last executing test programs: 31.37318789s ago: executing program 3 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r2, 0x0, 0x0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 21.503350441s ago: executing program 3 (id=400): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x42, 0x100) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) 19.99063831s ago: executing program 3 (id=403): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 19.598065802s ago: executing program 3 (id=405): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x4) 17.882343558s ago: executing program 3 (id=409): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsopen(0x0, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 12.044895228s ago: executing program 0 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 8.654471289s ago: executing program 4 (id=432): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.582378404s ago: executing program 4 (id=433): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x6, 0x0, &(0x7f0000000200)="63eced8e46dc", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab"], 0xfe33) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3.944339162s ago: executing program 0 (id=438): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000002c0)={'vlan0\x00', @random="0100061f8145"}) 3.829641126s ago: executing program 0 (id=439): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 3.829366416s ago: executing program 1 (id=440): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 3.828904616s ago: executing program 4 (id=441): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2480", 0x2}], 0x1}, 0x20004081) recvmsg$unix(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}, 0x40010022) 3.749741868s ago: executing program 3 (id=443): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.71088696s ago: executing program 4 (id=444): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)="84edc6e9", 0x4}], 0x1}, 0x20008800) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.69637677s ago: executing program 0 (id=445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200040}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.480103787s ago: executing program 32 (id=443): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.454641468s ago: executing program 0 (id=447): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000680)=""/124, 0x75}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f0000000000)=""/20, 0x6f}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f00000000c0)=""/10, 0x13}, {&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000240)=""/200, 0x7d}, {&(0x7f0000000700)=""/178, 0xac}, {&(0x7f00000036c0)=""/4114, 0x1012}], 0x9}, 0x0) 3.396524369s ago: executing program 4 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.38929921s ago: executing program 2 (id=450): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.314135032s ago: executing program 1 (id=451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r1, 0x1, 0x70bd29, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4080) 3.239033595s ago: executing program 2 (id=452): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3.228805445s ago: executing program 1 (id=453): unshare(0x24020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 3.08207859s ago: executing program 1 (id=454): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2480", 0x2}], 0x1}, 0x20004081) recvmsg$unix(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}, 0x40010022) 2.79237328s ago: executing program 1 (id=455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2}}}}, 0x0) 2.1628593s ago: executing program 2 (id=456): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 2.057231033s ago: executing program 2 (id=457): r0 = socket$unix(0x1, 0x1, 0x0) r1 = add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r1}, &(0x7f0000000280)=""/190, 0xbe, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'geneve1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x90012, 0xffffffffffffffff, 0xbb62c000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) readv(r6, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x18}], 0x1) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 1.057081616s ago: executing program 2 (id=458): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="6b45c2e35440fb", @ANYRES32, @ANYRES8=0x0, @ANYRES64=0x0], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c00180000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000002600010000"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 259.150602ms ago: executing program 0 (id=459): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYRES32, @ANYBLOB="040000000380020008000a00", @ANYRES32], 0x50}}, 0x0) 204.655023ms ago: executing program 4 (id=460): syz_emit_ethernet(0x56, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc020000000000000000000000000000ff020000000000000000000000000001040090780000000038d068994114ee6097436700008800fe88001e000000000000000000000001fe8000000000000000000000000000aa00010000000000000106000000000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r3) r4 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 9.33655ms ago: executing program 1 (id=461): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000a9e000/0x1000)=nil, 0x1000, 0xa, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc0200000000000000000000000000fefc020000000000000000000000000001fffc0000000000040a00e08000000000", @ANYRESDEC=r2, @ANYBLOB="62b3683860cc31d603fcc2c3acda3460b9b9b0fcb5c0453326e9db538cc6df028d787f4756749249bee7764248c22cd234ac7a8b64b4088d1ebb17556c0453decafb58b88b122870399868fc669119b103e2957adb086cc0656a845cf5df44811a37822c8b9621de43916963b983ca992817aa3abbc620d3ab", @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa330300d3010000000000000000000000000000000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000fc0200000000000000000000000000003c00000000000000080008002c0013"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1a, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) clock_settime(0xfffffffb, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x4000, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x2d) 0s ago: executing program 2 (id=462): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000085804184000000000000109022400010000402009040000020300010009210700000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)={0x20, 0xf, 0x26, {0x26, 0xa, "d23e52e3e36cc7cc8ce3ac7d4dfdece0979b047d7a547dc12f778416859f38292155e9eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): is not up; please bring it up to get a fully working HSR network [ 68.855625][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.890087][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.899298][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.908328][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.918922][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.928387][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.937082][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.946047][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.955888][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.964644][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.981996][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.010414][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.029586][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.053579][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.063741][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.094410][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.120308][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.150895][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.163185][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.173923][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.181083][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.190960][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.202007][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.211272][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.218428][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.231803][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.254865][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.265408][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.277258][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.288130][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.312235][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.332638][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.342638][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.353973][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.365143][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.374877][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.399542][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.419871][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.428956][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.446154][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.463856][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.481321][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.496711][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.505756][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.516301][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.527297][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.536385][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.546446][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.555877][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.563043][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.573412][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.582349][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.607070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.618123][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 