last executing test programs: 55.226979976s ago: executing program 2 (id=3386): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000380), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 53.394504204s ago: executing program 2 (id=3391): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 52.450687649s ago: executing program 2 (id=3394): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 51.168333559s ago: executing program 2 (id=3401): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000015c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d06000000a705251e6182949a3651f60a84c9f4d493ddc1f6f17c3812cde900000000000000ba111a43a5316cef8cc2d6f36874a492", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x102) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 50.501512409s ago: executing program 2 (id=3402): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 49.120764341s ago: executing program 2 (id=3409): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$kcm(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@random="99177fa54f29", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000500", 0x14, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x80}, "bab31033"}}}}}}}, 0x0) 33.457425127s ago: executing program 32 (id=3409): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket$kcm(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@random="99177fa54f29", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000500", 0x14, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x80}, "bab31033"}}}}}}}, 0x0) 9.644526779s ago: executing program 1 (id=3532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 7.966516855s ago: executing program 1 (id=3536): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000380), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x803e000000000000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) 6.237659482s ago: executing program 1 (id=3540): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000037c0)=""/4070, 0xfe6}, {&(0x7f00000017c0)=""/4069, 0xfe5}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x5}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 6.107274924s ago: executing program 0 (id=3542): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 6.015753526s ago: executing program 0 (id=3544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 6.015024936s ago: executing program 1 (id=3545): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 5.960898146s ago: executing program 4 (id=3546): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8/\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r1, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, r1, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x0, &(0x7f0000000200)=""/116, &(0x7f0000000380)=0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x33, 0x107, 0x0, 0xf000, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) 5.12447934s ago: executing program 3 (id=3549): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000380), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x803e000000000000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) 4.786945365s ago: executing program 0 (id=3550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, r5) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 4.772288075s ago: executing program 4 (id=3551): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x85, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x5, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x3, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 3.269679489s ago: executing program 1 (id=3552): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 3.264802149s ago: executing program 3 (id=3553): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 3.2164992s ago: executing program 4 (id=3554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.510954521s ago: executing program 0 (id=3555): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/93, 0x5d}, {&(0x7f00000037c0)=""/4070, 0xfe6}, {&(0x7f00000017c0)=""/4069, 0xfe5}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f00000001c0)=""/138, 0x8a}], 0x5}, 0x40000100) sendmsg$inet(r0, 0x0, 0x20000000) 2.501121751s ago: executing program 3 (id=3556): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(r0, 0x1261) 2.445306932s ago: executing program 4 (id=3557): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r1, 0xffffffffffffffff, 0x0) 2.301325414s ago: executing program 3 (id=3558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000001f40)={'syz', 0x2}, 0x0, 0x0, r5) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 2.282550704s ago: executing program 4 (id=3559): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8/\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x3) setxattr$trusted_overlay_origin(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x0, 0x0, 0x2) 1.165261272s ago: executing program 3 (id=3561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x800, 0x70bd26, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000004a80)=0xffff8000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, &(0x7f0000000280)) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r7 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x7}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) read$msr(r2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x40018}, 0x800) 1.116733483s ago: executing program 0 (id=3562): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8/\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r1, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, r1, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x0, &(0x7f0000000200)=""/116, &(0x7f0000000380)=0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x33, 0x107, 0x0, 0xf000, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) kernel console output (not intermixed with test programs): 0:50:50:50 [ 74.746444][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.776453][ T5085] Bluetooth: hci0: command tx timeout [ 74.781917][ T5781] Bluetooth: hci2: command tx timeout [ 74.781950][ T50] Bluetooth: hci3: command tx timeout [ 74.792878][ T5780] Bluetooth: hci1: command tx timeout [ 74.863530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.086706][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.295737][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.723347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 75.732010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.765857][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.776347][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.853592][ T5780] Bluetooth: hci1: command tx timeout [ 76.859170][ T50] Bluetooth: hci2: command tx timeout [ 76.864866][ T50] Bluetooth: hci3: command tx timeout [ 76.870870][ T5780] Bluetooth: hci0: command tx timeout [ 76.990724][ T5883] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 77.011085][ T28] kernel read not supported for file /vga_arbiter (pid: 28 comm: kworker/1:1) [ 78.573768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.626606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.693209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 78.704602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.812095][ T5920] input: syz1 as /devices/virtual/input/input5 [ 79.512190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.126505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.499704][ T5933] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 81.252967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.614986][ T5955] syz.3.28[5955]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.698306][ T5955] loop3: detected capacity change from 0 to 512 [ 82.016698][ T785] cfg80211: failed to load regulatory.db [ 82.583319][ T5955] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.720586][ T5955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.978829][ T5967] input: syz1 as /devices/virtual/input/input6 [ 82.991832][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.995000][ T5955] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.28: corrupted in-inode xattr: bad e_name length [ 83.804341][ T5955] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.28: couldn't read orphan inode 15 (err -117) [ 83.836840][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.678046][ T5996] loop1: detected capacity change from 0 to 64 [ 85.114969][ T5996] hfs: bad catalog entry type 0 [ 85.850766][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.577803][ T6018] input: syz1 as /devices/virtual/input/input7 [ 87.955531][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.971641][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.993455][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.023373][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.169187][ T6036] loop1: detected capacity change from 0 to 512 [ 88.252765][ T6036] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.818484][ T6036] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.53: corrupted in-inode xattr: bad e_name length [ 88.853697][ T6036] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.53: couldn't read orphan inode 15 (err -117) [ 89.131870][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.463677][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.753372][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 90.760058][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.766729][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 90.781810][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 90.795552][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.811664][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.852486][ T6064] input: syz1 as /devices/virtual/input/input8 [ 90.903409][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.933572][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.187675][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 91.217445][ T23] usbtmc 3-1:16.0: can't read capabilities [ 91.411197][ T23] usb 3-1: USB disconnect, device number 2 [ 95.083990][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.162388][ T6119] input: syz1 as /devices/virtual/input/input9 [ 95.273179][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 95.287694][ T5812] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.311006][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.331597][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.351760][ T5812] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.365012][ T5812] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.374120][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.610770][ T5812] usb 4-1: GET_CAPABILITIES returned 0 [ 95.617106][ T5812] usbtmc 4-1:16.0: can't read capabilities [ 95.825172][ T5861] usb 4-1: USB disconnect, device number 2 [ 97.175076][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.182906][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.915346][ T6140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.005444][ T6140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.103511][ T6144] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 98.306339][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 100.161808][ T5773] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.693304][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 100.778115][ T5773] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 100.888007][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.899441][ T5773] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.910849][ T5773] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.024999][ T5773] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.034284][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.765522][ T5773] usb 3-1: GET_CAPABILITIES returned 0 [ 101.791130][ T5773] usbtmc 3-1:16.0: can't read capabilities [ 101.839205][ T5773] usb 3-1: USB disconnect, device number 3 [ 106.893297][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.085006][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 107.121835][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 107.133304][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.143659][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.180214][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.198396][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.218321][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.738446][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 108.447932][ T9] usbtmc 2-1:16.0: can't read capabilities [ 108.675714][ T9] usb 2-1: USB disconnect, device number 2 [ 116.251386][ T6323] loop3: detected capacity change from 0 to 1024 [ 117.433198][ T6332] hfsplus: request for non-existent node 211 in B*Tree [ 117.440315][ T6332] hfsplus: request for non-existent node 211 in B*Tree [ 117.895119][ T6327] 9pnet_fd: Insufficient options for proto=fd [ 119.449037][ T6341] batman_adv: batadv0: Adding interface: ip6gretap1 [ 119.493349][ T6341] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.648773][ T6341] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 121.789137][ T6370] loop1: detected capacity change from 0 to 1024 [ 122.738620][ T6376] loop0: detected capacity change from 0 to 512 [ 123.662052][ T6376] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.787235][ T6376] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.141: corrupted in-inode xattr: bad e_name length [ 125.577962][ T6376] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.141: couldn't read orphan inode 15 (err -117) [ 125.634241][ T6376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.634900][ T6394] batman_adv: batadv0: Adding interface: ip6gretap1 [ 125.654927][ T6394] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.680802][ T6394] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 126.483763][ T6402] input: syz1 as /devices/virtual/input/input10 [ 129.777742][ T6432] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 129.994153][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.622117][ T6439] input: syz1 as /devices/virtual/input/input11 [ 133.110019][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.116510][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.215027][ T6477] loop1: detected capacity change from 0 to 512 [ 134.228307][ T6484] loop2: detected capacity change from 0 to 1024 [ 134.243179][ T6477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.316992][ T6477] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.170: corrupted in-inode xattr: bad e_name length [ 134.360105][ T6477] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.170: couldn't