==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) 2m37.299132398s ago: executing program 1 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r5}) 2m33.957483492s ago: executing program 1 (id=66): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x1, 0x370, &(0x7f0000002980)="$eJzs3U9oHFUYAPBvO/lbaJODUBSE0ZugoX/woHhIKSkU96KyVD2Ii01VsrGQxcX00G28iEfBo4LgRTzowUPPIijizYNXK2hVPGhvBYtPdnd2d7a7SSMlldDf77B8+d77Zt6bvGQnm+zLy8uxdm46zl+/fi3m5ioxtXxqOW5UYjGy6Lsc42Ym5ACA/eFGSvFX6tllSWWPhwQA7LHu8/+rh0qZt7/eqX/y7A8A+17x8//8Tn3mxlO/PNV5vLB34wIA9s7Y6/8PjzTPjP6qf6r0VwEAwH713AsvPn2yGvFsns9FrL/TqrVq8eSw/eT5eD0asRpHYyFuRvRuFDoPle7j6TPVlaN5nrfj18WoRcRHrVrEertV690pnMy69bNxLBZisagv7jZSStnpL6orx/KuiLjc7p4/1iut2nQcLM7/48FYjeORx31j9RFnqivH8+IAtfV+fTtiK+biQG8SnfEvxUJ8/0pciEacmz8bKfVva6orl47l+alUHalv1Wbj3OAqTHgFBAAAAAAAAAAAAAAAAAAAAAAA7sBSPrA42P8mDffvWVqa0N7dH6dXX+wPtNXbHyjNpkjpz7ceq72bxcj+QLfuz9OqTfV35wEAAAAAAAAAAAAAAAAAAIB7XnNzJuqNxupGc/PiWjlobzQ3D0REJ/PGt599NR/jfW4TTBXnKDXlReriWj1l/c4pG+lTBFnn5P3Mp1cGIy73mR3MYuIwZrdvajQOPfTzB8PMg1n/yP8M+2QxeYLZLcMoB+uHe0MaZKaHU972ip0oguO3uapXU0rbHefSS+NVUYmY+u+fuJ2D1Am+ufba/SeaRx7vZr5MPY88unD26vsf/75Wb3TO3NH4ZGajeTOt1YuPJy+27YOstH4qxTWslFfC1E7lW6OZevbDH88/8N53uzt7KmfenNAn603n843mZqX4Suk2zfSCTu6WqvnGmWxsJUxPWPx3FkxcbEc+XK5fufTTb7s9TumbhI06AAAAAAAAAAAAAAAAAADgrii9V7xQvNl3eqeqJ54pgrm9HR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3B3D//9fCrbGMrsJ/m7HeNPs6kYz4vD/PU0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5x/wYAAP//Q7dpOg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 2m18.30183454s ago: executing program 33 (id=66): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x1, 0x370, &(0x7f0000002980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 1m36.544599688s ago: executing program 3 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x301, 0x70bd2c, 0x25dfdbfc, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 1m35.132065682s ago: executing program 3 (id=130): r0 = inotify_init1(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001280)=0xff) readv(0xffffffffffffffff, &(0x7f0000000ec0)=[{0x0}], 0x1) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x931766f6319eed40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.701811307s ago: executing program 3 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000150000000800000040"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) 1m30.151733971s ago: executing program 3 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd3b, 0x2, {0x0, 0x0, 0x0, r3, {0xa, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'hsr0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008014}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 1m27.907565014s ago: executing program 3 (id=138): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040000000000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1m26.714093607s ago: executing program 3 (id=139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x2, 0x16, 0x400000, 0x7ff, 0x24, 0xb, 0x1, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x5, 0x3, 0x8, 0x37e9, 0x3, 0x800, 0x6, 0x4, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000002500)=ANY=[], 0x1, 0x1f9, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) preadv2(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6c}) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000500)=""/81, 0x51) 1m9.960016345s ago: executing program 34 (id=139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x2, 0x16, 0x400000, 0x7ff, 0x24, 0xb, 0x1, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x5, 0x3, 0x8, 0x37e9, 0x3, 0x800, 0x6, 0x4, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000002500)=ANY=[], 0x1, 0x1f9, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) preadv2(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6c}) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000500)=""/81, 0x51) 8.928933013s ago: executing program 2 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x22) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000002c0)={r0, 0x0, 0x42882, &(0x7f0000000140)={@align, {0x4, 0x5, 0xd, 0x8}}, 0x2, 0x0, &(0x7f0000000240)=0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.099451277s ago: executing program 2 (id=205): r0 = inotify_init1(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001280)=0xff) readv(0xffffffffffffffff, &(0x7f0000000ec0)=[{&(0x7f0000000a00)=""/249, 0xf9}], 0x1) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x931766f6319eed40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.681971576s ago: executing program 4 (id=206): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f0000001140)) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="e86364e0a3991ae0faffb982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x33) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r8, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r8}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 7.254816653s ago: executing program 2 (id=207): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 6.653198634s ago: executing program 2 (id=208): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x2, "a0e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000780)={0x40, 0xd, 0x4, "d2552db9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.607338202s ago: executing program 4 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x16, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) 6.244374044s ago: executing program 4 (id=210): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.933852438s ago: executing program 4 (id=211): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 3.164029529s ago: executing program 2 (id=212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x22) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000002c0)={r0, 0x0, 0x42882, &(0x7f0000000140)={@align, {0x4, 0x5, 0xd, 0x8}}, 0x2, 0x0, &(0x7f0000000240)=0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.806647058s ago: executing program 4 (id=213): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='virtiofs\x00', 0x8000, 0x0) 1.441614173s ago: executing program 2 (id=214): r0 = inotify_init1(0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001280)=0xff) readv(0xffffffffffffffff, &(0x7f0000000ec0)=[{&(0x7f0000000a00)=""/249, 0xf9}], 0x1) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x931766f6319eed40) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=215): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 156.083201][ T5758] cgroup: Unknown subsys name 'net' [ 156.211308][ T5758] cgroup: Unknown subsys name 'cpuset' [ 156.227592][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.617585][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 166.873295][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.890726][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.899493][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.911049][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.923319][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.931288][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.940801][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.954136][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.984048][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.995587][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.000232][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.005453][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.011824][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.021443][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.026928][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.034216][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.046162][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.049650][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.058386][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.069502][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.082608][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.086319][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.093532][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.105992][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.136797][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.557078][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 168.618759][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 168.746996][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 168.897511][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 168.921036][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 169.112732][ T5788] Bluetooth: hci0: command tx timeout [ 169.192867][ T5778] Bluetooth: hci2: command tx timeout [ 169.198483][ T5778] Bluetooth: hci1: command tx timeout [ 169.205880][ T5792] Bluetooth: hci3: command tx timeout [ 169.212524][ T5788] Bluetooth: hci4: command tx timeout [ 169.474902][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.502804][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.510506][ T5779] bridge_slave_0: entered allmulticast mode [ 169.557284][ T5779] bridge_slave_0: entered promiscuous mode [ 169.693846][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.701429][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.709941][ T5779] bridge_slave_1: entered allmulticast mode [ 169.718494][ T5779] bridge_slave_1: entered promiscuous mode [ 169.846982][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.854915][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.862322][ T5775] bridge_slave_0: entered allmulticast mode [ 169.870715][ T5775] bridge_slave_0: entered promiscuous mode [ 169.928431][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.936019][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.944022][ T5780] bridge_slave_0: entered allmulticast mode [ 169.952186][ T5780] bridge_slave_0: entered promiscuous mode [ 169.986715][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.994351][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.001763][ T5775] bridge_slave_1: entered allmulticast mode [ 170.010944][ T5775] bridge_slave_1: entered promiscuous mode [ 170.020207][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.028903][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.036609][ T5786] bridge_slave_0: entered allmulticast mode [ 170.044742][ T5786] bridge_slave_0: entered promiscuous mode [ 170.078639][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.086222][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.094106][ T5780] bridge_slave_1: entered allmulticast mode [ 170.102601][ T5780] bridge_slave_1: entered promiscuous mode [ 170.142324][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.175259][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.183070][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.190501][ T5786] bridge_slave_1: entered allmulticast mode [ 170.199438][ T5786] bridge_slave_1: entered promiscuous mode [ 170.209515][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.217600][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.225656][ T5777] bridge_slave_0: entered allmulticast mode [ 170.234661][ T5777] bridge_slave_0: entered promiscuous mode [ 170.278040][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.331487][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.339494][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.347239][ T5777] bridge_slave_1: entered allmulticast mode [ 170.355799][ T5777] bridge_slave_1: entered promiscuous mode [ 170.374184][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.415909][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.434359][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.580315][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.675090][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.693938][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.734193][ T5779] team0: Port device team_slave_0 added [ 170.769093][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.785653][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.801771][ T5780] team0: Port device team_slave_0 added [ 170.815331][ T5779] team0: Port device team_slave_1 added [ 170.827352][ T5775] team0: Port device team_slave_0 added [ 170.885415][ T5780] team0: Port device team_slave_1 added [ 170.920083][ T5775] team0: Port device team_slave_1 added [ 171.043727][ T5786] team0: Port device team_slave_0 added [ 171.056563][ T5777] team0: Port device team_slave_0 added [ 171.088796][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.095974][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.122614][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.163776][ T5786] team0: Port device team_slave_1 added [ 171.176005][ T5777] team0: Port device team_slave_1 added [ 171.183654][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.190776][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.193039][ T5778] Bluetooth: hci0: command tx timeout [ 171.217153][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.236252][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.243528][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.270089][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.281003][ T5778] Bluetooth: hci1: command tx timeout [ 171.281044][ T5785] Bluetooth: hci4: command tx timeout [ 171.288825][ T5785] Bluetooth: hci3: command tx timeout [ 171.293263][ T5778] Bluetooth: hci2: command tx timeout [ 171.313735][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.320840][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.347121][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.408129][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.415469][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.441826][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.472152][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.479956][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.506390][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.566825][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.574398][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.601054][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.636195][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.643426][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.669863][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.719260][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.726582][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.753114][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.786579][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.793938][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.820259][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.941036][ T5775] hsr_slave_0: entered promiscuous mode [ 171.949511][ T5775] hsr_slave_1: entered promiscuous mode [ 171.986986][ T5779] hsr_slave_0: entered promiscuous mode [ 171.995563][ T5779] hsr_slave_1: entered promiscuous mode [ 172.003595][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 172.009515][ T5779] Cannot create hsr debugfs directory [ 172.057561][ T5780] hsr_slave_0: entered promiscuous mode [ 172.066261][ T5780] hsr_slave_1: entered promiscuous mode [ 172.074543][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 172.080368][ T5780] Cannot create hsr debugfs directory [ 172.258532][ T5777] hsr_slave_0: entered promiscuous mode [ 172.266927][ T5777] hsr_slave_1: entered promiscuous mode [ 172.275189][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 172.281039][ T5777] Cannot create hsr debugfs directory [ 172.488696][ T5786] hsr_slave_0: entered promiscuous mode [ 172.497173][ T5786] hsr_slave_1: entered promiscuous mode [ 172.505604][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 172.511491][ T5786] Cannot create hsr debugfs directory [ 173.272730][ T5778] Bluetooth: hci0: command tx timeout [ 173.353017][ T5778] Bluetooth: hci3: command tx timeout [ 173.355182][ T5785] Bluetooth: hci1: command tx timeout [ 173.358590][ T5778] Bluetooth: hci4: command tx timeout [ 173.364299][ T5788] Bluetooth: hci2: command tx timeout [ 173.506365][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.529872][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.548994][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.581029][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.696978][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.720884][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.739304][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.760816][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.930487][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.978094][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.998390][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.021440][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.300351][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.333497][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.356170][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.414568][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.686045][ T5786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.741793][ T5786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.765780][ T5786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.809657][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.817315][ T5786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.036392][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.060865][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.134346][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.179150][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.186570][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.217168][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.244548][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.251972][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.349998][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.357403][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.366486][ T5788] Bluetooth: hci0: command tx timeout [ 175.375022][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.382532][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.433096][ T5788] Bluetooth: hci2: command tx timeout [ 175.433493][ T5785] Bluetooth: hci1: command tx timeout [ 175.438816][ T5792] Bluetooth: hci3: command tx timeout [ 175.450545][ T5778] Bluetooth: hci4: command tx timeout [ 175.522221][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.618908][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.626282][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.699847][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.727447][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.734868][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.985533][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.111070][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.118639][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.247841][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.255513][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.326413][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.510729][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.721357][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.729174][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.751647][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.759349][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.000322][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.178939][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.578146][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.882209][ T5779] veth0_vlan: entered promiscuous mode [ 177.943254][ T5775] veth0_vlan: entered promiscuous mode [ 178.028169][ T5779] veth1_vlan: entered promiscuous mode [ 178.114531][ T5775] veth1_vlan: entered promiscuous mode [ 178.138089][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.336848][ T5780] veth0_vlan: entered promiscuous mode [ 178.368051][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.461113][ T5780] veth1_vlan: entered promiscuous mode [ 178.490055][ T5779] veth0_macvtap: entered promiscuous mode [ 178.561798][ T5779] veth1_macvtap: entered promiscuous mode [ 178.604447][ T5775] veth0_macvtap: entered promiscuous mode [ 178.737293][ T5775] veth1_macvtap: entered promiscuous mode [ 178.827725][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.877225][ T5780] veth0_macvtap: entered promiscuous mode [ 178.909768][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.950504][ T5777] veth0_vlan: entered promiscuous mode [ 178.977653][ T5780] veth1_macvtap: entered promiscuous mode [ 