69.618135][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 69.633243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.641588][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 69.648795][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.655905][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.665165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.681525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.690408][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.697646][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.705554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.713782][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 69.720100][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 69.730561][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.777276][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.796662][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.805733][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.812922][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.822117][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.831247][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.840297][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.850426][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.858689][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.867394][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.875218][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.885533][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.895692][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.912890][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.927273][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.936255][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.952443][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.965104][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.980969][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.994124][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.021196][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.043046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.054554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.063576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.073810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.097243][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.109436][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.129309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.138305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.147012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.155966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.166276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.175898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.185349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.204656][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.216953][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.253948][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.266166][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.278278][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.285799][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.314743][ T4198] device veth0_vlan entered promiscuous mode [ 70.333526][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.364854][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.374034][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.391987][ T4198] device veth1_vlan entered promiscuous mode [ 70.418040][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.425952][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.443455][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.455174][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.464737][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.501549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.535541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.552365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.573641][ T4187] device veth0_vlan entered promiscuous mode [ 70.603221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.613739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.623524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.633309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.641622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.651028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.665788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.674662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.687265][ T4198] device veth0_macvtap entered promiscuous mode [ 70.698636][ T4198] device veth1_macvtap entered promiscuous mode [ 70.711422][ T4195] device veth0_vlan entered promiscuous mode [ 70.719147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.727235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.735735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.746325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.756775][ T4187] device veth1_vlan entered promiscuous mode [ 70.767063][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.784597][ T4195] device veth1_vlan entered promiscuous mode [ 70.793580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.802075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.811003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.819580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.831062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.838643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.867184][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.882359][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.894131][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.903715][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.921417][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.945971][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.968311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.988149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.997051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.025211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.039811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.061787][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.073388][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.082986][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.091835][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.121808][ T4195] device veth0_macvtap entered promiscuous mode [ 71.135544][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.154108][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.164472][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.173696][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.182882][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.192248][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.205147][ T4187] device veth0_macvtap entered promiscuous mode [ 71.234521][ T4188] device veth0_vlan entered promiscuous mode [ 71.244693][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.257056][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.266683][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.276299][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.287853][ T4187] device veth1_macvtap entered promiscuous mode [ 71.322983][ T4188] device veth1_vlan entered promiscuous mode [ 71.347393][ T4195] device veth1_macvtap entered promiscuous mode [ 71.368518][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.384634][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.396527][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.403107][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.409787][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.438206][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.446371][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.454526][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.465567][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.474488][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.483591][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.506017][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.520757][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.531040][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.542893][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.554656][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.565750][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.576343][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.588456][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.597052][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.608068][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.619133][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.630757][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.642442][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.663888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.673120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.682634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.692004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.701496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.710433][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 71.716605][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 71.723546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.732018][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 71.755195][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.764425][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.773648][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.784494][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 71.790835][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.799911][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 71.814832][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.824105][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.834081][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.843384][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.861972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.872154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.897977][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.908062][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.948671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.981359][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.993419][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.004957][ T4188] device veth0_macvtap entered promiscuous mode [ 72.039428][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.058862][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.066801][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.095003][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.105839][ T4200] device veth0_vlan entered promiscuous mode [ 72.116403][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.126857][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.135635][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.145998][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.154130][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.162379][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.173806][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.184425][ T4188] device veth1_macvtap entered promiscuous mode [ 72.205788][ T4200] device veth1_vlan entered promiscuous mode [ 72.305566][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.324626][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.332761][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.373315][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.407088][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.424914][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.435982][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.452496][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.465630][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.493504][ T4200] device veth0_macvtap entered promiscuous mode [ 72.518401][ T4200] device veth1_macvtap entered promiscuous mode [ 72.543379][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.560641][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.575890][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.591909][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.605978][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.620392][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.635542][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.646241][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.658916][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.674778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.684051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.692647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.701745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.710940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.720405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.730034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.741710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.750657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.770948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.852364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.980474][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.086858][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.579955][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.611221][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.624593][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.643435][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.665009][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.678593][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.708160][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.717504][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.743820][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.753740][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.764281][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.778004][ T4189] Bluetooth: hci2: command 0x0419 tx timeout [ 73.781650][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.789770][ T4189] Bluetooth: hci0: command 0x0419 tx timeout [ 73.795042][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.812072][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.823631][ T4189] Bluetooth: hci3: command 0x0419 tx timeout [ 73.828222][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.842792][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.858078][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.874895][ T4189] Bluetooth: hci4: command 0x0419 tx timeout [ 73.881903][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.889481][ T4189] Bluetooth: hci1: command 0x0419 tx timeout [ 73.896393][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.911087][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.920841][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.930418][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.950459][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.960382][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.969250][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.978055][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.999829][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.021395][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035419][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.046075][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.088209][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.096091][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.350012][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.478259][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.508338][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.533463][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.558513][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.566393][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.591177][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.603558][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.614068][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.709489][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.772317][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.809110][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.842819][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.845452][ T4297] loop0: detected capacity change from 0 to 512 [ 75.891688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.994510][ T4297] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.047712][ T4297] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.117768][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 76.144100][ T4297] EXT4-fs (loop0): 1 truncate cleaned up [ 76.144143][ T4297] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,min_batch_time=0x0000000000000001,,errors=continue. Quota mode: none. [ 76.170738][ T4299] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.170871][ T4299] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.174496][ T4297] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.9: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 76.180770][ T4297] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 76.181166][ T4297] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.9: Deleting old file: nlink 4, error=-117 [ 76.185327][ T4301] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 76.185341][ T4301] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 76.266269][ T4231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.266358][ T4231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.439929][ T4231] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.439963][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.439985][ T4231] usb 2-1: Product: syz [ 76.440002][ T4231] usb 2-1: Manufacturer: syz [ 76.440019][ T4231] usb 2-1: SerialNumber: syz [ 76.459650][ T4311] loop0: detected capacity change from 0 to 512 [ 76.485524][ T4313] loop3: detected capacity change from 0 to 256 [ 76.573966][ T4311] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.574252][ T4311] EXT4-fs error (device loop0): ext4_find_extent:893: inode #4: comm syz.0.10: inode has invalid extent depth: 7 [ 76.575324][ T4313] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 76.576760][ T4311] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 76.576835][ T4311] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 76.576866][ T4311] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 76.576884][ T4311] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 76.612886][ T4313] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 76.612973][ T4313] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e5e07e0 iblock : 8, err : -5) [ 76.620785][ T4313] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 76.824221][ T4231] usb 2-1: 0:2 : does not exist [ 76.829872][ T4231] usb 2-1: unit 9 not found! [ 77.095065][ T4318] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 78.327567][ C0] sched: RT throttling activated [ 78.355571][ T4326] loop4: detected capacity change from 0 to 1024 [ 79.356818][ T4231] usb 2-1: USB disconnect, device number 2 [ 79.807367][ T4321] device syzkaller0 entered promiscuous mode [ 84.583895][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.520639][ T4346] loop4: detected capacity change from 0 to 512 [ 85.755504][ T4346] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.898312][ T4346] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.915686][ T4355] loop0: detected capacity change from 0 to 2048 [ 86.126210][ T4355] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.350620][ T4346] overlayfs: failed to resolve './file0': -2 [ 86.510140][ T4195] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 87.077006][ T4369] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.208603][ T7] cfg80211: failed to load regulatory.db [ 87.379644][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.578033][ T4374] loop4: detected capacity change from 0 to 512 [ 87.627781][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 87.702680][ T4374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.769637][ T4374] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.787994][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.808977][ T4374] EXT4-fs (loop4): 1 truncate cleaned up [ 87.814684][ T4374] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 87.887900][ T4232] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 114, changing to 7 [ 87.919579][ T4232] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.023041][ T4387] loop2: detected capacity change from 0 to 2048 [ 88.087850][ T4232] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 88.096993][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.138803][ T4232] usb 4-1: Product: syz [ 88.146580][ T4232] usb 4-1: Manufacturer: syz [ 88.151623][ T4232] usb 4-1: SerialNumber: syz [ 88.265270][ T4387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.319409][ T4398] capability: warning: `syz.1.31' uses deprecated v2 capabilities in a way that may be insecure [ 88.374878][ T4388] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 88.628033][ T4232] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 88.663499][ T4232] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 88.757803][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.766326][ T4232] usb 4-1: USB disconnect, device number 2 [ 89.127865][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.178520][ T4229] usb 2-1: config 0 has no interfaces? [ 89.185248][ T4229] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 89.195086][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.232978][ T4369] syz.3.24 (4369) used greatest stack depth: 21048 bytes left [ 89.241296][ T4229] usb 2-1: config 0 descriptor?? [ 89.257838][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.446522][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 89.507750][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 89.527835][ T4263] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.647696][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.665053][ T4230] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 89.686140][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.704825][ T4230] usb 3-1: config 0 descriptor?? [ 89.948535][ T4430] loop0: detected capacity change from 0 to 32768 [ 90.027517][ T4438] binder: 4437:4438 ioctl c00c6211 9999999999999999 returned -22 [ 90.093390][ T4444] loop4: detected capacity change from 0 to 512 [ 90.109482][ T4430] XFS (loop0): Mounting V5 Filesystem [ 90.137725][ T4263] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 90.149459][ T4263] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.159917][ T4263] usb 4-1: config 220 has no interface number 2 [ 90.166405][ T4263] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 90.179823][ T4263] usb 4-1: config 220 interface 0 has no altsetting 0 [ 90.186888][ T4263] usb 4-1: config 220 interface 76 has no altsetting 0 [ 90.204961][ T4263] usb 4-1: config 220 interface 1 has no altsetting 0 [ 90.209883][ T4230] hid (null): report_id 39845 is invalid [ 90.252667][ T4230] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x2 [ 90.282343][ T4430] XFS (loop0): Ending clean mount [ 90.284490][ T4230] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x5 [ 90.316230][ T4430] XFS (loop0): Quotacheck needed: Please wait. [ 90.318007][ T4230] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x6 [ 90.355411][ T4230] magicmouse 0003:05AC:0269.0001: unknown main item tag 0x2 [ 90.406434][ T4230] magicmouse 0003:05AC:0269.0001: report_id 39845 is invalid [ 90.419914][ T4263] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 90.432320][ T4230] magicmouse 0003:05AC:0269.0001: item 0 2 1 8 parsing failed [ 90.447017][ T4444] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.455822][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.465462][ T4230] magicmouse 0003:05AC:0269.0001: magicmouse hid parse failed [ 90.471355][ T4263] usb 4-1: Product: syz [ 90.477239][ T4263] usb 4-1: Manufacturer: syz [ 90.490047][ T4444] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.46: inode has both inline data and extents flags [ 90.490079][ T4263] usb 4-1: SerialNumber: syz [ 90.523832][ T4444] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.46: couldn't read orphan inode 15 (err -117) [ 90.524354][ T4230] magicmouse: probe of 0003:05AC:0269.0001 failed with error -22 [ 90.548641][ T4430] XFS (loop0): Quotacheck: Done. [ 90.573444][ T4230] usb 3-1: USB disconnect, device number 2 [ 90.618917][ T4444] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 90.900928][ T4458] overlayfs: missing 'lowerdir' [ 91.198335][ T4444] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 91.382243][ T4195] XFS (loop0): Unmounting Filesystem [ 91.497397][ T4263] usb 4-1: selecting invalid altsetting 0 [ 91.535870][ T4263] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 91.559028][ T4263] usb 4-1: No valid video chain found. [ 91.589413][ T13] usb 2-1: USB disconnect, device number 3 [ 91.654464][ T4467] ======================================================= [ 91.654464][ T4467] WARNING: The mand mount option has been deprecated and [ 91.654464][ T4467] and is ignored by this kernel. Remove the mand [ 91.654464][ T4467] option from the mount to silence this warning. [ 91.654464][ T4467] ======================================================= [ 91.731496][ T4263] usb 4-1: selecting invalid altsetting 0 [ 91.737806][ T4263] usbtest: probe of 4-1:220.1 failed with error -22 [ 91.775979][ T4263] usb 4-1: USB disconnect, device number 3 [ 91.967512][ T4474] loop1: detected capacity change from 0 to 128 [ 92.992593][ T26] audit: type=1326 audit(1781304123.728:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.034070][ T4474] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 93.079012][ T4263] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.097760][ T4474] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.146692][ T26] audit: type=1326 audit(1781304123.808:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.227280][ T4488] loop3: detected capacity change from 0 to 2048 [ 93.275141][ T26] audit: type=1326 audit(1781304123.808:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.321900][ T26] audit: type=1326 audit(1781304123.818:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.406981][ T26] audit: type=1326 audit(1781304123.818:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.483685][ T4488] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.511298][ T4463] loop2: detected capacity change from 0 to 40427 [ 93.527996][ T4263] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.547597][ T4263] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.637753][ T4463] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 93.645962][ T4463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.657943][ T4263] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.667620][ T26] audit: type=1326 audit(1781304123.818:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.678413][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.713537][ T4489] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 93.769814][ T4263] usb 5-1: SerialNumber: syz [ 93.850004][ T4463] F2FS-fs (loop2): invalid crc value [ 93.898999][ T26] audit: type=1326 audit(1781304123.828:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.934682][ T26] audit: type=1326 audit(1781304123.828:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 93.959743][ T4463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.145988][ T26] audit: type=1326 audit(1781304123.828:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 94.708465][ T26] audit: type=1326 audit(1781304123.828:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.0.54" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x7ffc0000 [ 95.337762][ T4506] loop1: detected capacity change from 0 to 40427 [ 95.388898][ T4506] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.458327][ T4506] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.507531][ T4506] F2FS-fs (loop1): invalid crc value [ 95.557510][ T4506] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.670051][ T4263] usb 5-1: 0:2 : does not exist [ 95.911390][ T4263] usb 5-1: USB disconnect, device number 2 [ 96.650492][ T4506] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 96.662266][ T4506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.692140][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.582023][ T4537] loop2: detected capacity change from 0 to 16 [ 97.693943][ T4537] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.752109][ T4537] overlayfs: failed to get redirect (-117) [ 98.364473][ T4539] input: syz0 as /devices/virtual/input/input5 [ 98.563822][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 98.563836][ T26] audit: type=1326 audit(1781304129.298:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.3.71" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x0 [ 98.907809][ T4232] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.928791][ T4232] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 99.978023][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 99.991216][ T4567] loop3: detected capacity change from 0 to 512 [ 100.008158][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 100.058192][ T4232] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 100.087757][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.109422][ T4232] usb 3-1: config 0 descriptor?? [ 100.128145][ T4552] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.141638][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 100.209004][ T4567] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.227244][ T4573] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.79'. [ 100.665739][ T4232] hid-multitouch 0003:1FD2:6007.0002: ignoring exceeding usage max [ 100.824730][ T4232] hid-multitouch 0003:1FD2:6007.0002: unknown global tag 0xd [ 100.937496][ T4232] hid-multitouch 0003:1FD2:6007.0002: item 0 4 1 13 parsing failed [ 101.079673][ T4232] hid-multitouch: probe of 0003:1FD2:6007.0002 failed with error -22 [ 101.276434][ T4232] usb 3-1: USB disconnect, device number 3 [ 101.944075][ T4580] loop4: detected capacity change from 0 to 256 [ 102.192776][ T4580] FAT-fs (loop4): Directory bread(block 64) failed [ 102.207761][ T4580] FAT-fs (loop4): Directory bread(block 65) failed [ 102.216904][ T4580] FAT-fs (loop4): Directory bread(block 66) failed [ 102.228470][ T4580] FAT-fs (loop4): Directory bread(block 67) failed [ 102.302717][ T4588] input: syz0 as /devices/virtual/input/input6 [ 102.394179][ T4580] FAT-fs (loop4): Directory bread(block 68) failed [ 102.464929][ T4580] FAT-fs (loop4): Directory bread(block 69) failed [ 102.543932][ T4580] FAT-fs (loop4): Directory bread(block 70) failed [ 102.616317][ T4580] FAT-fs (loop4): Directory bread(block 71) failed [ 102.689093][ T4580] FAT-fs (loop4): Directory bread(block 72) failed [ 102.774950][ T4580] FAT-fs (loop4): Directory bread(block 73) failed [ 104.181260][ T4607] loop1: detected capacity change from 0 to 256 [ 104.189520][ T4602] loop2: detected capacity change from 0 to 4096 [ 104.207952][ T4605] loop0: detected capacity change from 0 to 512 [ 104.258973][ T4602] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 104.276601][ T4607] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 104.310019][ T4602] EXT4-fs (loop2): inline encryption not supported [ 104.326172][ T4605] EXT4-fs (loop0): 1 truncate cleaned up [ 104.350257][ T4605] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 104.373243][ T4602] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.466235][ T4602] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 104.474589][ T4602] System zones: 0-5 [ 104.485183][ T4602] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 104.528636][ T4611] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.555676][ T4611] kvm: pic: non byte read [ 104.560816][ T4611] kvm: pic: non byte read [ 104.565533][ T4611] kvm: pic: non byte read [ 104.571021][ T4611] kvm: pic: level sensitive irq not supported [ 104.571159][ T4611] kvm: pic: non byte read [ 104.582474][ T4611] kvm: pic: non byte read [ 104.587183][ T4611] kvm: pic: non byte read [ 104.594042][ T4611] kvm: pic: non byte read [ 104.599818][ T4611] kvm: pic: non byte read [ 104.604826][ T4611] kvm: pic: non byte read [ 104.610427][ T4611] kvm: pic: single mode not supported [ 104.610521][ T4611] kvm: pic: non byte read [ 105.087038][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 106.435682][ T4630] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.92'. [ 108.246386][ T4633] loop4: detected capacity change from 0 to 40427 [ 108.512510][ T4633] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 108.558162][ T4633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 108.632256][ T4633] F2FS-fs (loop4): invalid crc value [ 108.707417][ T4633] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.917727][ T4633] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 