read orphan inode 15 (err -117) [ 134.378345][ T6477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.062537][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.393543][ T6544] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 139.558538][ T5776] kernel read not supported for file /vga_arbiter (pid: 5776 comm: kworker/0:5) [ 139.768244][ T6549] loop3: detected capacity change from 0 to 164 [ 139.807264][ T6549] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.020929][ T6556] loop1: detected capacity change from 0 to 1024 [ 146.400865][ T6597] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 146.690491][ T785] kernel read not supported for file /vga_arbiter (pid: 785 comm: kworker/0:2) [ 148.472142][ T6629] loop2: detected capacity change from 0 to 1024 [ 150.967884][ T6651] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 150.980296][ T5861] kernel read not supported for file /vga_arbiter (pid: 5861 comm: kworker/1:7) [ 152.786307][ T6667] Zero length message leads to an empty skb [ 155.959040][ T6703] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 156.115638][ T785] kernel read not supported for file /vga_arbiter (pid: 785 comm: kworker/0:2) [ 165.303149][ T28] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.770203][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 165.777509][ T28] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 165.794099][ T28] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 165.804396][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.812415][ T28] usb 3-1: Product: syz [ 165.817448][ T28] usb 3-1: Manufacturer: syz [ 165.822039][ T28] usb 3-1: SerialNumber: syz [ 165.830923][ T28] usb 3-1: config 0 descriptor?? [ 166.434063][ T6800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.571318][ T28] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 167.452773][ T6831] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.491739][ T785] IPVS: starting estimator thread 0... [ 167.623509][ T6838] IPVS: using max 25 ests per chain, 60000 per kthread [ 167.949633][ T5839] usb 3-1: USB disconnect, device number 4 [ 167.949743][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 172.511541][ T6891] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.524457][ T5839] IPVS: starting estimator thread 0... [ 172.532950][ T6896] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 172.555190][ T5839] kernel read not supported for file /vga_arbiter (pid: 5839 comm: kworker/0:6) [ 172.633154][ T6898] IPVS: using max 22 ests per chain, 52800 per kthread [ 178.533029][ C0] sched: RT throttling activated [ 179.103181][ T6952] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.660574][ T6979] input: syz0 as /devices/virtual/input/input13 [ 184.880766][ T6990] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.888819][ T5812] IPVS: starting estimator thread 0... [ 184.973148][ T6993] IPVS: using max 20 ests per chain, 48000 per kthread [ 185.883801][ T7000] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 185.905789][ T785] kernel read not supported for file /vga_arbiter (pid: 785 comm: kworker/0:2) [ 190.447687][ T7036] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.739534][ T785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 190.943095][ T785] usb 1-1: Using ep0 maxpacket: 32 [ 190.950485][ T785] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 191.276320][ T785] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 191.813183][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.821360][ T785] usb 1-1: Product: syz [ 191.833872][ T785] usb 1-1: Manufacturer: syz [ 191.838523][ T785] usb 1-1: SerialNumber: syz [ 191.851954][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 191.856458][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 191.858090][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 191.864104][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.889392][ T785] usb 1-1: config 0 descriptor?? [ 191.908295][ T7031] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.932771][ T785] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 192.478885][ T28] usb 1-1: USB disconnect, device number 2 [ 192.478936][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 194.754731][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.761244][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.058508][ T7075] input: syz0 as /devices/virtual/input/input15 [ 197.207354][ T7069] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.233984][ T7111] affs: No valid root block on device nullb0 [ 204.184754][ T7124] input: syz0 as /devices/virtual/input/input16 [ 217.845300][ T7229] input: syz0 as /devices/virtual/input/input17 [ 218.033929][ T7228] input: syz0 as /devices/virtual/input/input18 [ 223.492113][ T7280] overlayfs: failed to resolve './file0': -2 [ 229.623074][ T5839] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 229.801432][ T7355] input: syz1 as /devices/virtual/input/input19 [ 230.112285][ T5839] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 230.132510][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.250667][ T5839] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 230.463019][ T5839] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 230.485080][ T5839] usb 2-1: Manufacturer: syz [ 230.493670][ T5839] usb 2-1: config 0 descriptor?? [ 230.913061][ T5839] rc_core: IR keymap rc-hauppauge not found [ 230.942680][ T5839] Registered IR keymap rc-empty [ 230.957307][ T5839] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 230.999010][ T5839] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 231.041060][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 231.081718][ T5839] usb 2-1: USB disconnect, device number 3 [ 233.779531][ T7403] input: syz0 as /devices/virtual/input/input21 [ 235.753593][ T7408] input: syz1 as /devices/virtual/input/input22 [ 236.776974][ T7425] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 236.821989][ T28] kernel read not supported for file /vga_arbiter (pid: 28 comm: kworker/1:1) [ 237.288422][ T7434] input: syz0 as /devices/virtual/input/input23 [ 242.309488][ T7471] input: syz0 as /devices/virtual/input/input24 [ 249.469716][ T7535] affs: No valid root block on device nullb0 [ 249.657772][ T7539] affs: No valid root block on device nullb0 [ 253.597201][ T7565] affs: No valid root block on device nullb0 [ 255.379221][ T7573] affs: No valid root block on device nullb0 [ 257.093192][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.099488][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.144490][ T7600] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.658036][ T7609] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 260.699249][ T5861] kernel read not supported for file /vga_arbiter (pid: 5861 comm: kworker/1:7) [ 261.003325][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 261.287676][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 261.301745][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.024457][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 262.053336][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 262.061520][ T9] usb 2-1: Manufacturer: syz [ 262.114656][ T9] usb 2-1: config 0 descriptor?? [ 262.242517][ T7623] overlayfs: failed to resolve './file0': -2 [ 262.253354][ T9] rc_core: IR keymap rc-hauppauge not found [ 262.259309][ T9] Registered IR keymap rc-empty [ 262.294126][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 262.339036][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25 [ 262.395772][ T9] usb 2-1: USB disconnect, device number 4 [ 267.365531][ T7666] affs: No valid root block on device nullb0 [ 268.621505][ T7674] overlayfs: failed to resolve './file0': -2 [ 272.130698][ T7700] netlink: 84 bytes leftover after parsing attributes in process `syz.2.490'. [ 275.267425][ T7733] input: syz1 as /devices/virtual/input/input26 [ 277.032623][ T7742] affs: No valid root block on device nullb0 [ 279.026080][ T7754] overlayfs: failed to resolve './file0': -2 [ 284.539811][ T7798] overlayfs: failed to resolve './file0': -2 [ 289.489920][ T7838] overlayfs: failed to resolve './file0': -2 [ 291.439328][ T7853] netlink: 84 bytes leftover after parsing attributes in process `syz.2.533'. [ 292.981014][ T7872] overlayfs: failed to resolve './file0': -2 [ 296.201285][ T7894] team0: No ports can be present during mode change [ 296.965511][ T7911] overlayfs: failed to resolve './file0': -2 [ 298.833209][ T7928] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 298.873331][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 301.430456][ T7944] kvm: emulating exchange as write [ 301.566445][ T7954] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 301.610964][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 302.925420][ T7969] input: syz0 as /devices/virtual/input/input27 [ 304.412165][ T7980] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 304.687194][ T5773] kernel read not supported for file /vga_arbiter (pid: 5773 comm: kworker/0:4) [ 306.189414][ T7998] input: syz0 as /devices/virtual/input/input28 [ 308.029151][ T8002] affs: No valid root block on device nullb0 [ 309.167214][ T8010] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 309.180841][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 311.223273][ T8026] input: syz0 as /devices/virtual/input/input29 [ 312.222171][ T8036] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 312.236077][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 312.627742][ T8043] netlink: 84 bytes leftover after parsing attributes in process `syz.1.591'. [ 315.077293][ T8062] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 315.370269][ T8064] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 315.447670][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 315.465430][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 317.403358][ T8095] netlink: 84 bytes leftover after parsing attributes in process `syz.0.606'. [ 317.430137][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.438007][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.821106][ T8103] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 317.838947][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 318.607750][ T8107] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 318.740888][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 322.050776][ T8138] Bluetooth: MGMT ver 1.22 [ 322.108117][ T8140] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 322.145357][ T5839] kernel read not supported for file /vga_arbiter (pid: 5839 comm: kworker/0:6) [ 322.499754][ T8144] affs: No valid root block on device nullb0 [ 323.408643][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 326.493432][ T8172] netlink: 84 bytes leftover after parsing attributes in process `syz.2.628'. [ 328.920523][ T8191] affs: No valid root block on device nullb0 [ 330.748063][ T8217] affs: No valid root block on device nullb0 [ 333.496100][ T8237] affs: No valid root block on device nullb0 [ 335.891043][ T8259] affs: No valid root block on device nullb0 [ 336.754035][ T8271] affs: No valid root block on device nullb0 [ 337.532211][ T8269] input: syz0 as /devices/virtual/input/input30 [ 337.601377][ T8270] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 337.627851][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 340.584141][ T8307] input: syz0 as /devices/virtual/input/input31 [ 340.763330][ T8312] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 340.813232][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 344.177471][ T8337] input: syz0 as /devices/virtual/input/input32 [ 345.059857][ T8351] input: syz0 as /devices/virtual/input/input33 [ 345.117465][ T8353] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 345.155026][ T23] kernel read not supported for file /vga_arbiter (pid: 23 comm: kworker/1:0) [ 345.168765][ T23] kernel read not supported for file /vga_arbiter (pid: 23 comm: kworker/1:0) [ 345.709861][ T8343] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 349.275055][ T8386] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 349.303202][ T785] kernel read not supported for file /vga_arbiter (pid: 785 comm: kworker/0:2) [ 350.251023][ T8394] input: syz0 as /devices/virtual/input/input34 [ 354.389935][ T8424] netlink: 84 bytes leftover after parsing attributes in process `syz.2.701'. [ 356.016389][ T8437] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 356.053711][ T5819] kernel read not supported for file /vga_arbiter (pid: 5819 comm: kworker/1:4) [ 361.144227][ T8478] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 361.177548][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 363.813104][ T8505] netlink: 84 bytes leftover after parsing attributes in process `syz.0.720'. [ 365.763862][ T8520] input: syz1 as /devices/virtual/input/input35 [ 365.858327][ T8523] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 365.871268][ T5773] kernel read not supported for file /vga_arbiter (pid: 5773 comm: kworker/0:4) [ 370.257960][ T8568] input: syz1 as /devices/virtual/input/input36 [ 373.278821][ T8586] netlink: 84 bytes leftover after parsing attributes in process `syz.3.744'. [ 374.405881][ T8596] netlink: 84 bytes leftover after parsing attributes in process `syz.3.747'. [ 378.698458][ T8640] affs: No valid root block on device nullb0 [ 378.903341][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.909688][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.078490][ T8648] input: syz0 as /devices/virtual/input/input37 [ 382.373324][ T8679] netlink: 84 bytes leftover after parsing attributes in process `syz.3.769'. [ 383.498785][ T8695] overlayfs: failed to resolve './file0': -2 [ 385.153474][ T23] IPVS: starting estimator thread 0... [ 385.773744][ T8703] IPVS: using max 20 ests per chain, 48000 per kthread [ 388.262792][ T8733] overlayfs: failed to resolve './file0': -2 [ 388.612787][ T8735] input: syz0 as /devices/virtual/input/input39 [ 388.738783][ T8738] netlink: 84 bytes leftover after parsing attributes in process `syz.2.780'. [ 395.112317][ T8775] input: syz0 as /devices/virtual/input/input40 [ 397.663321][ T8800] netlink: 84 bytes leftover after parsing attributes in process `syz.0.802'. [ 399.577775][ T8820] input: syz0 as /devices/virtual/input/input41 [ 402.459112][ T8844] netlink: 84 bytes leftover after parsing attributes in process `syz.1.813'. [ 404.653324][ T8864] input: syz0 as /devices/virtual/input/input42 [ 408.449356][ T8891] overlayfs: failed to resolve './file0': -2 [ 409.934266][ T8900] input: syz0 as /devices/virtual/input/input43 [ 414.196307][ T8932] overlayfs: failed to resolve './file0': -2 [ 420.161805][ T8987] affs: No valid root block on device