179.026270][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.111375][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.120422][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.132853][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.204293][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.220462][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.233715][ T5777] veth1_vlan: entered promiscuous mode [ 179.322294][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.331787][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.356702][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.370227][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.400508][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.470131][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.659659][ T187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.687052][ T187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.755049][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.782914][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.012153][ T5777] veth0_macvtap: entered promiscuous mode [ 180.065640][ T5786] veth0_vlan: entered promiscuous mode [ 180.131097][ T5777] veth1_macvtap: entered promiscuous mode [ 180.268306][ T5786] veth1_vlan: entered promiscuous mode [ 180.420390][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.500131][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.670829][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.713451][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.795946][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.824985][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.904256][ T5786] veth0_macvtap: entered promiscuous mode [ 181.003980][ T5786] veth1_macvtap: entered promiscuous mode [ 181.236344][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.334065][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.419783][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.443014][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.452027][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.558627][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.656577][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.708518][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.820040][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.843143][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.073150][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.081263][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.089913][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.143563][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.308152][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.311111][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.345736][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.348583][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.667146][ T5779] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.162645][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.190578][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.477602][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.559811][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.325593][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.401075][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.689143][ T5987] loop1: detected capacity change from 0 to 512 [ 187.722760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.769152][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.889063][ T5989] loop3: detected capacity change from 0 to 512 [ 187.935740][ T5989] EXT4-fs: Ignoring removed i_version option [ 188.063694][ T5987] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10: invalid indirect mapped block 256 (level 2) [ 188.124921][ T5987] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 188.132538][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 188.148516][ C1] EXT4-fs (loop1): initial error at time 1776144951: ext4_free_branches:1023: inode 11 [ 188.158561][ C1] EXT4-fs (loop1): last error at time 1776144951: ext4_free_branches:1023: inode 11 [ 188.171898][ T5987] EXT4-fs (loop1): 2 truncates cleaned up [ 188.231229][ T5987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.267557][ T5989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.728472][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.728905][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.239827][ T6000] loop1: detected capacity change from 0 to 512 [ 189.265419][ T6000] ext4: Unknown parameter 'nouser_xattr' [ 189.950929][ T6007] loop1: detected capacity change from 0 to 1024 [ 190.003884][ T6007] ======================================================= [ 190.003884][ T6007] WARNING: The mand mount option has been deprecated and [ 190.003884][ T6007] and is ignored by this kernel. Remove the mand [ 190.003884][ T6007] option from the mount to silence this warning. [ 190.003884][ T6007] ======================================================= [ 190.080501][ T6010] loop4: detected capacity change from 0 to 512 [ 190.120564][ T6007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.140438][ T6010] EXT4-fs: Ignoring removed nobh option [ 190.202625][ T6010] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 190.211929][ T6007] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 190.211929][ T6007] [ 190.605872][ T6010] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #3: comm syz.4.19: corrupted inode contents [ 190.652188][ T6014] loop3: detected capacity change from 0 to 256 [ 190.662844][ T6010] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 190.669657][ T6010] EXT4-fs (loop4): Remounting filesystem read-only [ 190.679097][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 190.679186][ C0] EXT4-fs (loop4): initial error at time 1776144953: ext4_do_update_inode:5602: inode 3 [ 190.679339][ C0] EXT4-fs (loop4): last error at time 1776144953: ext4_do_update_inode:5602: inode 3 [ 190.941619][ T6010] Quota error (device loop4): write_blk: dquota write failed [ 191.002272][ T6010] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 191.067388][ T6010] EXT4-fs (loop4): 1 truncate cleaned up [ 191.154786][ T6010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.186280][ T6010] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.702869][ T29] audit: type=1400 audit(1776144955.967:2): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6018 comm="syz.3.21" [ 192.768927][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.727630][ T6024] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 193.736811][ T6024] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.820294][ T6033] loop2: detected capacity change from 0 to 1024 [ 194.874169][ T6033] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 194.978612][ T6033] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 195.024383][ T6040] netlink: 388 bytes leftover after parsing attributes in process `syz.1.24'. [ 195.734968][ T6043] 9p: Bad value for 'rfdno' [ 196.617356][ T6046] loop1: detected capacity change from 0 to 16 [ 196.758928][ T6046] erofs (device loop1): mounted with root inode @ nid 36. [ 197.158355][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.355628][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.469426][ T6048] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 198.303151][ T6054] loop2: detected capacity change from 0 to 512 [ 198.347806][ T6054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.403905][ T6054] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.30: Invalid block bitmap block 0 in block_group 0 [ 198.489219][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 198.492474][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 198.506648][ C0] EXT4-fs (loop2): initial error at time 1776144961: ext4_read_block_bitmap_nowait:483 [ 198.516639][ C0] EXT4-fs (loop2): last error at time 1776144961: ext4_read_block_bitmap_nowait:483 [ 198.528992][ T6054] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 198.562689][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 198.578361][ T6054] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.30: attempt to clear invalid blocks 983261 len 1 [ 198.600347][ T5909] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 198.676673][ T6054] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.677890][ T6054] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.30: Invalid inode table block 0 in block_group 0 [ 198.753846][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 198.757497][ T6054] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 198.841047][ T5909] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.885702][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.902618][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 198.910260][ T6054] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 198.932540][ T5909] usb 4-1: Product: syz [ 198.936996][ T5909] usb 4-1: Manufacturer: syz [ 198.972980][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 198.974237][ T6054] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.30: Invalid inode table block 0 in block_group 0 [ 198.998615][ T5909] usb 4-1: SerialNumber: syz [ 199.025029][ T5909] usb 4-1: config 0 descriptor?? [ 199.286456][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 199.290253][ T6054] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 199.341226][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 199.346799][ T6054] EXT4-fs error (device loop2): ext4_truncate:4602: inode #11: comm syz.2.30: mark_inode_dirty error [ 199.369580][ T5909] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 199.440521][ T6054] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.457874][ T6054] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 199.531605][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 199.538081][ T6054] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.30: Invalid inode table block 0 in block_group 0 [ 199.597706][ T6067] loop0: detected capacity change from 0 to 128 [ 199.632735][ T6054] loop2: lost filesystem error report for type 5 error -117 [ 199.641967][ T6054] EXT4-fs (loop2): 1 truncate cleaned up [ 199.724418][ T6054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.778951][ T6067] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.840563][ T6054] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.30: Invalid inode table block 0 in block_group 0 [ 199.856080][ T6054] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 199.868140][ T6067] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.994681][ T5909] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 200.257750][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.479873][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.296343][ T5833] usb 4-1: USB disconnect, device number 2 [ 202.328232][ T6088] loop3: detected capacity change from 0 to 256 [ 202.349821][ T6088] vfat: Unknown parameter '0xffffffffffffffff' [ 203.247271][ T6094] netlink: 96 bytes leftover after parsing attributes in process `syz.3.42'. [ 204.025939][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.032812][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.521778][ T6100] loop2: detected capacity change from 0 to 16 [ 205.601913][ T6100] erofs (device loop2): mounted with root inode @ nid 36. [ 205.640112][ T6100] syz.2.44: attempt to access beyond end of device [ 205.640112][ T6100] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 206.464432][ T29] audit: type=1800 audit(1776144969.717:3): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.44" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 207.217303][ T6108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.225055][ T6108] IPv6: NLM_F_CREATE should be set when creating new route [ 207.232588][ T6108] IPv6: NLM_F_CREATE should be set when creating new route [ 208.218528][ T6114] loop3: detected capacity change from 0 to 512 [ 208.436446][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.521066][ T6114] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.522990][ T6116] mkiss: ax0: crc mode is auto. [ 208.762896][ T5909] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 209.870786][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.848214][ T6135] loop3: detected capacity change from 0 to 256 [ 210.859562][ T5909] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 210.869054][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.881542][ T5909] usb 5-1: Product: syz [ 210.886945][ T5909] usb 5-1: Manufacturer: syz [ 210.891809][ T5909] usb 5-1: SerialNumber: syz [ 210.902237][ T5909] usb 5-1: config 0 descriptor?? [ 210.926637][ T6135] vfat: Bad value for 'shortname' [ 211.233379][ T5909] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 212.764491][ T5909] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 213.743255][ T5909] usb 5-1: USB disconnect, device number 2 [ 213.815700][ T6145] 9p: Bad value for 'rfdno' [ 220.110087][ T6154] loop1: detected capacity change from 0 to 128 [ 222.089933][ T6169] loop3: detected capacity change from 0 to 1024 [ 222.165577][ T6169] ext4: Unknown parameter 'noacl' [ 223.084114][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.121821][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.132635][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.150901][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.172936][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.325302][ T6166] loop2: detected capacity change from 0 to 8192 [ 223.418164][ T6166] msdos: Bad value for 'time_offset' [ 225.328498][ T5778] Bluetooth: hci5: command tx timeout [ 226.007457][ T6179] loop1: detected capacity change from 0 to 256 [ 226.644661][ T6179] FAT-fs (loop1): Directory bread(block 64) failed [ 226.651427][ T6179] FAT-fs (loop1): Directory bread(block 65) failed [ 226.715417][ T6179] FAT-fs (loop1): Directory bread(block 66) failed [ 226.753113][ T6179] FAT-fs (loop1): Directory bread(block 67) failed [ 226.760026][ T6179] FAT-fs (loop1): Directory bread(block 68) failed [ 226.812908][ T6179] FAT-fs (loop1): Directory bread(block 69) failed [ 226.853149][ T6179] FAT-fs (loop1): Directory bread(block 70) failed [ 226.859991][ T6179] FAT-fs (loop1): Directory bread(block 71) failed [ 226.904330][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 226.923515][ T6179] FAT-fs (loop1): Directory bread(block 72) failed [ 226.952656][ T6179] FAT-fs (loop1): Directory bread(block 73) failed [ 227.190775][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 227.201390][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.227045][ T10] usb 3-1: Product: syz [ 227.231681][ T10] usb 3-1: Manufacturer: syz [ 227.272163][ T10] usb 3-1: SerialNumber: syz [ 227.353932][ T5778] Bluetooth: hci5: command tx timeout [ 227.881820][ T10] usb 3-1: config 0 descriptor?? [ 228.226933][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 228.568076][ T6193] 9p: Bad value for 'rfdno' [ 229.432909][ T5778] Bluetooth: hci5: command tx timeout [ 229.529272][ T3972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.881487][ T3972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.132076][ T3972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.340901][ T6172] chnl_net:caif_netlink_parms(): no params data found [ 230.409221][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 230.512918][ T3972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.552901][ T5778] Bluetooth: hci5: command tx timeout [ 231.728148][ T6200] loop3: detected capacity change from 0 to 16 [ 231.755944][ T6200] erofs (device loop3): mounted with root inode @ nid 36. [ 231.770168][ T6200] syz.3.70: attempt to access beyond end of device [ 231.770168][ T6200] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 231.901218][ T6200] syz.3.70: attempt to access beyond end of device [ 231.901218][ T6200] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 231.922834][ T6200] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 231.934762][ T6200] erofs (device loop3): read error -117 @ 1 of nid 89 [ 232.016138][ T29] audit: type=1800 audit(1776144995.217:4): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 232.729949][ T5835] usb 3-1: USB disconnect, device number 2 [ 232.948699][ T3972] bridge_slave_1: left allmulticast mode [ 232.992958][ T3972] bridge_slave_1: left promiscuous mode [ 232.999546][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.062275][ T3972] bridge_slave_0: left allmulticast mode [ 233.102552][ T3972] bridge_slave_0: left promiscuous mode [ 233.119659][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.824291][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.914520][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.967807][ T3972] bond0 (unregistering): Released all slaves [ 236.600229][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.640202][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.696783][ T6172] bridge_slave_0: entered allmulticast mode [ 238.994943][ T6238] loop4: detected capacity change from 0 to 512 [ 239.005458][ T6172] bridge_slave_0: entered promiscuous mode [ 239.258793][ T6242] 9p: Bad value for 'rfdno' [ 239.460987][ T6238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.381691][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.591205][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.665367][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.728613][ T6172] bridge_slave_1: entered allmulticast mode [ 240.803171][ T6172] bridge_slave_1: entered promiscuous mode [ 241.012920][ T5833] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 241.222258][ T5833] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.265930][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.332850][ T5833] usb 4-1: Product: syz [ 241.353623][ T5833] usb 4-1: Manufacturer: syz [ 241.358437][ T5833] usb 4-1: SerialNumber: syz [ 241.401690][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.417489][ T5833] usb 4-1: config 0 descriptor?? [ 241.556114][ T3972] hsr_slave_0: left promiscuous mode [ 241.612323][ T3972] hsr_slave_1: left promiscuous mode [ 241.636928][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.701274][ T5833] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.712200][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.741718][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.774925][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.856565][ T3972] veth1_macvtap: left promiscuous mode [ 241.877147][ T3972] veth0_macvtap: left promiscuous mode [ 241.906237][ T3972] veth1_vlan: left promiscuous mode [ 241.938913][ T3972] veth0_vlan: left promiscuous mode [ 242.171324][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.182780][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.196385][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.221916][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.248308][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.756749][ T5833] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 243.569473][ T3972] team0 (unregistering): Port device team_slave_1 removed [ 243.612081][ T3972] team0 (unregistering): Port device team_slave_0 removed [ 244.024234][ T5909] usb 4-1: USB disconnect, device number 3 [ 244.318650][ T5788] Bluetooth: hci0: command tx timeout [ 244.412135][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.396638][ T5788] Bluetooth: hci0: command tx timeout [ 246.609117][ T6172] team0: Port device team_slave_0 added [ 246.730699][ T6172] team0: Port device team_slave_1 added [ 247.294812][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.302003][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.526264][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.648345][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.687356][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.740137][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.759339][ T5788] Bluetooth: hci0: command tx timeout [ 249.313236][ T3972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.550434][ T3972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.940508][ T6172] hsr_slave_0: entered promiscuous mode [ 249.950374][ T6172] hsr_slave_1: entered promiscuous mode [ 250.793030][ T5788] Bluetooth: hci0: command tx timeout [ 251.231451][ T3972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.062205][ T6332] loop3: detected capacity change from 0 to 256 [ 252.166452][ T6332] exfat: Deprecated parameter 'utf8' [ 252.172252][ T6332] exfat: Deprecated parameter 'namecase' [ 252.289958][ T3972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.471211][ T6332] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 256.892137][ T6256] chnl_net:caif_netlink_parms(): no params data found [ 257.911189][ T3972] bridge_slave_1: left allmulticast mode [ 257.932712][ T3972] bridge_slave_1: left promiscuous mode [ 257.939273][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.055462][ T3972] bridge_slave_0: left allmulticast mode [ 258.071945][ T3972] bridge_slave_0: left promiscuous mode [ 258.078633][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.349357][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.450767][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.540190][ T3972] bond0 (unregistering): Released all slaves [ 260.868783][ T6382] syz.4.105 uses obsolete (PF_INET,SOCK_PACKET) [ 261.068205][ T6382] loop4: detected capacity change from 0 to 2048 [ 261.822247][ T6382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.836519][ T6382] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.877644][ T6393] loop2: detected capacity change from 0 to 256 [ 264.087708][ T6393] FAT-fs (loop2): Directory bread(block 64) failed [ 264.094940][ T6393] FAT-fs (loop2): Directory bread(block 65) failed [ 264.104671][ T6393] FAT-fs (loop2): Directory bread(block 66) failed [ 264.112504][ T6393] FAT-fs (loop2): Directory bread(block 67) failed [ 264.119333][ T6393] FAT-fs (loop2): Directory bread(block 68) failed [ 264.126311][ T6393] FAT-fs (loop2): Directory bread(block 69) failed [ 264.133280][ T6393] FAT-fs (loop2): Directory bread(block 70) failed [ 264.139956][ T6393] FAT-fs (loop2): Directory bread(block 71) failed [ 264.147117][ T6393] FAT-fs (loop2): Directory bread(block 72) failed [ 264.156253][ T6393] FAT-fs (loop2): Directory bread(block 73) failed [ 264.856775][ T6395] loop3: detected capacity change from 0 to 4096 [ 265.816023][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.823004][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.719991][ T6395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.538471][ T6172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.615952][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.889608][ T3972] hsr_slave_0: left promiscuous mode [ 267.962781][ T3972] hsr_slave_1: left promiscuous mode [ 268.004233][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.046382][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.099858][ T3972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.135863][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.226326][ T3972] veth1_macvtap: left promiscuous mode [ 268.252926][ T3972] veth0_macvtap: left promiscuous mode [ 268.258933][ T3972] veth1_vlan: left promiscuous mode [ 268.272948][ T3972] veth0_vlan: left promiscuous mode [ 268.476071][ T5835] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 268.717279][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.800508][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.814649][ T5835] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.859964][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.964735][ T5835] usb 4-1: config 0 descriptor?? [ 269.480241][ T5835] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 269.521094][ T5835] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 269.776104][ T5835] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 269.910627][ T5835] usb 4-1: USB disconnect, device number 4 [ 270.003766][ T6424] loop4: detected capacity change from 0 to 512 [ 270.059130][ T6424] EXT4-fs (loop4): Test dummy encryption mode enabled [ 270.072634][ T6424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.111364][ T6424] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.113: bad orphan inode 131083 [ 270.212272][ T6424] loop4: lost filesystem error report for type 5 error -117 [ 270.217996][ T6423] fido_id[6423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 270.219182][ T6424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.428759][ T3972] team0 (unregistering): Port device team_slave_1 removed [ 270.527526][ T3972] team0 (unregistering): Port device team_slave_0 removed [ 270.938624][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.111762][ T6430] loop3: detected capacity change from 0 to 512 [ 271.277770][ T6172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.575971][ T6172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.761942][ T6172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.822057][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.888062][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.909400][ T6256] bridge_slave_0: entered allmulticast mode [ 271.963780][ T6256] bridge_slave_0: entered promiscuous mode [ 272.016740][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.064315][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.123295][ T6256] bridge_slave_1: entered allmulticast mode [ 272.160092][ T6256] bridge_slave_1: entered promiscuous mode [ 272.428522][ T6443] loop2: detected capacity change from 0 to 512 [ 272.630064][ T6443] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 272.731507][ T6443] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 272.821467][ T6443] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.117: Corrupt directory, running e2fsck is recommended [ 272.898770][ T6443] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 272.913582][ T6443] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.117: corrupted in-inode xattr: invalid ea_ino [ 272.917144][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.929864][ T6443] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 272.962574][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 272.978830][ C1] EXT4-fs (loop2): initial error at time 1776145036: ext4_iget_extra_inode:5040: inode 15 [ 272.989246][ C1] EXT4-fs (loop2): last error at time 1776145036: ext4_iget_extra_inode:5040: inode 15 [ 273.000694][ T6443] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.117: couldn't read orphan inode 15 (err -117) [ 273.044581][ T6443] loop2: lost filesystem error report for type 5 error -117 [ 273.068353][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.085470][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.160646][ T6443] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 273.231499][ T6443] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 273.281494][ T6443] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.117: Corrupt directory, running e2fsck is recommended [ 273.396960][ T6256] team0: Port device team_slave_0 added [ 273.458183][ T6256] team0: Port device team_slave_1 added [ 273.673228][ T6449] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 273.731558][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.731696][ T6449] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 273.773103][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.823312][ T6453] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 273.845976][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.868015][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.888891][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.919366][ T6453] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 273.957370][ T6449] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.117: Corrupt directory, running e2fsck is recommended [ 273.961407][ T6453] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.117: Corrupt directory, running e2fsck is recommended [ 273.993060][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.007012][ T6426] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 274.089444][ T6454] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 274.149514][ T6454] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.117: path /28/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 274.260135][ T6454] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 2: comm syz.2.117: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0 [ 274.604557][ T6256] hsr_slave_0: entered promiscuous mode [ 274.627007][ T6256] hsr_slave_1: entered promiscuous mode [ 274.664200][ T6256] debugfs: 'hsr0' already exists in 'hsr' [ 274.670134][ T6256] Cannot create hsr debugfs directory [ 274.768670][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.548280][ T6466] loop4: detected capacity change from 0 to 512 [ 275.588692][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.633042][ T6466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 275.641613][ T6466] System zones: 1-12 [ 275.662957][ T6466] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.120: corrupted in-inode xattr: e_value size too large [ 275.709051][ T6466] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 275.710544][ T6466] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.120: couldn't read orphan inode 15 (err -117) [ 275.720237][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 275.720324][ C1] EXT4-fs (loop4): initial error at time 1776145038: ext4_iget_extra_inode:5040: inode 15 [ 275.720478][ C1] EXT4-fs (loop4): last error at time 1776145038: ext4_iget_extra_inode:5040: inode 15 [ 275.842878][ T6466] loop4: lost filesystem error report for type 5 error -117 [ 275.854619][ T6466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.998217][ T6466] mmap: syz.4.120 (6466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 276.224618][ T6172] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.298056][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.305833][ T6127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.572297][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.579942][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.930479][ T6256] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.135970][ T6256] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.218636][ T6256] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.351915][ T6256] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.375985][ T5786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.279763][ T6503] loop2: detected capacity change from 0 to 2048 [ 280.303230][ T6503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.317746][ T6503] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.156398][ T6510] loop4: detected capacity change from 0 to 256 [ 282.343194][ T6510] vfat: Deprecated parameter 'posix' [ 282.403277][ T6510] FAT-fs: "posix" option is obsolete, not supported now [ 282.449280][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.106556][ T6256] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.453858][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.461379][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.716882][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.724449][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.381840][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.392931][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.403274][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.428041][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.452520][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.481146][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.596916][ T5778] Bluetooth: hci3: command tx timeout [ 289.886846][ T6537] syzkaller0: entered promiscuous mode [ 289.902670][ T6537] syzkaller0: entered allmulticast mode [ 290.925489][ T6571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 291.683451][ T5782] Bluetooth: hci3: command tx timeout [ 292.121376][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.420379][ T6521] chnl_net:caif_netlink_parms(): no params data found [ 293.116152][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 293.116238][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 293.122329][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 293.335454][ T6386] bridge_slave_1: left allmulticast mode [ 293.341361][ T6386] bridge_slave_1: left promiscuous mode [ 293.369076][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.423627][ T6386] bridge_slave_0: left allmulticast mode [ 293.429474][ T6386] bridge_slave_0: left promiscuous mode [ 293.457828][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.752677][ T5778] Bluetooth: hci3: command tx timeout [ 293.919512][ T5833] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 294.099599][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.135074][ T5833] usb 3-1: not running at top speed; connect to a high speed hub [ 294.157552][ T5833] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 294.192593][ T5833] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 294.205261][ T6386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.214068][ T5833] usb 3-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=87.a6 [ 294.214204][ T5833] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 294.214313][ T5833] usb 3-1: Product: syz [ 294.214404][ T5833] usb 3-1: Manufacturer: syz [ 294.214494][ T5833] usb 3-1: SerialNumber: syz [ 294.330805][ T6386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.347789][ T6386] bond0 (unregistering): Released all slaves [ 294.518509][ T6592] loop2: detected capacity change from 0 to 256 [ 294.587046][ T6592] vfat: Bad value for 'check' [ 294.897034][ T6386] hsr_slave_0: left promiscuous mode [ 295.049611][ T6386] hsr_slave_1: left promiscuous mode [ 295.061955][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.105932][ T6386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.374396][ T6599] loop3: detected capacity change from 0 to 16 [ 295.560404][ T6599] erofs (device loop3): mounted with root inode @ nid 36. [ 295.678835][ T29] audit: type=1800 audit(1776145058.927:5): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.139" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 295.833401][ T5778] Bluetooth: hci3: command tx timeout [ 296.324784][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 296.373894][ T6601] loop4: detected capacity change from 0 to 4096 [ 296.399945][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 297.096259][ T5909] usb 3-1: USB disconnect, device number 3 [ 298.080230][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.148716][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.194294][ T6521] bridge_slave_0: entered allmulticast mode [ 298.353677][ T6620] loop4: detected capacity change from 0 to 16 [ 299.297709][ T6521] bridge_slave_0: entered promiscuous mode [ 299.319512][ T6620] erofs (device loop4): mounted with root inode @ nid 36. [ 300.369468][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.386953][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.419058][ T6521] bridge_slave_1: entered allmulticast mode [ 300.503146][ T6521] bridge_slave_1: entered promiscuous mode [ 301.748926][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.276028][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.912732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 303.732892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 304.157429][ T6521] team0: Port device team_slave_0 added [ 304.250786][ T6521] team0: Port device team_slave_1 added [ 304.632169][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.664038][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.687509][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.726929][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.753458][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.765455][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.811867][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.916350][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.957979][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.992798][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.052795][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.604949][ T6652] loop2: detected capacity change from 0 to 256 [ 306.452841][ T6652] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.463735][ T6652] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 306.882866][ T5778] Bluetooth: hci5: command tx timeout [ 308.795174][ T6652] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 308.828112][ T6652] exFAT-fs (loop2): failed to load alloc-bitmap [ 308.834795][ T6652] exFAT-fs (loop2): failed to recognize exfat type [ 308.956314][ T5778] Bluetooth: hci5: command tx timeout [ 308.978534][ T6521] hsr_slave_0: entered promiscuous mode [ 309.035634][ T6521] hsr_slave_1: entered promiscuous mode [ 310.001802][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.011598][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.022076][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.036945][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.054384][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.909508][ T6672] loop2: detected capacity change from 0 to 16 [ 311.042993][ T5788] Bluetooth: hci5: command tx timeout [ 311.902711][ T6672] erofs (device loop2): mounted with root inode @ nid 36. [ 312.152749][ T5788] Bluetooth: hci6: command tx timeout [ 312.743472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 313.112672][ T5778] Bluetooth: hci5: command tx timeout [ 314.232851][ T5778] Bluetooth: hci6: command tx timeout [ 315.218345][ T6691] loop2: detected capacity change from 0 to 2048 [ 315.410023][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.433209][ T5778] Bluetooth: hci6: command tx timeout [ 316.497789][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.739305][ T13] bridge_slave_1: left allmulticast mode [ 316.788696][ T13] bridge_slave_1: left promiscuous mode [ 316.820214][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.915764][ T13] bridge_slave_0: left allmulticast mode [ 316.921627][ T13] bridge_slave_0: left promiscuous mode [ 316.980085][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.990273][ T6703] virtio-fs: tag not found [ 318.473230][ T5778] Bluetooth: hci6: command tx timeout [ 319.682961][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.770292][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.846305][ T13] bond0 (unregistering): Released all slaves [ 320.263910][ T13] hsr_slave_0: left promiscuous mode [ 320.315006][ T13] hsr_slave_1: left promiscuous mode [ 320.347279][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.432689][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.951973][ T13] team0 (unregistering): Port device team_slave_1 removed [ 322.025479][ T13] team0 (unregistering): Port device team_slave_0 removed [ 322.657399][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 325.705234][ T6521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.980207][ T6521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.080590][ T6521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.176684][ T6521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.504269][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 326.896316][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.933219][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.187221][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.218261][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.259792][ T6644] bridge_slave_0: entered allmulticast mode [ 327.303686][ T6644] bridge_slave_0: entered promiscuous mode [ 327.398922][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.419636][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.464190][ T6644] bridge_slave_1: entered allmulticast mode [ 327.509614][ T6644] bridge_slave_1: entered promiscuous mode [ 329.622222][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.736298][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.175032][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.609658][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.073351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 331.079092][ T6787] virtio-fs: tag not found [ 331.523801][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.535629][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.543693][ T6659] bridge_slave_0: entered allmulticast mode [ 331.553513][ T6659] bridge_slave_0: entered promiscuous mode [ 331.581497][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.600376][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.608327][ T6659] bridge_slave_1: entered allmulticast mode [ 331.617705][ T6659] bridge_slave_1: entered promiscuous mode [ 331.678868][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.750615][ T6644] team0: Port device team_slave_0 added [ 331.840784][ T6644] team0: Port device team_slave_1 added [ 332.109807][ T6795] loop4: detected capacity change from 0 to 8 [ 332.138282][ T6795] unable to read xattr id index table [ 332.188019][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.501442][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.557226][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.617317][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.633923][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.691531][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.729158][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.752848][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.810475][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.111412][ T6659] team0: Port device team_slave_0 added [ 333.149173][ T6659] team0: Port device team_slave_1 added [ 333.494679][ T6644] hsr_slave_0: entered promiscuous mode [ 333.510229][ T6644] hsr_slave_1: entered promiscuous mode [ 333.526368][ T6644] debugfs: 'hsr0' already exists in 'hsr' [ 333.542120][ T6644] Cannot create hsr debugfs directory [ 333.551224][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.560453][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.591532][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.773416][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.780550][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.807859][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.987167][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.006797][ T53] bridge_slave_1: left allmulticast mode [ 334.026570][ T53] bridge_slave_1: left promiscuous mode [ 334.053469][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.078451][ T53] bridge_slave_0: left allmulticast mode [ 334.091162][ T53] bridge_slave_0: left promiscuous mode [ 334.103455][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.869394][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.904736][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.928042][ T53] bond0 (unregistering): Released all slaves [ 335.340215][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.555297][ T6803] overlayfs: failed to resolve './file1': -2 [ 335.683858][ T6659] hsr_slave_0: entered promiscuous mode [ 335.717410][ T6659] hsr_slave_1: entered promiscuous mode [ 335.739208][ T6659] debugfs: 'hsr0' already exists in 'hsr' [ 335.752718][ T6659] Cannot create hsr debugfs directory [ 336.129677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.137098][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.214497][ T53] hsr_slave_0: left promiscuous mode [ 336.233814][ T53] hsr_slave_1: left promiscuous mode [ 336.245957][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.263088][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.284123][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.291637][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.353073][ T53] veth1_macvtap: left promiscuous mode [ 336.358718][ T53] veth0_macvtap: left promiscuous mode [ 336.383019][ T53] veth1_vlan: left promiscuous mode [ 336.388470][ T53] veth0_vlan: left promiscuous mode [ 338.926476][ T6807] misc userio: Invalid payload size [ 338.960777][ T6807] misc userio: Invalid payload size [ 338.995813][ T53] team0 (unregistering): Port device team_slave_1 removed [ 339.067983][ T53] team0 (unregistering): Port device team_slave_0 removed [ 340.217492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.224914][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.330937][ T6659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 342.443831][ T6659] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 342.492286][ T6659] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 342.521288][ T6659] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 342.996555][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.256368][ T6825] virtio-fs: tag not found [ 343.485034][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.601228][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.608671][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.697313][ T6644] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 343.745411][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.773482][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.789035][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.801863][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.815327][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.816192][ T6644] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 343.967616][ T6644] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.065744][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.073123][ T6127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.158351][ T6644] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 345.913152][ T5778] Bluetooth: hci0: command tx timeout [ 347.323845][ T53] bridge_slave_1: left allmulticast mode [ 347.329681][ T53] bridge_slave_1: left promiscuous mode [ 347.367297][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.477894][ T53] bridge_slave_0: left allmulticast mode [ 347.502953][ T53] bridge_slave_0: left promiscuous mode [ 347.509459][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.992672][ T5778] Bluetooth: hci0: command tx timeout [ 348.481900][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.512804][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.553841][ T53] bond0 (unregistering): Released all slaves [ 348.790581][ T53] hsr_slave_0: left promiscuous mode [ 348.816112][ T53] hsr_slave_1: left promiscuous mode [ 348.855852][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.871826][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.683128][ T6851] loop4: detected capacity change from 0 to 1024 [ 349.715206][ T6851] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 349.773194][ T6851] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 349.837854][ T6851] EXT4-fs (loop4): invalid journal inode [ 349.864240][ T6851] EXT4-fs (loop4): can't get journal size [ 349.886585][ T6851] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.186: blocks 3-3 from inode overlap system zone [ 349.926858][ T6851] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 349.928477][ T6851] EXT4-fs (loop4): failed to initialize system zone (-117) [ 349.938010][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 349.938101][ C0] EXT4-fs (loop4): initial error at time 1776145113: ext4_protect_reserved_inode:182: inode 2 [ 349.938256][ C0] EXT4-fs (loop4): last error at time 1776145113: ext4_protect_reserved_inode:182: inode 2 [ 350.039794][ T53] team0 (unregistering): Port device team_slave_1 removed [ 350.053164][ T6851] EXT4-fs (loop4): mount failed [ 350.073217][ T5778] Bluetooth: hci0: command tx timeout [ 350.103107][ T53] team0 (unregistering): Port device team_slave_0 removed [ 350.570573][ T6828] chnl_net:caif_netlink_parms(): no params data found [ 351.284274][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.390329][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.612164][ T6862] binder: 6856:6862 ioctl 4018620d 0 returned -22 [ 351.630362][ T6862] binder: 6856:6862 ioctl c0306201 200000000240 returned -11 [ 351.876770][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.981950][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.989669][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.155882][ T5778] Bluetooth: hci0: command tx timeout [ 352.208992][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.216572][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.049672][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.076163][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.101650][ T6828] bridge_slave_0: entered allmulticast mode [ 354.130739][ T6828] bridge_slave_0: entered promiscuous mode [ 354.179470][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.203318][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.245937][ T6828] bridge_slave_1: entered allmulticast mode [ 354.256179][ T6828] bridge_slave_1: entered promiscuous mode [ 354.666036][ T6828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.738827][ T6828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.213615][ T6828] team0: Port device team_slave_0 added [ 355.296385][ T6828] team0: Port device team_slave_1 added [ 355.650927][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.703345][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.851502][ T6828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.935787][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.976986][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.014529][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.114145][ T6828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.062764][ T6905] virtio-fs: tag not found [ 357.109237][ T6906] Zero length message leads to an empty skb [ 357.279096][ T1066] IPVS: starting estimator thread 0... [ 358.373625][ T6907] IPVS: using max 240 ests per chain, 12000 per kthread [ 359.420871][ T6828] hsr_slave_0: entered promiscuous mode [ 359.457461][ T6828] hsr_slave_1: entered promiscuous mode [ 359.620746][ T6659] veth0_vlan: entered promiscuous mode [ 360.566772][ T6659] veth1_vlan: entered promiscuous mode [ 362.354716][ T6659] veth0_macvtap: entered promiscuous mode [ 363.030097][ T6659] veth1_macvtap: entered promiscuous mode [ 363.274588][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 363.298034][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.317608][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.332273][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.378885][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.405088][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.462626][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 363.476117][ T5835] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 363.515426][ T5835] usb 3-1: config 0 has no interface number 0 [ 363.521768][ T5835] usb 3-1: config 0 interface 184 has no altsetting 0 [ 363.541775][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.590170][ T5835] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 363.641948][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.667242][ T5835] usb 3-1: Product: syz [ 363.671619][ T5835] usb 3-1: Manufacturer: syz [ 363.703988][ T5835] usb 3-1: SerialNumber: syz [ 363.712204][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.735485][ T5835] usb 3-1: config 0 descriptor?? [ 363.961840][ T187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.109356][ T187] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.139585][ T187] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.313397][ T5835] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 364.349793][ T187] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.362623][ T5835] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 364.380365][ T5835] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 364.407251][ T5835] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 365.150971][ T6828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.241023][ T6828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.337527][ T6828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.481149][ T6828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.514264][ T5778] Bluetooth: hci2: command tx timeout [ 365.698233][ T6936] chnl_net:caif_netlink_parms(): no params data found [ 366.064915][ T5835] usb 3-1: USB disconnect, device number 4 [ 366.796640][ T62] bridge_slave_1: left allmulticast mode [ 366.812741][ T62] bridge_slave_1: left promiscuous mode [ 366.819258][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.987940][ T62] bridge_slave_0: left allmulticast mode [ 366.996385][ T62] bridge_slave_0: left promiscuous mode [ 367.017189][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.613378][ T5778] Bluetooth: hci2: command tx timeout [ 367.749849][ T6962] ALSA: mixer_oss: invalid OSS volume '' [ 368.649725][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.740330][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.758776][ T62] bond0 (unregistering): Released all slaves [ 369.102042][ T6969] virtio-fs: tag not found [ 369.702971][ T5778] Bluetooth: hci2: command tx timeout [ 371.217998][ T6979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.320808][ T62] hsr_slave_0: left promiscuous mode [ 371.367676][ T62] hsr_slave_1: left promiscuous mode [ 371.388079][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.424766][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.558828][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.571422][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.584338][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.620417][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.635163][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.754055][ T5778] Bluetooth: hci2: command tx timeout [ 372.412821][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 372.573099][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 372.600996][ T5909] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.627322][ T5909] usb 3-1: config 0 has no interface number 0 [ 372.652048][ T5909] usb 3-1: config 0 interface 184 has no altsetting 0 [ 372.680736][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 372.701043][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.723408][ T62] team0 (unregistering): Port device team_slave_1 removed [ 372.742861][ T5909] usb 3-1: Product: syz [ 372.762757][ T5909] usb 3-1: Manufacturer: syz [ 372.767569][ T5909] usb 3-1: SerialNumber: syz [ 372.798986][ T5909] usb 3-1: config 0 descriptor?? [ 372.817960][ T62] team0 (unregistering): Port device team_slave_0 removed [ 373.379688][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.393936][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.402174][ T6936] bridge_slave_0: entered allmulticast mode [ 373.431188][ T6936] bridge_slave_0: entered promiscuous mode [ 373.657890][ T5909] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 373.673088][ T5778] Bluetooth: hci3: command tx timeout [ 373.915360][ T5909] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 374.252660][ T5909] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 374.307667][ T5909] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 374.714439][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.721939][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.733640][ T6936] bridge_slave_1: entered allmulticast mode [ 375.400438][ T5909] usb 3-1: USB disconnect, device number 5 [ 375.694152][ T6936] bridge_slave_1: entered promiscuous mode [ 375.714449][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.795082][ T5778] Bluetooth: hci3: command tx timeout [ 376.391742][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.460905][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.600550][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.716671][ T7016] virtio-fs: tag not found [ 377.164703][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.172261][ T6386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.451363][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.458977][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.574495][ T6936] team0: Port device team_slave_0 added [ 377.676215][ T62] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.738280][ T6936] team0: Port device team_slave_1 added [ 377.832808][ T5778] Bluetooth: hci3: command tx timeout [ 378.061441][ T62] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.327636][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.372727][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.489086][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.657659][ C1] ===================================================== [ 378.664900][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 378.673734][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 378.680131][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 378.687405][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 378.693466][ C1] sysvec_call_function_single+0x7c/0x90 [ 378.699272][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 378.705395][ C1] __msan_metadata_ptr_for_load_1+0x2b/0x40 [ 378.711455][ C1] strlen+0x3a/0x80 [ 378.715364][ C1] kernfs_iop_get_link+0x635/0xf60 [ 378.720635][ C1] vfs_readlink+0x548/0x9e0 [ 378.725347][ C1] do_readlinkat+0x311/0x7f0 [ 378.730070][ C1] __x64_sys_readlink+0x9a/0x100 [ 378.735126][ C1] x64_sys_call+0x3630/0x3ea0 [ 378.739945][ C1] do_syscall_64+0x134/0xf80 [ 378.744686][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.750705][ C1] [ 378.753082][ C1] Local variable s created at: [ 378.757907][ C1] vmx_get_segment_base+0x3d/0x310 [ 378.763134][ C1] emulator_get_cached_segment_base+0x4a/0x60 [ 378.769340][ C1] [ 378.771757][ C1] CPU: 1 UID: 0 PID: 5132 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 378.780728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 378.790892][ C1] ===================================================== [ 378.797985][ C1] Disabling lock debugging due to kernel taint [ 378.804302][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 378.810819][ C1] CPU: 1 UID: 0 PID: 5132 Comm: udevd Tainted: G B syzkaller #0 PREEMPT(full) [ 378.821418][ C1] Tainted: [B]=BAD_PAGE [ 378.825639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 378.835837][ C1] Call Trace: [ 378.839364][ C1] [ 378.842284][ C1] __dump_stack+0x26/0x30 [ 378.846837][ C1] dump_stack_lvl+0x50/0x1c0 [ 378.851651][ C1] ? dump_stack+0x12/0x25 [ 378.856119][ C1] dump_stack+0x1e/0x25 [ 378.860426][ C1] vpanic+0x7b4/0x1430 [ 378.864658][ C1] panic+0x15d/0x160 [ 378.868738][ C1] kmsan_report+0x31a/0x320 [ 378.873359][ C1] ? __msan_warning+0x1b/0x30 [ 378.878184][ C1] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 378.884833][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 378.892182][ C1] ? __sysvec_call_function_single+0x4b/0x3e0 [ 378.898411][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 378.904381][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 378.910677][ C1] ? __msan_metadata_ptr_for_load_1+0x2b/0x40 [ 378.916911][ C1] ? strlen+0x3a/0x80 [ 378.920994][ C1] ? kernfs_iop_get_link+0x635/0xf60 [ 378.926435][ C1] ? vfs_readlink+0x548/0x9e0 [ 378.931236][ C1] ? do_readlinkat+0x311/0x7f0 [ 378.936139][ C1] ? __x64_sys_readlink+0x9a/0x100 [ 378.941405][ C1] ? x64_sys_call+0x3630/0x3ea0 [ 378.946405][ C1] ? do_syscall_64+0x134/0xf80 [ 378.951510][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.957724][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 378.962961][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 378.969463][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 378.975689][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 378.980932][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 378.986887][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 378.992134][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 378.998644][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 379.003893][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.009853][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 379.015095][ C1] __msan_warning+0x1b/0x30 [ 379.019755][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 379.026146][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 379.032120][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 379.039222][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 379.045294][ C1] sysvec_call_function_single+0x7c/0x90 [ 379.051124][ C1] [ 379.054131][ C1] [ 379.057219][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 379.063372][ C1] RIP: 0010:__msan_metadata_ptr_for_load_1+0x2b/0x40 [ 379.070275][ C1] Code: 0f 1e fa 55 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 be 01 00 00 00 31 d2 e8 0c 29 00 00 48 89 5d f0 ff 75 f0 <9d> 48 83 c4 10 5b 5d c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 [ 379.090029][ C1] RSP: 0018:ffff88810f52fc00 EFLAGS: 00000286 [ 379.096225][ C1] RAX: ffff888234869ea3 RBX: 0000000000000282 RCX: 0000000000a9ef61 [ 379.104306][ C1] RDX: ffff88821fcadea0 RSI: 0000000000000001 RDI: ffffffff92425ea0 [ 379.112387][ C1] RBP: ffff88810f52fc20 R08: ffffea000000000f R09: 0000000000000004 [ 379.120555][ C1] R10: ffff888059589009 R11: ffff8882348b85a5 R12: 0000000000000000 [ 379.128658][ C1] R13: 0000000000000006 R14: ffffffff92425ea3 R15: ffff888116f20bc8 [ 379.136798][ C1] strlen+0x3a/0x80 [ 379.140729][ C1] kernfs_iop_get_link+0x635/0xf60 [ 379.146054][ C1] ? __pfx_kernfs_iop_get_link+0x10/0x10 [ 379.151847][ C1] vfs_readlink+0x548/0x9e0 [ 379.156591][ C1] do_readlinkat+0x311/0x7f0 [ 379.161344][ C1] __x64_sys_readlink+0x9a/0x100 [ 379.166434][ C1] x64_sys_call+0x3630/0x3ea0 [ 379.171295][ C1] do_syscall_64+0x134/0xf80 [ 379.176099][ C1] ? clear_bhb_loop+0x50/0xa0 [ 379.181043][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.187161][ C1] RIP: 0033:0x7f461bb153a7 [ 379.191685][ C1] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 379.211451][ C1] RSP: 002b:00007fff7e381548 EFLAGS: 00000202 ORIG_RAX: 0000000000000059 [ 379.220025][ C1] RAX: ffffffffffffffda RBX: 00007fff7e381d90 RCX: 00007f461bb153a7 [ 379.228133][ C1] RDX: 0000000000000400 RSI: 00007fff7e381950 RDI: 00007fff7e381550 [ 379.236233][ C1] RBP: 0000000000000200 R08: 000055fcdccc6c29 R09: 0000000000000000 [ 379.244309][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff7e381550 [ 379.252462][ C1] R13: 00007fff7e381950 R14: 0000000000000000 R15: 00007fff7e3822a0 [ 379.260570][ C1] [ 379.264061][ C1] Kernel Offset: disabled [ 379.268491][ C1] Rebooting in 86400 seconds..