108.946278][ T4633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.193529][ T4674] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.106'. [ 109.207748][ T4262] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.184776][ T4679] input: syz0 as /devices/virtual/input/input7 [ 110.289688][ T26] audit: type=1326 audit(1781304141.028:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.3.107" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x0 [ 110.381410][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.400385][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.421437][ T4262] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.456609][ T4262] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.494101][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.557400][ T4262] usb 1-1: config 0 descriptor?? [ 110.931552][ T4691] loop2: detected capacity change from 0 to 2048 [ 111.055324][ T4691] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.071065][ T4262] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 111.240658][ T4262] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 111.385064][ T4708] loop4: detected capacity change from 0 to 256 [ 111.482016][ T4708] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.551317][ T4708] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 111.699115][ T4708] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 112.761329][ T4731] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.955358][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'. [ 113.228791][ T4234] usb 1-1: USB disconnect, device number 2 [ 113.238129][ T4743] loop4: detected capacity change from 0 to 4096 [ 113.317822][ T4262] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.330931][ T4747] loop0: detected capacity change from 0 to 2048 [ 113.422570][ T4721] loop1: detected capacity change from 0 to 40427 [ 113.442589][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 113.511002][ T4721] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 113.517397][ T4721] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 113.530013][ T4747] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.544312][ T4721] F2FS-fs (loop1): invalid crc value [ 113.598006][ T4721] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 113.709248][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.743186][ T4721] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 113.757622][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.775209][ T4721] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 113.777916][ T4262] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.879135][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.890360][ T4759] loop4: detected capacity change from 0 to 256 [ 113.917230][ T4262] usb 3-1: config 0 descriptor?? [ 114.029903][ T4759] FAT-fs (loop4): Directory bread(block 64) failed [ 114.040182][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 114.056797][ T4187] attempt to access beyond end of device [ 114.056797][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 114.077433][ T4759] FAT-fs (loop4): Directory bread(block 65) failed [ 114.107976][ T4759] FAT-fs (loop4): Directory bread(block 66) failed [ 114.127719][ T4759] FAT-fs (loop4): Directory bread(block 67) failed [ 114.134424][ T4759] FAT-fs (loop4): Directory bread(block 68) failed [ 114.157913][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.178343][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.201869][ T4759] FAT-fs (loop4): Directory bread(block 69) failed [ 114.223308][ T4759] FAT-fs (loop4): Directory bread(block 70) failed [ 114.244587][ T4759] FAT-fs (loop4): Directory bread(block 71) failed [ 114.262743][ T4759] FAT-fs (loop4): Directory bread(block 72) failed [ 114.277284][ T4759] FAT-fs (loop4): Directory bread(block 73) failed [ 114.373879][ T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.393174][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.401886][ T4262] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 114.422160][ T21] usb 4-1: Product: syz [ 114.435322][ T26] audit: type=1800 audit(1781304145.168:17): pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.128" name="file1" dev="loop4" ino=1048595 res=0 errno=0 [ 114.450352][ T4262] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input8 [ 114.466298][ T21] usb 4-1: Manufacturer: syz [ 114.484463][ T21] usb 4-1: SerialNumber: syz [ 114.511453][ T26] audit: type=1800 audit(1781304145.168:18): pid=4764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.128" name="file1" dev="loop4" ino=1048595 res=0 errno=0 [ 114.651887][ T4262] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 114.822205][ T4262] usb 3-1: USB disconnect, device number 4 [ 114.907944][ T21] usb 4-1: 0:2 : does not exist [ 116.056875][ T4772] loop4: detected capacity change from 0 to 512 [ 116.073796][ T21] usb 4-1: USB disconnect, device number 4 [ 116.251132][ T4772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.131: bg 0: block 5: invalid block bitmap [ 116.397687][ T4772] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 116.456418][ T4772] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.131: invalid indirect mapped block 3 (level 2) [ 116.471162][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.511462][ T4783] futex_wake_op: syz.2.133 tries to shift op by -1; fix this program [ 116.553639][ T4772] EXT4-fs (loop4): 2 truncates cleaned up [ 116.617790][ T4772] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.865175][ T4783] loop2: detected capacity change from 0 to 256 [ 116.934087][ T4783] exfat: Deprecated parameter 'namecase' [ 116.992167][ T4783] exfat: Deprecated parameter 'namecase' [ 117.082394][ T4783] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 117.504205][ T4799] loop0: detected capacity change from 0 to 256 [ 117.606783][ T4800] loop3: detected capacity change from 0 to 2048 [ 117.650385][ T26] audit: type=1804 audit(1781304148.388:19): pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.141" name="/newroot/32/file4/bus" dev="loop0" ino=1048597 res=1 errno=0 [ 117.707796][ T7] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 117.760287][ T26] audit: type=1804 audit(1781304148.498:20): pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.141" name="/newroot/32/file4/bus" dev="loop0" ino=1048597 res=1 errno=0 [ 117.870042][ T26] audit: type=1804 audit(1781304148.498:21): pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.141" name="/newroot/32/file4/bus" dev="loop0" ino=1048597 res=1 errno=0 [ 117.897868][ T4800] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.939932][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.995329][ T4818] loop3: detected capacity change from 0 to 512 [ 119.001835][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 119.068422][ T4818] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.3.144: corrupted xattr block 95 [ 119.099062][ T4827] netlink: 95 bytes leftover after parsing attributes in process `syz.0.149'. [ 119.107163][ T7] usb 5-1: config 12 has an invalid interface number: 245 but max is 0 [ 119.192982][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 119.211495][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 119.327751][ T7] usb 5-1: config 12 has no interface number 0 [ 119.334686][ T7] usb 5-1: config 12 interface 245 has no altsetting 0 [ 119.434897][ T4818] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.144: bg 0: block 7: invalid block bitmap [ 119.532116][ T4818] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 119.611692][ T4818] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #11: comm syz.3.144: corrupted xattr block 95 [ 119.698003][ T4838] Zero length message leads to an empty skb [ 119.721556][ T4818] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 119.745635][ T4840] loop0: detected capacity change from 0 to 512 [ 119.765854][ T4818] EXT4-fs (loop3): 1 orphan inode deleted [ 119.791522][ T4818] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.838273][ T4838] device syzkaller0 entered promiscuous mode [ 119.849692][ T4840] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.882720][ T4840] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.913577][ T26] audit: type=1800 audit(1781304150.700:22): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.144" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 119.945454][ T7] usb 5-1: New USB device found, idVendor=55fb, idProduct=6141, bcdDevice=45.34 [ 119.981576][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.996318][ T7] usb 5-1: Product: syz [ 120.005948][ T4840] overlayfs: upper fs does not support file handles, falling