nullb0 [ 424.723087][ T9034] affs: No valid root block on device nullb0 [ 425.026049][ T9034] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 426.685587][ T9066] 9pnet_fd: Insufficient options for proto=fd [ 426.866672][ T9066] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 431.116843][ T9106] 9pnet_fd: Insufficient options for proto=fd [ 431.128434][ T9106] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 435.818565][ T9142] overlayfs: failed to resolve './file0': -2 [ 436.603650][ T9149] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 438.277047][ T9153] tty tty1: ldisc open failed (-12), clearing slot 0 [ 438.382401][ T785] kernel read not supported for file /vga_arbiter (pid: 785 comm: kworker/0:2) [ 440.307939][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.314668][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.764704][ T9183] affs: No valid root block on device nullb0 [ 441.666692][ T9195] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 443.146250][ T5776] kernel read not supported for file /vga_arbiter (pid: 5776 comm: kworker/0:5) [ 444.873634][ T9218] affs: No valid root block on device nullb0 [ 447.324127][ T9237] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 449.911132][ T9258] affs: No valid root block on device nullb0 [ 453.343117][ T28] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 453.624468][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 453.675613][ T28] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 453.697942][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 453.775273][ T28] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.936183][ T28] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.957093][ T28] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.037033][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.371462][ T9297] affs: No valid root block on device nullb0 [ 454.464551][ T28] usb 4-1: GET_CAPABILITIES returned 0 [ 454.470201][ T28] usbtmc 4-1:16.0: can't read capabilities [ 456.373154][ T28] usb 4-1: USB disconnect, device number 3 [ 461.890291][ T9335] syz.2.950 (9335) used greatest stack depth: 17224 bytes left [ 468.057787][ T9411] affs: No valid root block on device nullb0 [ 471.039816][ T9446] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.694024][ T9451] affs: No valid root block on device nullb0 [ 480.595554][ T9534] affs: No valid root block on device nullb0 [ 484.873123][ T5812] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 485.302879][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 485.315399][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.338864][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 485.355671][ T5812] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 485.373292][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.388254][ T5812] usb 3-1: Product: syz [ 485.392471][ T5812] usb 3-1: Manufacturer: syz [ 485.402882][ T5812] usb 3-1: SerialNumber: syz [ 485.414387][ T5812] usb 3-1: config 0 descriptor?? [ 485.426673][ T5812] hub 3-1:0.0: bad descriptor, ignoring hub [ 485.436419][ T5812] hub: probe of 3-1:0.0 failed with error -5 [ 485.524682][ T5812] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 486.298280][ T3478] usb 3-1: Failed to submit usb control message: -71 [ 486.307378][ T3478] usb 3-1: unable to send the bmi data to the device: -71 [ 486.316739][ T3478] usb 3-1: unable to get target info from device [ 486.342902][ T3478] usb 3-1: could not get target info (-71) [ 486.369908][ T3478] usb 3-1: could not probe fw (-71) [ 486.934385][ T9] usb 3-1: USB disconnect, device number 5 [ 488.653773][ T9599] overlayfs: failed to resolve './file0': -2 [ 491.271923][ T9620] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 493.962625][ T9641] overlayfs: failed to resolve './file0': -2 [ 495.728024][ T9661] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 496.429270][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 496.755473][ T9680] overlayfs: failed to resolve './file0': -2 [ 497.213501][ T9688] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1059'. [ 499.114433][ T9700] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 499.508278][ T9] kernel read not supported for file /vga_arbiter (pid: 9 comm: kworker/0:1) [ 499.794211][ T9714] overlayfs: failed to resolve './file1': -2 [ 500.983308][ T9722] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1069'. [ 501.261292][ T9725] input: syz0 as /devices/virtual/input/input44 [ 501.550997][ T9735] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 501.794226][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.806442][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.314363][ T785] kernel read not supported for file /vga_arbiter (pid: 785 comm: kworker/0:2) [ 502.664241][ T9748] overlayfs: failed to resolve './file1': -2 [ 503.865312][ T9756] input: syz0 as /devices/virtual/input/input45 [ 504.613524][ T9762] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1080'. [ 505.353114][ T9771] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 506.289118][ T9776] affs: No valid root block on device nullb0 [ 506.542426][ T9784] input: syz0 as /devices/virtual/input/input46 [ 506.625003][ T9792] input: syz1 as /devices/virtual/input/input47 [ 508.076485][ T9812] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 508.354569][ T28] kernel read not supported for file /vga_arbiter (pid: 28 comm: kworker/1:1) [ 509.549815][ T9823] input: syz0 as /devices/virtual/input/input48 [ 510.653187][ T9828] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1104'. [ 512.205046][ T9859] input: syz0 as /devices/virtual/input/input49 [ 512.633483][ T9868] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1115'. [ 513.462523][ T9875] input: syz1 as /devices/virtual/input/input50 [ 516.213300][ T9902] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1125'. [ 516.515597][ T9899] input: syz0 as /devices/virtual/input/input51 [ 516.931678][ T9915] overlayfs: failed to resolve './file0': -2 [ 518.435503][ T9934] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1134'. [ 519.034540][ T9932] input: syz0 as /devices/virtual/input/input52 [ 520.100546][ T9948] overlayfs: failed to resolve './file0': -2 [ 523.585711][ T9966] overlayfs: failed to resolve './file0': -2 [ 523.740928][ T9971] input: syz0 as /devices/virtual/input/input53 [ 524.815091][ T9983] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1147'. [ 526.646481][T10005] overlayfs: failed to resolve './file0': -2 [ 528.296398][T10024] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1159'. [ 529.243464][T10037] overlayfs: failed to resolve './file0': -2 [ 530.398695][T10063] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1171'. [ 531.637304][T10082] overlayfs: failed to resolve './file0': -2 [ 533.607481][T10111] overlayfs: failed to resolve './file0': -2 [ 533.709904][T10112] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1186'. [ 534.129621][T10116] affs: No valid root block on device nullb0 [ 536.654100][T10155] overlayfs: failed to resolve './file0': -2 [ 537.405477][T10160] affs: No valid root block on device nullb0 [ 537.759059][T10171] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1206'. [ 543.763733][T10219] overlayfs: failed to resolve './file0': -2 [ 545.741466][T10234] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1224'. [ 550.333690][T10280] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1237'. [ 551.742321][T10296] overlayfs: failed to resolve './file0': -2 [ 552.976862][T10306] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1242'. [ 556.627976][T10334] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 560.415735][T10367] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 563.353797][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.360351][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.270067][T10504] affs: No valid root block on device nullb0 [ 575.511267][T10517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'. [ 575.968160][T10527] overlayfs: failed to resolve './file0': -2 [ 576.388793][T10531] overlayfs: missing 'lowerdir' [ 578.134502][T10551] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 578.147620][ T9078] kernel read not supported for file /vga_arbiter (pid: 9078 comm: kworker/1:2) [ 578.450821][T10557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1318'. [ 581.865714][T10585] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 581.878860][ T9078] kernel read not supported for file /vga_arbiter (pid: 9078 comm: kworker/1:2) [ 586.819929][T10619] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 586.886281][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 588.599876][T10638] overlayfs: failed to resolve './file0': -2 [ 590.224918][T10654] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 590.338788][ T5776] kernel read not supported for file /vga_arbiter (pid: 5776 comm: kworker/0:5) [ 597.265506][T10705] affs: No valid root block on device nullb0 [ 606.048806][T10779] overlayfs: failed to resolve './file0': -2 [ 609.035677][T10796] affs: No valid root block on device nullb0 [ 619.381255][T10923] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1422'. [ 622.650244][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 624.720232][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.727001][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.875435][T11006] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1449'. [ 625.487520][T11007] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1450'. [ 627.858797][T11044] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1462'. [ 631.775413][T11088] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1475'. [ 641.962223][T11200] affs: No valid root block on device nullb0 [ 643.186567][T11216] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1513'. [ 648.885251][T11262] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1524'. [ 649.745606][T11276] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1531'. [ 652.234032][T11307] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1538'. [ 652.793002][T11308] input: syz0 as /devices/virtual/input/input54 [ 655.674809][T11322] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1542'. [ 657.443483][T11348] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1549'. [ 659.899840][T11383] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1560'. [ 664.053418][T11427] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1571'. [ 668.626329][T11471] affs: No valid root block on device nullb0 [ 668.994020][T11476] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 669.053188][ T5812] kernel read not supported for file /vga_arbiter (pid: 5812 comm: kworker/1:3) [ 672.908601][T11508] affs: No valid root block on device nullb0 [ 673.946950][T11513] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 674.122580][ T8740] kernel read not supported for file /vga_arbiter (pid: 8740 comm: kworker/0:0) [ 678.270453][T11548] affs: No valid root block on device nullb0 [ 683.832295][T11585] affs: No valid root block on device nullb0 [ 686.056825][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.202855][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.813663][T11615] overlayfs: failed to resolve './file0': -2 [ 692.307365][T11652] overlayfs: failed to resolve './file0': -2 [ 698.095803][T11701] affs: No valid root block on device nullb0 [ 707.806785][T11799] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1672'. [ 707.820136][T11798] overlayfs: failed to resolve './file0': -2 [ 711.117751][T11832] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1686'. [ 711.489066][T11836] overlayfs: failed to resolve './file0': -2 [ 715.109770][T11878] overlayfs: failed to resolve './file0': -2 [ 716.235022][T11881] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1699'. [ 718.756080][T11913] affs: No valid root block on device nullb0 [ 719.886029][T11921] overlayfs: failed to resolve './file0': -2 [ 724.063089][T11967] overlayfs: failed to resolve './file0': -2 [ 725.758967][T11986] affs: No valid root block on device nullb0 [ 728.266370][T12011] overlayfs: failed to resolve './file0': -2 [ 730.951591][T12031] affs: No valid root block on device nullb0 [ 735.272357][T12067] overlayfs: failed to resolve './file0': -2 [ 736.503220][T12079] affs: No valid root block on device nullb0 [ 737.415757][T12088] bridge_slave_0: left allmulticast mode [ 737.421590][T12088] bridge_slave_0: left promiscuous mode [ 737.789161][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.051855][T12088] bridge_slave_1: left allmulticast mode [ 738.148631][T12088] bridge_slave_1: left promiscuous mode [ 738.243294][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.404091][T12088] bond0: (slave bond_slave_0): Releasing backup interface [ 738.441412][T12088] bond0: (slave bond_slave_1): Releasing backup interface [ 738.576349][T12088] team0: Port device team_slave_0 removed [ 738.674157][T12106] overlayfs: failed to resolve './file0': -2 [ 738.982889][T12088] team0: Port device team_slave_1 removed [ 739.074937][T12088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.167172][T12088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.227923][T12088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.303198][T12088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.341607][T12088] batman_adv: batadv0: Removing interface: ip6gretap1 [ 739.731331][T12116] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1751'. [ 746.191616][ T27] audit: type=1800 audit(1750503786.407:2): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1772" name="bus" dev="overlay" ino=2475 res=0 errno=0 [ 747.316118][T12184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 747.497538][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.504036][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.709870][T12332] affs: No valid root block on device nullb0 [ 767.985515][T12358] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 768.622700][ T8740] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 769.392831][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 769.594521][ T8740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.639463][ T8740] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.705217][ T8740] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 769.853286][ T8740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.106352][ T8740] usb 3-1: config 0 descriptor?? [ 770.737867][ T8740] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 770.765560][ T8740] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 770.780753][ T8740] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input55 [ 771.695775][ T8740] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 771.714582][ T8740] usb 3-1: USB disconnect, device number 6 [ 771.878408][T12393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 771.966311][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 772.020468][T12390] fido_id[12390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 772.046627][T12393] wireguard0: entered promiscuous mode [ 772.367350][T12400] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 772.501202][T12400] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 780.231615][T12472] overlayfs: missing 'lowerdir' [ 783.302373][T12504] overlayfs: missing 'lowerdir' [ 787.885930][T12539] overlayfs: missing 'lowerdir' [ 788.780669][T12550] xt_HMARK: proto mask must be zero with L3 mode [ 788.817575][T12550] Bluetooth: (null): Invalid header checksum [ 789.451340][T12552] overlayfs: failed to clone upperpath [ 790.966903][T12563] FAT-fs (nullb0): bogus number of reserved sectors [ 790.974098][T12563] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 791.523216][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 791.852713][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 791.914309][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.254540][ T23] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.149911][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 793.913047][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 793.972288][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.004349][ T23] usb 4-1: config 0 descriptor?? [ 794.018098][ T23] usb 4-1: can't set config #0, error -71 [ 794.037868][ T23] usb 4-1: USB disconnect, device number 4 [ 798.533375][T12627] veth0: entered promiscuous mode [ 799.556764][T12623] veth0: left promiscuous mode [ 799.618500][T12624] could not allocate digest TFM handle sha256-ce [ 808.366416][T12740] affs: No valid root block on device nullb0 [ 808.936782][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.943194][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.270393][T12784] affs: No valid root block on device nullb0 [ 813.762674][T12806] capability: warning: `syz.2.1960' uses deprecated v2 capabilities in a way that may be insecure [ 819.523902][T12856] affs: No valid root block on device nullb0 [ 823.469744][T12889] affs: No valid root block on device nullb0 [ 825.562862][T12917] overlayfs: missing 'lowerdir' [ 829.040482][T12948] warning: `syz.2.2006' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 830.097098][T12953] overlayfs: missing 'lowerdir' [ 831.458764][T12958] affs: No valid root block on device nullb0 [ 834.723022][T13007] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2022'. [ 836.277398][T13031] overlayfs: failed to resolve './file0': -2 [ 837.893043][T13044] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2039'. [ 838.508642][T13057] netlink: 'syz.0.2045': attribute type 6 has an invalid length. [ 839.269241][T13070] overlayfs: failed to resolve './file0': -2 [ 839.737166][T13075] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2051'. [ 840.183231][T13078] affs: No valid root block on device nullb0 [ 841.083436][T13099] netlink: 'syz.1.2060': attribute type 6 has an invalid length. [ 841.449780][T13099] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2060'. [ 841.706661][T13104] overlayfs: failed to resolve './file0': -2 [ 843.475105][T13135] affs: No valid root block on device nullb0 [ 844.661274][T13142] overlayfs: failed to resolve './file0': -2 [ 845.281196][T13166] affs: No valid root block on device nullb0 [ 846.800614][T13189] overlayfs: failed to resolve './file0': -2 [ 848.260141][T13222] overlayfs: failed to resolve './file0': -2 [ 849.779344][T13256] overlayfs: failed to resolve './file0': -2 [ 852.352127][T13296] overlayfs: failed to resolve './file0': -2 [ 859.940658][T13408] affs: No valid root block on device nullb0 [ 863.469606][T13449] affs: No valid root block on device nullb0 [ 866.185466][T13483] affs: No valid root block on device nullb0 [ 869.258509][T13527] affs: No valid root block on device nullb0 [ 870.480357][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.491774][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.206693][T13572] netlink: 'syz.2.2226': attribute type 6 has an invalid length. [ 872.214903][T13572] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2226'. [ 874.585098][T13596] affs: No valid root block on device nullb0 [ 876.142789][T13616] netlink: 'syz.1.2239': attribute type 6 has an invalid length. [ 876.242380][T13616] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2239'. [ 880.180013][T13656] xt_HMARK: proto mask must be zero with L3 mode [ 880.203331][T13656] Bluetooth: (null): Invalid header checksum [ 882.317301][ T27] audit: type=1800 audit(1750503922.567:3): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2255" name="bus" dev="overlay" ino=3076 res=0 errno=0 [ 892.096730][ T27] audit: type=1800 audit(1750503932.347:4): pid=13773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2288" name="bus" dev="overlay" ino=3191 res=0 errno=0 [ 894.809805][T13808] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2298'. [ 896.201965][ T27] audit: type=1800 audit(1750503936.417:5): pid=13805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2299" name="bus" dev="overlay" ino=3044 res=0 errno=0 [ 897.597234][ T27] audit: type=1800 audit(1750503937.847:6): pid=13822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2303" name="bus" dev="overlay" ino=3145 res=0 errno=0 [ 899.573832][T13841] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2310'. [ 901.377855][ T27] audit: type=1800 audit(1750503941.627:7): pid=13862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2315" name="bus" dev="overlay" ino=3244 res=0 errno=0 [ 902.277739][T13882] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2323'. [ 904.425874][T13898] overlayfs: failed to clone upperpath [ 906.052278][ T27] audit: type=1800 audit(1750503946.297:8): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2329" name="bus" dev="overlay" ino=3274 res=0 errno=0 [ 907.609006][T13932] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2334'. [ 910.346807][ T27] audit: type=1800 audit(1750503950.597:9): pid=13956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2343" name="bus" dev="overlay" ino=3111 res=0 errno=0 [ 912.130112][T13978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 912.374257][T13978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 912.475399][T13978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 912.502939][T13978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 913.041722][T13978] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 913.107400][T13978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 913.573035][ T27] audit: type=1800 audit(1750503953.817:10): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2358" name="bus" dev="overlay" ino=3240 res=0 errno=0 [ 914.160506][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.273826][T14007] FAT-fs (nullb0): bogus number of reserved sectors [ 914.281326][T14007] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 914.345733][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.172946][ T5085] Bluetooth: hci4: command tx timeout [ 915.558669][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.639467][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.930449][ T27] audit: type=1800 audit(1750503956.177:11): pid=14029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2369" name="bus" dev="overlay" ino=3159 res=0 errno=0 [ 916.610370][T13976] chnl_net:caif_netlink_parms(): no params data found [ 917.266883][ T5085] Bluetooth: hci4: command tx timeout [ 919.510770][ T5085] Bluetooth: hci4: command tx timeout [ 919.957660][T13976] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.967203][T13976] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.974953][T13976] bridge_slave_0: entered allmulticast mode [ 919.984749][T13976] bridge_slave_0: entered promiscuous mode [ 919.993425][T13976] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.000996][T13976] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.008501][T13976] bridge_slave_1: entered allmulticast mode [ 920.016906][T13976] bridge_slave_1: entered promiscuous mode [ 920.412404][ T27] audit: type=1800 audit(1750503960.657:12): pid=14075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2380" name="bus" dev="overlay" ino=3292 res=0 errno=0 [ 920.887403][T13976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.023058][T13976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.572812][ T5085] Bluetooth: hci4: command tx timeout [ 921.975793][T14093] FAT-fs (nullb0): bogus number of reserved sectors [ 921.982601][T14093] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 923.383130][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 923.823108][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 924.312644][ T9] usb 1-1: device descriptor read/all, error -71 [ 924.360727][T13976] team0: Port device team_slave_0 added [ 924.385264][T13976] team0: Port device team_slave_1 added [ 924.532220][T14114] affs: No valid root block on device nullb0 [ 925.358951][T13976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.376852][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.430021][T13976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.567308][T13976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.586327][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.612365][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.419514][T13976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.598302][T13976] hsr_slave_0: entered promiscuous mode [ 926.634048][T13976] hsr_slave_1: entered promiscuous mode [ 926.648737][T13976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.670346][T13976] Cannot create hsr debugfs directory [ 927.422229][ T11] hsr_slave_0: left promiscuous mode [ 927.449638][ T11] hsr_slave_1: left promiscuous mode [ 927.466890][ T11] bridge_slave_1: left allmulticast mode [ 927.503182][ T11] bridge_slave_1: left promiscuous mode [ 927.516324][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.544354][ T11] bridge_slave_0: left allmulticast mode [ 927.550067][ T11] bridge_slave_0: left promiscuous mode [ 927.557364][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.801605][ T11] veth1_macvtap: left promiscuous mode [ 927.813690][ T11] veth0_macvtap: left promiscuous mode [ 927.820996][ T11] veth1_vlan: left promiscuous mode [ 927.827033][ T11] veth0_vlan: left promiscuous mode [ 930.573927][ T11] team0 (unregistering): Port device team_slave_1 removed [ 930.617922][ T11] team0 (unregistering): Port device team_slave_0 removed [ 930.668898][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.946755][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.817142][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.823640][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.215539][ T11] bond0 (unregistering): Released all slaves [ 934.409025][ T11] IPVS: stop unused estimator thread 0... [ 934.950342][ T27] audit: type=1800 audit(1750503975.197:13): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2422" name="bus" dev="overlay" ino=3372 res=0 errno=0 [ 936.084130][T13976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 936.308819][T13976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 936.543040][T13976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 936.794937][T13976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 938.006941][T13976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.065716][T13976] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.097787][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.105007][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.150732][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.157911][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.690424][ T27] audit: type=1800 audit(1750503979.937:14): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2434" name="bus" dev="overlay" ino=3297 res=0 errno=0 [ 941.298991][T13976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.414216][T13976] veth0_vlan: entered promiscuous mode [ 941.450076][T13976] veth1_vlan: entered promiscuous mode [ 941.506946][T13976] veth0_macvtap: entered promiscuous mode [ 941.521702][T13976] veth1_macvtap: entered promiscuous mode [ 941.551593][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.568610][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.590361][T13976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.607367][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.619666][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.645538][T13976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.871110][T13976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.880115][T13976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.889863][T13976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.909300][T13976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.063627][ T27] audit: type=1800 audit(1750503982.267:15): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2443" name="bus" dev="overlay" ino=3414 res=0 errno=0 [ 942.861177][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.491805][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.799045][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.529302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.982989][T14379] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2349'. [ 949.507789][T14408] FAT-fs (nullb0): bogus number of reserved sectors [ 949.532701][T14408] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 949.872924][T12840] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 951.320760][T13978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 951.337028][T13978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 951.355561][T13978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 951.385242][T13978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 951.398777][T13978] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 951.407671][T13978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 951.445620][T12840] usb 4-1: Using ep0 maxpacket: 32 [ 951.456013][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.503016][T12840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.533066][T12840] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.548983][T12840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 951.588120][T12840] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 951.612575][T12840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.620627][T12840] usb 4-1: Product: syz [ 