back to index=off. [ 120.011144][ T7] usb 5-1: Manufacturer: syz [ 120.030069][ T7] usb 5-1: SerialNumber: syz [ 120.046554][ T4842] ipt_CLUSTERIP: Please specify destination IP [ 120.273961][ T4848] loop3: detected capacity change from 0 to 2048 [ 120.363723][ T7] ir_usb 5-1:12.245: required endpoints missing [ 120.431167][ T7] usb 5-1: USB disconnect, device number 3 [ 120.474881][ T4855] input: syz0 as /devices/virtual/input/input9 [ 120.489499][ T4848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.659480][ T26] audit: type=1326 audit(1781304151.443:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4853 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe385f0e59 code=0x0 [ 120.922017][ T4861] loop4: detected capacity change from 0 to 256 [ 121.135955][ T4861] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 121.474869][ T4867] loop4: detected capacity change from 0 to 512 [ 121.573463][ T4867] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.626522][ T4867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c018, mo2=0002] [ 121.658392][ T4867] EXT4-fs (loop4): 1 truncate cleaned up [ 121.674574][ T4867] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,grpquota,debug_want_extra_isize=0x000000000000006c,mb_optimize_scan=0x0000000000000001,debug,data=journal,noblock_validity,,errors=continue. Quota mode: writeback. [ 121.824893][ T4879] loop3: detected capacity change from 0 to 128 [ 121.918353][ T26] audit: type=1326 audit(1781304152.692:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.164" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 122.029338][ T26] audit: type=1326 audit(1781304152.721:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.164" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 122.139771][ T26] audit: type=1326 audit(1781304152.721:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.164" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 122.187197][ T4889] device syzkaller0 entered promiscuous mode [ 122.200856][ T4888] loop4: detected capacity change from 0 to 2048 [ 122.308784][ T4888] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.315029][ T26] audit: type=1326 audit(1781304152.721:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.164" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 122.344299][ T26] audit: type=1326 audit(1781304152.721:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4878 comm="syz.3.164" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 122.509159][ T4890] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 123.615019][ T4911] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.659865][ T4913] loop3: detected capacity change from 0 to 512 [ 123.783765][ T4913] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.803240][ T4915] loop0: detected capacity change from 0 to 512 [ 123.839100][ T4913] EXT4-fs error (device loop3): ext4_find_extent:893: inode #4: comm syz.3.174: inode has invalid extent depth: 7 [ 124.200716][ T4913] __quota_error: 6 callbacks suppressed [ 124.200977][ T4913] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 124.572432][ T4915] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.175: iget: bogus i_mode (16) [ 124.606479][ T4913] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 124.654132][ T4915] EXT4-fs (loop0): Remounting filesystem read-only [ 124.700830][ T4915] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.175: couldn't read orphan inode 15 (err -117) [ 124.734537][ T4913] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 124.741205][ T4913] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 124.833314][ T4915] EXT4-fs (loop0): Remounting filesystem read-only [ 125.040530][ T4915] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x0000000000000008,jqfmt=vfsv1,errors=remount-ro,jqfmt=vfsv1,usrjquota=,. Quota mode: none. [ 125.155147][ T4929] netlink: 'syz.3.174': attribute type 4 has an invalid length. [ 125.504517][ T4929] syz.3.174 (4929) used greatest stack depth: 20272 bytes left [ 125.866480][ T4934] loop4: detected capacity change from 0 to 32768 [ 126.096866][ T4936] device syzkaller0 entered promiscuous mode [ 126.871643][ T4934] XFS (loop4): Mounting V5 Filesystem [ 126.992508][ T4934] XFS (loop4): Ending clean mount [ 127.000223][ T4934] XFS (loop4): Quotacheck needed: Please wait. [ 127.043500][ T4262] kernel write not supported for file /85/net/ip_tables_targets (pid: 4262 comm: kworker/0:7) [ 127.257286][ T4934] XFS (loop4): Quotacheck: Done. [ 128.917626][ T4955] overlayfs: missing 'lowerdir' [ 129.395823][ T4200] XFS (loop4): Unmounting Filesystem [ 129.455922][ T4962] loop3: detected capacity change from 0 to 128 [ 129.595969][ T4962] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 129.654946][ T4962] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.794037][ T4974] loop1: detected capacity change from 0 to 256 [ 129.927162][ T4978] loop3: detected capacity change from 0 to 128 [ 129.956068][ T4975] device syzkaller0 entered promiscuous mode [ 130.062570][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.131128][ T4978] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.154419][ T4981] loop1: detected capacity change from 0 to 512 [ 130.807687][ T4981] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.046102][ T4981] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.083510][ T4989] loop0: detected capacity change from 0 to 256 [ 131.154319][ T4989] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 131.271343][ T26] audit: type=1800 audit(1781304161.484:35): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 131.449811][ T26] audit: type=1800 audit(1781304161.484:36): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 131.788433][ T26] audit: type=1800 audit(1781304161.521:37): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 132.281721][ T5004] loop3: detected capacity change from 0 to 512 [ 132.357484][ T5002] input: syz0 as /devices/virtual/input/input10 [ 132.675995][ T26] audit: type=1326 audit(1781304162.791:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5001 comm="syz.2.202" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x0 [ 132.780418][ T5004] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 132.794923][ T5004] EXT4-fs (loop3): 1 truncate cleaned up [ 132.804908][ T5004] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,minixdf,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 132.879111][ T5004] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.201: Abort forced by user [ 132.952484][ T5004] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 133.275675][ T5018] device syzkaller0 entered promiscuous mode [ 133.373149][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.501418][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.507840][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.659454][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 133.854303][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.973184][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.030867][ T4232] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.352929][ T4232] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 134.395963][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.404016][ T4232] usb 2-1: Product: syz [ 134.421396][ T5014] loop0: detected capacity change from 0 to 40427 [ 134.486744][ T4232] usb 2-1: Manufacturer: syz [ 134.521082][ T5014] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 134.544113][ T4232] usb 2-1: SerialNumber: syz [ 134.569242][ T5014] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.592342][ T5035] loop3: detected capacity change from 0 to 256 [ 134.625488][ T5014] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.668422][ T5035] FAT-fs (loop3): Directory bread(block 64) failed [ 134.689405][ T5035] FAT-fs (loop3): Directory bread(block 65) failed [ 134.711244][ T5035] FAT-fs (loop3): Directory bread(block 66) failed [ 134.717843][ T5035] FAT-fs (loop3): Directory bread(block 67) failed [ 134.751119][ T5035] FAT-fs (loop3): Directory bread(block 68) failed [ 134.768855][ T5035] FAT-fs (loop3): Directory bread(block 69) failed [ 134.778430][ T5035] FAT-fs (loop3): Directory bread(block 70) failed [ 134.785810][ T5014] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.796134][ T5014] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.815860][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.823565][ T5035] FAT-fs (loop3): Directory bread(block 71) failed [ 134.837577][ T5035] FAT-fs (loop3): Directory bread(block 72) failed [ 134.859219][ T5035] FAT-fs (loop3): Directory bread(block 73) failed [ 135.020355][ T5014] attempt to access beyond end of