951.629847][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.643722][T12840] usb 4-1: Manufacturer: syz [ 951.648523][T12840] usb 4-1: SerialNumber: syz [ 951.694058][T12840] usb 4-1: config 0 descriptor?? [ 951.830975][T12840] gs_usb 4-1:0.0: Required endpoints not found [ 951.949187][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.603749][T14435] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2462'. [ 952.978504][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.603910][ T5085] Bluetooth: hci1: command tx timeout [ 954.015090][T13046] usb 4-1: USB disconnect, device number 5 [ 954.090741][T14415] chnl_net:caif_netlink_parms(): no params data found [ 955.053995][T14415] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.061436][T14415] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.119822][T14415] bridge_slave_0: entered allmulticast mode [ 955.151426][T14415] bridge_slave_0: entered promiscuous mode [ 955.473208][T14415] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.480487][T14415] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.488036][T14415] bridge_slave_1: entered allmulticast mode [ 955.496106][T14415] bridge_slave_1: entered promiscuous mode [ 956.087960][T14498] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2472'. [ 956.310465][ T5085] Bluetooth: hci1: command tx timeout [ 956.814113][T14507] FAT-fs (nullb0): bogus number of reserved sectors [ 956.820861][T14507] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 957.112874][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 957.343734][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 957.403763][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.630461][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.812032][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 957.933024][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 958.091458][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.116588][T14415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.233623][ T9] usb 4-1: Product: syz [ 958.327523][ T9] usb 4-1: Manufacturer: syz [ 958.372674][ T5085] Bluetooth: hci1: command tx timeout [ 958.407853][ T9] usb 4-1: SerialNumber: syz [ 958.588708][ T9] usb 4-1: config 0 descriptor?? [ 958.764282][ T9] gs_usb 4-1:0.0: Required endpoints not found [ 958.827938][T14415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.472617][ T5085] Bluetooth: hci1: command tx timeout [ 960.726467][T14415] team0: Port device team_slave_0 added [ 960.788019][T14415] team0: Port device team_slave_1 added [ 960.881112][T14415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.973914][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.000727][T14415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.019101][T14415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.146027][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.490147][T14415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.729884][T13046] usb 4-1: USB disconnect, device number 6 [ 961.910093][T14542] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2483'. [ 964.200568][T14415] hsr_slave_0: entered promiscuous mode [ 964.213612][T14415] hsr_slave_1: entered promiscuous mode [ 964.230160][T14415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.239043][T14415] Cannot create hsr debugfs directory [ 965.322888][T14576] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2493'. [ 966.696478][ T42] hsr_slave_0: left promiscuous mode [ 967.180272][ T42] hsr_slave_1: left promiscuous mode [ 967.186666][ T42] bridge_slave_1: left allmulticast mode [ 967.192488][ T42] bridge_slave_1: left promiscuous mode [ 967.199341][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.213359][ T42] bridge_slave_0: left allmulticast mode [ 967.222481][ T42] bridge_slave_0: left promiscuous mode [ 967.232750][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.357247][ T42] veth1_macvtap: left promiscuous mode [ 967.362961][ T42] veth0_macvtap: left promiscuous mode [ 967.368697][ T42] veth1_vlan: left promiscuous mode [ 967.374873][ T42] veth0_vlan: left promiscuous mode [ 968.803091][T14624] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2502'. [ 970.657855][ T42] team0 (unregistering): Port device team_slave_1 removed [ 970.820294][ T42] team0 (unregistering): Port device team_slave_0 removed [ 971.406929][T14654] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2512'. [ 971.926025][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.209269][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.182011][ T42] bond0 (unregistering): Released all slaves [ 975.152908][T14688] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2521'. [ 976.929996][ T42] IPVS: stop unused estimator thread 0... [ 977.270696][T14415] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 977.310739][T14415] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 977.359409][T14415] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 977.639653][T14737] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2532'. [ 977.970600][T14415] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 979.619189][T14415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.740463][T14415] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.763240][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.770439][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.837340][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.844616][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.883010][T14777] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2544'. [ 981.203598][T14415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 981.222998][T14415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 981.972727][T14415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.388775][T14415] veth0_vlan: entered promiscuous mode [ 982.438630][T14415] veth1_vlan: entered promiscuous mode [ 983.451183][T14415] veth0_macvtap: entered promiscuous mode [ 983.462281][T14415] veth1_macvtap: entered promiscuous mode [ 984.246728][T14817] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2554'. [ 985.561143][T14415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.578167][T14415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.588395][T14415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.599248][T14415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.672763][T14415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.775596][T14415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.796383][T14415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.810661][T14415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.821756][T14415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.838249][T14415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.877784][T14415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.116066][T14415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.152833][T14415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.222067][T14415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.845282][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.879596][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.001382][ T9156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.009560][ T9156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.952924][T14871] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2566'. [ 989.626412][ T27] audit: type=1800 audit(1750504029.878:16): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2452" name="bus" dev="overlay" ino=27 res=0 errno=0 [ 989.979933][T14882] xt_HMARK: proto mask must be zero with L3 mode [ 993.072968][T14911] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2575'. [ 993.409205][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.447197][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.718263][T13978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.727642][T13978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.736986][T13978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.746551][T13978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.761865][T13978] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 993.772905][T13978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 993.930020][T14921] xt_HMARK: proto mask must be zero with L3 mode [ 994.518072][T11311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.723075][T11311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.830508][T13978] Bluetooth: hci0: command tx timeout [ 996.709204][T11311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.188543][T14949] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2586'. [ 998.200768][T13978] Bluetooth: hci0: command tx timeout [ 998.306970][T11311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.704640][T14959] overlayfs: failed to resolve './file1': -2 [ 999.871882][T14916] chnl_net:caif_netlink_parms(): no params data found [ 1000.213024][T13978] Bluetooth: hci0: command tx timeout [ 1001.735397][T14916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.775757][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.815999][T14916] bridge_slave_0: entered allmulticast mode [ 1001.905397][T14916] bridge_slave_0: entered promiscuous mode [ 1001.992320][T15005] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2599'. [ 1002.334606][T13978] Bluetooth: hci0: command tx timeout [ 1002.824185][T15011] overlayfs: failed to resolve './file1': -2 [ 1003.268506][T11311] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1003.626421][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.656212][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.678198][T14916] bridge_slave_1: entered allmulticast mode [ 1003.688052][T14916] bridge_slave_1: entered promiscuous mode [ 1003.809661][T14916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.836824][T14916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.134035][T14916] team0: Port device team_slave_0 added [ 1005.644386][T15057] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2610'. [ 1005.816315][T14916] team0: Port device team_slave_1 added [ 1006.452779][T15062] overlayfs: failed to resolve './file1': -2 [ 1007.663170][T14916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.822783][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.850038][T14916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.837180][T14916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.862644][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.965953][T14916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.532859][T15099] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2620'. [ 1011.078601][T15104] FAT-fs (nullb0): bogus number of reserved sectors [ 1011.085512][T15104] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1012.857798][T14916] hsr_slave_0: entered promiscuous mode [ 1012.973459][T14916] hsr_slave_1: entered promiscuous mode [ 1015.748304][T11311] hsr_slave_0: left promiscuous mode [ 1016.892955][T15144] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2630'. [ 1017.402644][T11311] hsr_slave_1: left promiscuous mode [ 1017.410160][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.472668][T11311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.498519][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.523041][T11311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.567703][T11311] bridge_slave_1: left allmulticast mode [ 1017.593882][T11311] bridge_slave_1: left promiscuous mode [ 1017.619872][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.649392][T11311] bridge_slave_0: left allmulticast mode [ 1017.662516][T11311] bridge_slave_0: left promiscuous mode [ 1017.668451][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.549377][T11311] veth1_macvtap: left promiscuous mode [ 1018.555302][T11311] veth0_macvtap: left promiscuous mode [ 1018.560889][T11311] veth1_vlan: left promiscuous mode [ 1018.566958][T11311] veth0_vlan: left promiscuous mode [ 1018.809472][T15163] netlink: 'syz.2.2637': attribute type 6 has an invalid length. [ 1018.819926][T15163] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2637'. [ 1020.428215][T11311] team0 (unregistering): Port device team_slave_1 removed [ 1020.715855][T11311] team0 (unregistering): Port device team_slave_0 removed [ 1020.801148][T11311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.891872][T11311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.951529][T11311] bond0 (unregistering): Released all slaves [ 1025.707714][T11311] IPVS: stop unused estimator thread 0... [ 1026.836434][T14916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1026.930294][T14916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1027.000206][T14916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1027.220778][T14916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1028.216832][T14916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.248746][T14916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.268313][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.275472][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.131080][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.138318][T15042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.254435][T15276] FAT-fs (nullb0): bogus number of reserved sectors [ 1030.261268][T15276] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1033.891338][T14916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.005438][T14916] veth0_vlan: entered promiscuous mode [ 1034.061536][T14916] veth1_vlan: entered promiscuous mode [ 1034.234199][T14916] veth0_macvtap: entered promiscuous mode [ 1034.287656][T14916] veth1_macvtap: entered promiscuous mode [ 1035.159750][T14916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.209397][T14916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.223223][T14916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.234105][T14916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.268369][T14916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.290420][T14916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.301113][T14916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.313007][T14916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1035.326123][T14916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.341578][T14916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.376482][T15328] FAT-fs (nullb0): bogus number of reserved sectors [ 1035.383350][T15328] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1035.712750][T12735] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1035.973105][T12735] usb 1-1: Using ep0 maxpacket: 32 [ 1036.294448][T13978] Bluetooth: hci4: command 0x0406 tx timeout [ 1036.855712][T14916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.478149][T14916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.489352][T14916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.492184][T15335] netlink: 'syz.2.2680': attribute type 6 has an invalid length. [ 1038.498700][T14916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.516926][T12735] usb 1-1: device descriptor read/all, error -71 [ 1038.630573][T15335] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2680'. [ 1039.006086][T15042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.611935][T15042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.803055][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.811085][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.888331][T15388] FAT-fs (nullb0): bogus number of reserved sectors [ 1043.895768][T15388] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1045.243784][T12735] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1045.764532][T13978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1045.782580][T13978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1045.794111][T13978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1045.806565][T13978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1045.835266][T13978] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1045.845456][T13978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.054088][T12735] usb 1-1: Using ep0 maxpacket: 32 [ 1046.063990][T12735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.076063][T12735] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1046.089547][T12735] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1046.111465][T12735] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1046.133933][T12735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.143024][T12735] usb 1-1: Product: syz [ 1046.147193][T12735] usb 1-1: Manufacturer: syz [ 1046.156761][T12735] usb 1-1: SerialNumber: syz [ 1046.178716][T12735] usb 1-1: config 0 descriptor?? [ 1046.322516][T12735] gs_usb 1-1:0.0: Required endpoints not found [ 1047.099797][ T9] usb 1-1: USB disconnect, device number 7 [ 1047.103283][T15042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.366474][T15042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.914331][T15042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.953768][ T5085] Bluetooth: hci2: command tx timeout [ 1048.150495][T15391] chnl_net:caif_netlink_parms(): no params data found [ 1048.284137][T15042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.972478][ T5085] Bluetooth: hci2: command tx timeout [ 1050.543991][T15391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.596036][T15391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.603840][T15391] bridge_slave_0: entered allmulticast mode [ 1050.611123][T15391] bridge_slave_0: entered promiscuous mode [ 1050.634614][T15391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.646249][T15391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.665006][T15391] bridge_slave_1: entered allmulticast mode [ 1050.694203][T15391] bridge_slave_1: entered promiscuous mode [ 1051.280629][T15391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.009973][T15391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.028599][T15489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2713'. [ 1052.052481][ T5085] Bluetooth: hci2: command tx timeout [ 1052.105292][T15391] team0: Port device team_slave_0 added [ 1052.116399][T15391] team0: Port device team_slave_1 added [ 1052.152865][T15391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.160065][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.198903][T15391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.234902][T15391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.253094][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.279468][T15391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.142743][ T5085] Bluetooth: hci2: command tx timeout [ 1054.698887][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.705342][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.199749][T15391] hsr_slave_0: entered promiscuous mode [ 1056.213561][T15391] hsr_slave_1: entered promiscuous mode [ 1056.220103][T15391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.228282][T15391] Cannot create hsr debugfs directory [ 1062.307908][T15042] hsr_slave_0: left promiscuous mode [ 1062.328684][T15042] hsr_slave_1: left promiscuous mode [ 1062.423054][T15042] veth1_macvtap: left promiscuous mode [ 1062.434285][T15042] veth0_macvtap: left promiscuous mode [ 1062.446130][T15042] veth1_vlan: left promiscuous mode [ 1062.462165][T15042] veth0_vlan: left promiscuous mode [ 1063.506780][T15591] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2736'. [ 1064.026706][ T27] audit: type=1800 audit(1750504104.268:17): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2738" name="bus" dev="overlay" ino=607 res=0 errno=0 [ 1065.527797][T15604] xt_HMARK: proto mask must be zero with L3 mode [ 1066.324095][T15042] bond0 (unregistering): Released all slaves [ 1067.659643][T15391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1067.757519][T15391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1067.847448][T15391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1067.879135][T15391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1068.470618][ T27] audit: type=1800 audit(1750504108.708:18): pid=15627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2747" name="bus" dev="overlay" ino=152 res=0 errno=0 [ 1068.639488][T15391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.681226][T15391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.689790][T15042] IPVS: stop unused estimator thread 0... [ 1068.711457][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.718682][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.806565][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.813818][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.209748][T15658] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2748'. [ 1071.820238][T15391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.500753][T15391] veth0_vlan: entered promiscuous mode [ 1072.628383][T15391] veth1_vlan: entered promiscuous mode [ 1072.665530][T15391] veth0_macvtap: entered promiscuous mode [ 1072.678815][T15391] veth1_macvtap: entered promiscuous mode [ 1072.771410][T15391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.785625][T15391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.804591][T15391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.978130][T15391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.040071][T15391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.094318][T15391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.215518][T15391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.365088][T15391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.411620][T15391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.422082][T15391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.432589][T15391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.443000][T15391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.453516][T15391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.474665][T15391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.490531][T15391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.517301][T15391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.526876][T15391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.540308][T15391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.587823][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.605702][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.651451][ T27] audit: type=1800 audit(1750504114.878:19): pid=15697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2760" name="bus" dev="overlay" ino=685 res=0 errno=0 [ 1074.672313][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.680382][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.520472][T15710] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2763'. [ 1077.412490][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 1079.128001][T15753] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2773'. [ 1080.552381][ C0] hrtimer: interrupt took 71345 ns [ 1081.785781][ T27] audit: type=1800 audit(1750504122.018:20): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2782" name="bus" dev="overlay" ino=50 res=0 errno=0 [ 1082.402938][T15795] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2785'. [ 1083.323442][T15803] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2789'. [ 1085.932030][T15822] overlay: ./file1 is not a directory [ 1087.318454][T15841] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2800'. [ 1089.640762][T15859] overlay: ./file1 is not a directory [ 1091.214066][T15880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2814'. [ 1092.620978][T15895] overlay: ./file1 is not a directory [ 1095.689062][ T27] audit: type=1800 audit(1750504135.938:21): pid=15934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2828" name="bus" dev="overlay" ino=275 res=0 errno=0 [ 1099.499324][ T27] audit: type=1800 audit(1750504139.448:22): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2832" name="bus" dev="overlay" ino=817 res=0 errno=0 [ 1102.372962][T15983] FAT-fs (nullb0): bogus number of reserved sectors [ 1102.379662][T15983] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1102.674609][ T9078] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1102.993722][ T9078] usb 4-1: Using ep0 maxpacket: 32 [ 1103.101816][ T9078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.261413][ T9078] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1104.064101][ T9078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.117607][ T9078] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1104.212589][ T9078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.309278][ T9078] usb 4-1: Product: syz [ 1104.369653][ T9078] usb 4-1: Manufacturer: syz [ 1104.426927][ T9078] usb 4-1: SerialNumber: syz [ 1104.577369][ T9078] usb 4-1: config 0 descriptor?? [ 1104.712914][ T9078] gs_usb 4-1:0.0: Required endpoints not found [ 1108.931866][ T5839] usb 4-1: USB disconnect, device number 7 [ 1113.785358][ T27] audit: type=1800 audit(1750504153.808:23): pid=16054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2860" name="bus" dev="overlay" ino=324 res=0 errno=0 [ 1116.148421][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.156275][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.222705][T13978] Bluetooth: hci0: command 0x0406 tx timeout [ 1119.692582][T16131] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2884'. [ 1123.471947][T16167] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2894'. [ 1127.436685][T16204] netlink: 'syz.2.2906': attribute type 6 has an invalid length. [ 1127.483093][T16204] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2906'. [ 1130.527877][T16237] xt_HMARK: proto mask must be zero with L3 mode [ 1134.860227][T16292] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2933'. [ 1136.782678][T16319] xt_HMARK: proto mask must be zero with L3 mode [ 1138.158605][T16335] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2945'. [ 1138.794054][T16340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1139.976514][T16351] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2951'. [ 1142.117657][T16373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1143.096711][T16380] xt_HMARK: proto mask must be zero with L3 mode [ 1144.013266][T16390] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2962'. [ 1146.553142][T16408] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2968'. [ 1148.520432][T16431] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2973'. [ 1149.355341][T16423] xt_HMARK: proto mask must be zero with L3 mode [ 1149.684416][T16443] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1149.835239][T16446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2979'. [ 1149.848171][T16446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2979'. [ 1149.881841][T16442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2979'. [ 1152.011812][T16471] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2987'. [ 1152.627708][T16478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2989'. [ 1154.598869][T16497] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2995'. [ 1155.505452][T16501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2998'. [ 1155.639523][T16504] xt_HMARK: proto mask must be zero with L3 mode [ 1156.445822][T16514] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2997'. [ 1160.352207][T16539] xt_HMARK: proto mask must be zero with L3 mode [ 1160.902823][T16557] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3011'. [ 1165.137293][T16581] FAT-fs (nullb0): bogus number of reserved sectors [ 1165.144064][T16581] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1165.442644][ T28] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1167.272645][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 1167.379026][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.477476][ T28] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1167.624316][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1167.726613][ T28] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1167.836446][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.950973][ T28] usb 4-1: Product: syz [ 1168.003108][ T28] usb 4-1: Manufacturer: syz [ 1168.076853][ T28] usb 4-1: SerialNumber: syz [ 1168.154272][ T28] usb 4-1: config 0 descriptor?? [ 1168.313655][ T28] usb 4-1: can't set config #0, error -71 [ 1168.324419][ T28] usb 4-1: USB disconnect, device number 8 [ 1168.543151][T16609] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3023'. [ 1169.454207][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 1171.362184][T16634] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3036'. [ 1174.517951][T16673] netlink: 'syz.1.3048': attribute type 6 has an invalid length. [ 1174.541096][T16673] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3048'. [ 1175.177086][T16682] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3049'. [ 1177.655613][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.667292][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.518166][T16733] netlink: 'syz.0.3066': attribute type 6 has an invalid length. [ 1179.560552][T16733] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3066'. [ 1181.047754][ T27] audit: type=1800 audit(1750504221.288:24): pid=16752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3070" name="bus" dev="overlay" ino=593 res=0 errno=0 [ 1182.649927][T16771] netlink: 'syz.2.3080': attribute type 6 has an invalid length. [ 1182.658961][T16771] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1185.797474][ T27] audit: type=1800 audit(1750504226.048:25): pid=16815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3097" name="bus" dev="overlay" ino=930 res=0 errno=0 [ 1188.390789][T16831] xt_HMARK: proto mask must be zero with L3 mode [ 1189.531794][T16851] capability: warning: `syz.2.3112' uses 32-bit capabilities (legacy support in use) [ 1191.091095][T16876] xt_HMARK: proto mask must be zero with L3 mode [ 1192.406972][ T27] audit: type=1800 audit(1750504232.658:26): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3122" name="bus" dev="overlay" ino=1233 res=0 errno=0 [ 1193.582480][T16904] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1195.383969][ T27] audit: type=1800 audit(1750504235.638:27): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3135" name="bus" dev="overlay" ino=1258 res=0 errno=0 [ 1196.073421][T16911] xt_HMARK: proto mask must be zero with L3 mode [ 1196.241338][T16935] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3140'. [ 1197.440793][ T27] audit: type=1800 audit(1750504237.688:28): pid=16943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3142" name="bus" dev="overlay" ino=1279 res=0 errno=0 [ 1200.522718][T16968] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3150'. [ 1200.800614][ T27] audit: type=1800 audit(1750504241.048:29): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3148" name="bus" dev="overlay" ino=1029 res=0 errno=0 [ 1201.412964][ T27] audit: type=1800 audit(1750504241.668:30): pid=16981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3152" name="bus" dev="overlay" ino=1044 res=0 errno=0 [ 1202.390176][T16997] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1203.051410][T16999] netlink: 'syz.3.3160': attribute type 6 has an invalid length. [ 1203.059353][T16999] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3160'. [ 1203.546973][ T27] audit: type=1800 audit(1750504243.798:31): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3161" name="bus" dev="overlay" ino=706 res=0 errno=0 [ 1203.811397][T17006] xt_HMARK: proto mask must be zero with L3 mode [ 1204.647641][ T27] audit: type=1800 audit(1750504244.898:32): pid=17013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3165" name="bus" dev="overlay" ino=1330 res=0 errno=0 [ 1205.549469][T17027] netlink: 'syz.2.3169': attribute type 6 has an invalid length. [ 1205.637182][T17027] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1207.411197][ T27] audit: type=1800 audit(1750504247.658:33): pid=17046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3175" name="bus" dev="overlay" ino=1355 res=0 errno=0 [ 1207.904083][ T27] audit: type=1800 audit(1750504248.128:34): pid=17048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3178" name="bus" dev="overlay" ino=741 res=0 errno=0 [ 1211.581888][ T27] audit: type=1800 audit(1750504251.828:35): pid=17081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3187" name="bus" dev="overlay" ino=1086 res=0 errno=0 [ 1211.909298][ T27] audit: type=1800 audit(1750504252.158:36): pid=17083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3189" name="bus" dev="overlay" ino=638 res=0 errno=0 [ 1214.268038][ T27] audit: type=1800 audit(1750504254.518:37): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3200" name="bus" dev="overlay" ino=777 res=0 errno=0 [ 1215.082861][T17134] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3208'. [ 1216.748152][ T27] audit: type=1800 audit(1750504256.998:38): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3216" name="bus" dev="overlay" ino=1142 res=0 errno=0 [ 1219.013495][ T27] audit: type=1800 audit(1750504259.248:39): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3227" name="bus" dev="overlay" ino=833 res=0 errno=0 [ 1222.448898][T17235] FAT-fs (nullb0): bogus number of reserved sectors [ 1222.455901][T17235] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1222.762469][ T5812] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1223.074105][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 1223.155955][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.307202][ T5812] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1223.460605][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1223.556232][ T5812] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1223.642029][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.753330][ T5812] usb 2-1: Product: syz [ 1223.801621][ T5812] usb 2-1: Manufacturer: syz [ 1223.862165][ T5812] usb 2-1: SerialNumber: syz [ 1224.044154][ T5812] usb 2-1: config 0 descriptor?? [ 1224.176848][ T5812] gs_usb 2-1:0.0: Required endpoints not found [ 1227.197664][ T5812] usb 2-1: USB disconnect, device number 5 [ 1227.640864][T17282] binder: 17281:17282 ioctl c0306201 200000000080 returned -14 [ 1230.528741][T17333] input: syz0 as /devices/virtual/input/input56 [ 1231.295341][T17356] vlan2: entered allmulticast mode [ 1231.300530][T17356] bond0: entered allmulticast mode [ 1231.343060][T17356] bond_slave_0: entered allmulticast mode [ 1231.348857][T17356] bond_slave_1: entered allmulticast mode [ 1231.360022][T17356] bridge0: port 3(vlan2) entered blocking state [ 1231.370227][T17356] bridge0: port 3(vlan2) entered disabled state [ 1231.380980][T17356] vlan2: entered promiscuous mode [ 1231.387447][T17356] bond0: entered promiscuous mode [ 1231.393046][T17356] bond_slave_0: entered promiscuous mode [ 1231.399131][T17356] bond_slave_1: entered promiscuous mode [ 1231.411019][T17356] bridge0: port 3(vlan2) entered blocking state [ 1231.417651][T17356] bridge0: port 3(vlan2) entered forwarding state [ 1234.424421][T17400] 9pnet_virtio: no channels available for device syz [ 1234.464269][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 1238.438817][ T27] audit: type=1800 audit(1750504278.688:40): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3309" name="bus" dev="overlay" ino=962 res=0 errno=0 [ 1239.016738][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.455343][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.752341][T16592] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1245.802356][T16592] usb 2-1: Using ep0 maxpacket: 8 [ 1245.843527][T16592] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1245.856525][ T27] audit: type=1800 audit(1750504286.108:41): pid=17552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3336" name="bus" dev="overlay" ino=1353 res=0 errno=0 [ 1245.950886][T16592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.037022][T16592] usb 2-1: Product: syz [ 1246.090544][T16592] usb 2-1: Manufacturer: syz [ 1246.155648][T16592] usb 2-1: SerialNumber: syz [ 1246.317433][T16592] usb 2-1: config 0 descriptor?? [ 1246.606848][T16592] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1246.643744][T16592] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1246.671470][T16592] usb 2-1: USB disconnect, device number 6 [ 1254.512667][T17637] FAT-fs (nullb0): bogus number of reserved sectors [ 1254.519336][T17637] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1254.853734][ T28] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1255.073101][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 1255.131856][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.232177][ T28] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.462354][ T28] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1256.044673][ T28] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1256.072432][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.090800][ T28] usb 2-1: Product: syz [ 1256.102509][ T28] usb 2-1: Manufacturer: syz [ 1256.107390][ T28] usb 2-1: SerialNumber: syz [ 1256.133209][ T28] usb 2-1: config 0 descriptor?? [ 1256.151259][ T28] gs_usb 2-1:0.0: Required endpoints not found [ 1256.223724][T17658] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1258.247651][T12840] usb 2-1: USB disconnect, device number 7 [ 1259.820550][T17703] FAT-fs (nullb0): bogus number of reserved sectors [ 1259.827379][T17703] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1260.127844][T16592] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1260.528933][T16592] usb 4-1: Using ep0 maxpacket: 32 [ 1260.544599][T16592] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.557008][T16592] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1260.582822][T16592] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1260.601992][T16592] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1260.611265][T16592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.619465][T16592] usb 4-1: Product: syz [ 1260.623747][T16592] usb 4-1: Manufacturer: syz [ 1260.628434][T16592] usb 4-1: SerialNumber: syz [ 1260.637541][T16592] usb 4-1: config 0 descriptor?? [ 1260.646838][T16592] gs_usb 4-1:0.0: Required endpoints not found [ 1262.957952][T16592] usb 4-1: USB disconnect, device number 9 [ 1263.444587][T17729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1263.473801][T17729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1263.492441][T17727] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1265.717244][T17766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3400'. [ 1265.732408][T17766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3400'. [ 1265.775400][T17761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3400'. [ 1267.819410][T17790] xt_hashlimit: size too large, truncated to 1048576 [ 1268.952610][T17801] block device autoloading is deprecated and will be removed. [ 1268.969747][T17801] syz.1.3410: attempt to access beyond end of device [ 1268.969747][T17801] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1269.129089][ T9078] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1269.797910][ T9078] usb 1-1: config 0 has no interfaces? [ 1269.839825][ T9078] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1269.878843][ T9078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.891578][ T9078] usb 1-1: config 0 descriptor?? [ 1269.932620][T17806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3413'. [ 1269.962050][T17806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3413'. [ 1269.981747][T17805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3413'. [ 1271.265993][T16592] usb 1-1: USB disconnect, device number 8 [ 1272.484050][T17838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1272.611685][T17838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1272.827778][T17836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1273.428877][T17846] FAT-fs (nullb0): bogus number of reserved sectors [ 1273.435684][T17846] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1274.343014][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1274.592759][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1274.661753][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.779967][ T9] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1274.929904][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1276.667878][ T9] usb 1-1: string descriptor 0 read error: -71 [ 1276.710762][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1276.748821][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.195476][ T9] usb 1-1: config 0 descriptor?? [ 1277.251494][ T9] usb 1-1: can't set config #0, error -71 [ 1277.341349][ T9] usb 1-1: USB disconnect, device number 9 [ 1278.880943][T17889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1281.493875][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.493875][T17916] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1281.522485][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.522485][T17916] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1281.552271][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1281.563445][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.563445][T17916] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1281.577039][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1281.589551][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.589551][T17916] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1281.610631][T17919] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1281.613839][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.613839][T17916] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1281.642499][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1281.653093][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.653093][T17916] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1281.703585][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1281.825538][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.825538][T17916] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1281.949470][T17916] syz.0.3450: attempt to access beyond end of device [ 1281.949470][T17916] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1282.097229][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1282.179792][T17916] syz.0.3450: attempt to access beyond end of device [ 1282.179792][T17916] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1282.305157][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1282.448877][T17916] syz.0.3450: attempt to access beyond end of device [ 1282.448877][T17916] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1282.463058][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1282.473951][T17916] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1282.485002][T17916] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1284.622885][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1284.640445][T17954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1284.661223][T17954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1284.670709][T17954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1284.679234][T17954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1284.686793][T17954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1284.771028][T13978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1284.785077][T13978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1284.812259][T13978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1284.903346][T13978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1284.916500][T13978] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1285.005926][T13978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1287.102423][T17954] Bluetooth: hci3: command tx timeout [ 1287.697729][T17946] chnl_net:caif_netlink_parms(): no params data found [ 1287.750253][ T27] audit: type=1800 audit(1750504327.998:42): pid=17984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3471" name="bus" dev="overlay" ino=1003 res=0 errno=0 [ 1288.673558][T17946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.711085][T17946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.719041][T17946] bridge_slave_0: entered allmulticast mode [ 1288.735812][T17946] bridge_slave_0: entered promiscuous mode [ 1289.172333][T17954] Bluetooth: hci3: command tx timeout [ 1289.438946][T17946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.462392][T17946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.494185][T17946] bridge_slave_1: entered allmulticast mode [ 1289.501535][T17946] bridge_slave_1: entered promiscuous mode [ 1289.622039][T17946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.654822][T17946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.934441][T17946] team0: Port device team_slave_0 added [ 1290.364815][T18017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3481'. [ 1290.714698][T17946] team0: Port device team_slave_1 added [ 1291.400370][T17954] Bluetooth: hci3: command tx timeout [ 1291.580823][T17946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.596504][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.626795][T17946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.640279][T17946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.651023][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.693758][T17946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.931122][T17946] hsr_slave_0: entered promiscuous mode [ 1291.962923][T12840] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1291.981294][T17946] hsr_slave_1: entered promiscuous mode [ 1291.991794][T17946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1292.026038][T17946] Cannot create hsr debugfs directory [ 1292.152467][T12840] usb 4-1: Using ep0 maxpacket: 8 [ 1292.176174][T12840] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1292.185994][T12840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.207863][T12840] usb 4-1: Product: syz [ 1292.222602][T12840] usb 4-1: Manufacturer: syz [ 1292.234663][T12840] usb 4-1: SerialNumber: syz [ 1292.273049][T12840] usb 4-1: config 0 descriptor?? [ 1292.560324][T12840] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 1292.568254][T12840] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1292.591192][T12840] usb 4-1: USB disconnect, device number 10 [ 1292.622698][T17946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1293.350862][T17946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1293.593093][T17954] Bluetooth: hci3: command tx timeout [ 1294.903818][T18052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1294.913778][T17946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1294.938978][T17946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1295.979256][T18071] FAT-fs (nullb0): bogus number of reserved sectors [ 1296.017305][T17946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.034804][T18071] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1296.121286][T17946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.195368][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.202805][T11311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.275669][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.282997][T11311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.352437][ T5812] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1296.578344][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 1296.590922][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.647720][ T5812] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1296.819282][ T5812] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1296.914946][ T5812] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1297.011302][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.108097][ T5812] usb 1-1: Product: syz [ 1297.150954][ T5812] usb 1-1: Manufacturer: syz [ 1297.205340][ T5812] usb 1-1: SerialNumber: syz [ 1297.333940][ T5812] usb 1-1: config 0 descriptor?? [ 1297.374349][ T5812] gs_usb 1-1:0.0: Required endpoints not found [ 1297.481628][T17946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.026156][T17946] veth0_vlan: entered promiscuous mode [ 1298.051267][T17946] veth1_vlan: entered promiscuous mode [ 1298.161880][T17946] veth0_macvtap: entered promiscuous mode [ 1298.229965][T17946] veth1_macvtap: entered promiscuous mode [ 1298.307913][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.363536][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.407562][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.436300][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.444559][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.455059][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.464955][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.475535][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.487246][T17946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.496955][T18103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3502'. [ 1299.508862][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.575071][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.588900][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.602258][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.646921][ T9078] usb 1-1: USB disconnect, device number 10 [ 1299.662838][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.697345][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.717710][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.747347][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.792578][T17946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.851728][T17946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.459688][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.466341][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.478923][T17946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.673649][T17946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.710544][T17946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.959462][T11311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.972736][T11311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.127973][T11311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.142021][T11311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.332336][ T5839] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1302.495374][T18134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1303.197361][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 1303.207776][ T5839] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1303.216955][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.225090][ T5839] usb 1-1: Product: syz [ 1303.229270][ T5839] usb 1-1: Manufacturer: syz [ 1303.234053][ T5839] usb 1-1: SerialNumber: syz [ 1303.947449][ T5839] usb 1-1: config 0 descriptor?? [ 1304.221332][ T5839] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 1304.293754][ T5839] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1304.435580][ T5839] usb 1-1: USB disconnect, device number 11 [ 1306.566655][T18173] binder: 18172:18173 ioctl c0306201 200000001440 returned -11 [ 1306.846072][T18184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1306.866950][T18184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1306.901195][T18178] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 1307.250902][ T5812] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1307.796979][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 1307.841308][ T5812] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1307.856151][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.864733][ T5812] usb 4-1: Product: syz [ 1307.869116][ T5812] usb 4-1: Manufacturer: syz [ 1307.874244][ T5812] usb 4-1: SerialNumber: syz [ 1307.882775][ T5812] usb 4-1: config 0 descriptor?? [ 1308.150716][ T5812] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 1308.158677][ T5812] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1308.178756][ T5812] usb 4-1: USB disconnect, device number 11 [ 1310.706710][T18215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1310.716912][T18215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1310.728471][T18212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1316.844242][T18273] ------------[ cut here ]------------ [ 1316.850102][T18273] WARNING: CPU: 0 PID: 18273 at fs/inode.c:389 inc_nlink+0x121/0x130 [ 1316.858640][T18273] Modules linked in: [ 1316.862632][T18273] CPU: 0 PID: 18273 Comm: syz.4.3560 Not tainted 6.6.94-syzkaller #0 [ 1316.870734][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1316.880899][T18273] RIP: 0010:inc_nlink+0x121/0x130 [ 1316.886070][T18273] Code: 43 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 19 43 ea ff e9 3f ff ff ff e8 0f 9c 91 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 1316.905839][T18273] RSP: 0018:ffffc9000447fc28 EFLAGS: 00010283 [ 1316.911934][T18273] RAX: ffffffff81f3f9c1 RBX: ffff888056428058 RCX: 0000000000080000 [ 1316.920293][T18273] RDX: ffffc9000cb9a000 RSI: 0000000000015290 RDI: 0000000000015291 [ 1316.928393][T18273] RBP: 0000000000000000 R08: ffff88805656009b R09: 1ffff1100acac013 [ 1316.936618][T18273] R10: dffffc0000000000 R11: ffffed100acac014 R12: dffffc0000000000 [ 1316.944880][T18273] R13: 1ffff1100ac8500b R14: ffff888056428000 R15: 0000000000000000 [ 1316.952958][T18273] FS: 00007f640db706c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1316.961919][T18273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1316.968908][T18273] CR2: 00007f640db4ef98 CR3: 000000002f829000 CR4: 00000000003506f0 [ 1316.977007][T18273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1316.985109][T18273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1316.993157][T18273] Call Trace: [ 1316.996458][T18273] [ 1316.999422][T18273] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 1317.004701][T18273] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 1317.010203][T18273] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 1317.016047][T18273] ? inode_permission+0xf3/0x480 [ 1317.021010][T18273] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1317.026145][T18273] ? security_inode_mkdir+0xb7/0x100 [ 1317.031474][T18273] vfs_mkdir+0x296/0x440 [ 1317.035856][T18273] do_mkdirat+0x1d4/0x440 [ 1317.040220][T18273] ? vfs_mkdir+0x440/0x440 [ 1317.044758][T18273] __x64_sys_mkdirat+0x89/0xa0 [ 1317.049558][T18273] do_syscall_64+0x55/0xb0 [ 1317.054084][T18273] ? clear_bhb_loop+0x40/0x90 [ 1317.058788][T18273] ? clear_bhb_loop+0x40/0x90 [ 1317.063558][T18273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.069486][T18273] RIP: 0033:0x7f640cd8e929 [ 1317.073981][T18273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.093836][T18273] RSP: 002b:00007f640db70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1317.102361][T18273] RAX: ffffffffffffffda RBX: 00007f640cfb5fa0 RCX: 00007f640cd8e929 [ 1317.110357][T18273] RDX: 0000000000000003 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1317.118443][T18273] RBP: 00007f640ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1317.126501][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.134576][T18273] R13: 0000000000000000 R14: 00007f640cfb5fa0 R15: 00007fff909442a8 [ 1317.142668][T18273] [ 1317.145706][T18273] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1317.152995][T18273] CPU: 0 PID: 18273 Comm: syz.4.3560 Not tainted 6.6.94-syzkaller #0 [ 1317.161070][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1317.171140][T18273] Call Trace: [ 1317.174429][T18273] [ 1317.177369][T18273] dump_stack_lvl+0x16c/0x230 [ 1317.182074][T18273] ? show_regs_print_info+0x20/0x20 [ 1317.187297][T18273] ? load_image+0x3b0/0x3b0 [ 1317.191831][T18273] panic+0x2c0/0x710 [ 1317.195745][T18273] ? bpf_jit_dump+0xd0/0xd0 [ 1317.200290][T18273] __warn+0x2e0/0x470 [ 1317.204284][T18273] ? inc_nlink+0x121/0x130 [ 1317.208721][T18273] ? inc_nlink+0x121/0x130 [ 1317.213157][T18273] report_bug+0x2be/0x4f0 [ 1317.217508][T18273] ? inc_nlink+0x121/0x130 [ 1317.221944][T18273] ? inc_nlink+0x121/0x130 [ 1317.226380][T18273] ? inc_nlink+0x123/0x130 [ 1317.230811][T18273] handle_bug+0xcf/0x120 [ 1317.235077][T18273] exc_invalid_op+0x1a/0x50 [ 1317.239602][T18273] asm_exc_invalid_op+0x1a/0x20 [ 1317.244474][T18273] RIP: 0010:inc_nlink+0x121/0x130 [ 1317.249517][T18273] Code: 43 ea ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 19 43 ea ff e9 3f ff ff ff e8 0f 9c 91 ff <0f> 0b eb 82 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 41 57 41 [ 1317.269143][T18273] RSP: 0018:ffffc9000447fc28 EFLAGS: 00010283 [ 1317.275225][T18273] RAX: ffffffff81f3f9c1 RBX: ffff888056428058 RCX: 0000000000080000 [ 1317.283210][T18273] RDX: ffffc9000cb9a000 RSI: 0000000000015290 RDI: 0000000000015291 [ 1317.291199][T18273] RBP: 0000000000000000 R08: ffff88805656009b R09: 1ffff1100acac013 [ 1317.299185][T18273] R10: dffffc0000000000 R11: ffffed100acac014 R12: dffffc0000000000 [ 1317.307170][T18273] R13: 1ffff1100ac8500b R14: ffff888056428000 R15: 0000000000000000 [ 1317.315170][T18273] ? inc_nlink+0x121/0x130 [ 1317.319615][T18273] ? inc_nlink+0x121/0x130 [ 1317.324057][T18273] v9fs_vfs_mkdir_dotl+0x624/0x780 [ 1317.329203][T18273] ? v9fs_vfs_symlink_dotl+0x640/0x640 [ 1317.334685][T18273] ? capable_wrt_inode_uidgid+0x1e6/0x280 [ 1317.340444][T18273] ? inode_permission+0xf3/0x480 [ 1317.345395][T18273] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1317.350432][T18273] ? security_inode_mkdir+0xb7/0x100 [ 1317.355754][T18273] vfs_mkdir+0x296/0x440 [ 1317.360024][T18273] do_mkdirat+0x1d4/0x440 [ 1317.364375][T18273] ? vfs_mkdir+0x440/0x440 [ 1317.368820][T18273] __x64_sys_mkdirat+0x89/0xa0 [ 1317.373600][T18273] do_syscall_64+0x55/0xb0 [ 1317.378037][T18273] ? clear_bhb_loop+0x40/0x90 [ 1317.382746][T18273] ? clear_bhb_loop+0x40/0x90 [ 1317.387439][T18273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.393359][T18273] RIP: 0033:0x7f640cd8e929 [ 1317.397786][T18273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.417413][T18273] RSP: 002b:00007f640db70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1317.425853][T18273] RAX: ffffffffffffffda RBX: 00007f640cfb5fa0 RCX: 00007f640cd8e929 [ 1317.433858][T18273] RDX: 0000000000000003 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1317.441860][T18273] RBP: 00007f640ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1317.449857][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.457845][T18273] R13: 0000000000000000 R14: 00007f640cfb5fa0 R15: 00007fff909442a8 [ 1317.465852][T18273] [ 1317.469154][T18273] Kernel Offset: disabled [ 1317.473536][T18273] Rebooting in 86400 seconds..