device [ 135.020355][ T5014] loop0: rw=2049, want=45104, limit=40427 [ 135.067668][ T5014] attempt to access beyond end of device [ 135.067668][ T5014] loop0: rw=0, want=45104, limit=40427 [ 135.259349][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.315194][ T4232] usb 2-1: cannot find UAC_HEADER [ 135.373065][ T4195] attempt to access beyond end of device [ 135.373065][ T4195] loop0: rw=2049, want=40968, limit=40427 [ 135.626069][ T4232] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 135.767151][ T4232] usb 2-1: USB disconnect, device number 4 [ 136.081423][ T13] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 136.100864][ T13] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 136.122851][ T13] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 136.144897][ T13] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 136.255863][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.335437][ T13] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 136.380384][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.396426][ T13] usb 3-1: Product: syz [ 136.406325][ T13] usb 3-1: Manufacturer: syz [ 136.410970][ T13] usb 3-1: SerialNumber: syz [ 136.495880][ T5050] loop4: detected capacity change from 0 to 256 [ 136.592952][ T5050] FAT-fs (loop4): Directory bread(block 64) failed [ 136.599738][ T5050] FAT-fs (loop4): Directory bread(block 65) failed [ 136.633198][ T5050] FAT-fs (loop4): Directory bread(block 66) failed [ 136.654947][ T5050] FAT-fs (loop4): Directory bread(block 67) failed [ 136.693107][ T5050] FAT-fs (loop4): Directory bread(block 68) failed [ 136.710842][ T5050] FAT-fs (loop4): Directory bread(block 69) failed [ 136.736218][ T5046] loop3: detected capacity change from 0 to 40427 [ 136.742037][ T5050] FAT-fs (loop4): Directory bread(block 70) failed [ 136.766243][ T5050] FAT-fs (loop4): Directory bread(block 71) failed [ 136.772991][ T5050] FAT-fs (loop4): Directory bread(block 72) failed [ 136.798604][ T5046] F2FS-fs (loop3): invalid crc value [ 136.804624][ T5050] FAT-fs (loop4): Directory bread(block 73) failed [ 136.838420][ T5046] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.925318][ T13] usb 3-1: USB disconnect, device number 5 [ 137.075600][ T5046] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 137.195550][ T5060] input: syz0 as /devices/virtual/input/input11 [ 137.253275][ T26] audit: type=1326 audit(1781304167.026:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.4.218" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef9859e59 code=0x0 [ 137.298178][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.390531][ T5063] loop2: detected capacity change from 0 to 256 [ 137.446193][ T5063] exfat: Deprecated parameter 'utf8' [ 137.453713][ T5063] exfat: Deprecated parameter 'namecase' [ 137.470371][ T5063] exfat: Deprecated parameter 'namecase' [ 137.476173][ T5063] exfat: Deprecated parameter 'utf8' [ 137.515587][ T5063] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 138.199833][ T5074] loop0: detected capacity change from 0 to 512 [ 138.373365][ T5074] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.757295][ T5074] EXT4-fs (loop0): 1 truncate cleaned up [ 138.860428][ T5074] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 139.185785][ T5082] loop3: detected capacity change from 0 to 512 [ 139.490440][ T5082] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.484919][ T26] audit: type=1804 audit(1781304170.010:40): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.222" name="/newroot/52/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 140.495378][ T5082] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.224: bad orphan inode 131083 [ 140.785417][ T5082] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 140.966815][ T5090] loop1: detected capacity change from 0 to 512 [ 141.080682][ T5090] EXT4-fs (loop1): orphan cleanup on readonly fs [ 141.102418][ T5090] EXT4-fs error (device loop1): ext4_find_extent:893: inode #4: comm syz.1.228: inode has invalid extent depth: 7 [ 141.156235][ T5090] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 141.211995][ T5090] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 141.333031][ T5090] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 141.345787][ T5090] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 142.886702][ T5092] loop4: detected capacity change from 0 to 40427 [ 142.953343][ T5092] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 143.007470][ T5092] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.547729][ T5107] loop4: detected capacity change from 0 to 256 [ 143.665324][ T5097] loop0: detected capacity change from 0 to 40427 [ 143.744921][ T5097] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 143.800064][ T5097] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 143.888380][ T5097] F2FS-fs (loop0): invalid crc value [ 143.900447][ T5107] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.932503][ T5097] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 143.981310][ T5107] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.232391][ T5097] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 144.271967][ T5097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.381751][ T5120] input: syz0 as /devices/virtual/input/input12 [ 144.562644][ T26] audit: type=1326 audit(1781304173.778:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.1.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc79252ae59 code=0x0 [ 145.044858][ T5123] attempt to access beyond end of device [ 145.044858][ T5123] loop0: rw=2049, want=53256, limit=40427 [ 145.194996][ T5123] attempt to access beyond end of device [ 145.194996][ T5123] loop0: rw=2049, want=45136, limit=40427 [ 145.208364][ T5123] attempt to access beyond end of device [ 145.208364][ T5123] loop0: rw=2049, want=53256, limit=40427 [ 146.108041][ T5127] loop1: detected capacity change from 0 to 128 [ 146.555813][ T5127] attempt to access beyond end of device [ 146.555813][ T5127] loop1: rw=2049, want=1041, limit=128 [ 146.867139][ T4195] attempt to access beyond end of device [ 146.867139][ T4195] loop0: rw=2049, want=45144, limit=40427 [ 147.474430][ T5129] attempt to access beyond end of device [ 147.474430][ T5129] loop1: rw=524288, want=369, limit=128 [ 147.586138][ T5129] attempt to access beyond end of device [ 147.586138][ T5129] loop1: rw=0, want=153, limit=128 [ 147.633963][ T5129] attempt to access beyond end of device [ 147.633963][ T5129] loop1: rw=0, want=153, limit=128 [ 147.725582][ T5129] attempt to access beyond end of device [ 147.725582][ T5129] loop1: rw=0, want=153, limit=128 [ 147.964269][ T5143] loop3: detected capacity change from 0 to 512 [ 148.071798][ T5149] loop1: detected capacity change from 0 to 256 [ 148.192491][ T5143] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 148.248621][ T5153] input: syz0 as /devices/virtual/input/input13 [ 148.359117][ T5155] mmap: syz.4.243 (5155) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 148.411605][ T26] audit: type=1326 audit(1781304177.332:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5152 comm="syz.2.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x0 [ 148.668084][ T5143] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.551126][ T5143] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.242: invalid indirect mapped block 4294967295 (level 1) [ 149.603914][ T5143] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.242: invalid indirect mapped block 4294967295 (level 1) [ 149.662207][ T5143] EXT4-fs (loop3): 2 truncates cleaned up [ 149.678702][ T5143] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,min_batch_time=0x0000000000000007,jqfmt=vfsv0,delalloc,,errors=continue. Quota mode: writeback. [ 150.139516][ T5167] loop2: detected capacity change from 0 to 512 [ 150.312979][ T5167] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 150.404592][ T5169] loop0: detected capacity change from 0 to 2048 [ 150.414220][ T5167] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 150.670119][ T5167] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 150.708119][ T5167] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 151.732918][ T5169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.776430][ T5191] loop3: detected capacity change from 0 to 128 [ 153.043166][ T5194] input: syz0 as /devices/virtual/input/input14 [ 153.145527][ T26] audit: type=1326 audit(1781304181.912:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5192 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x0 [ 156.827971][ T5224] process 'syz.4.265' launched './file1' with NULL argv: empty string added [ 156.897628][ T5217] loop2: detected capacity change from 0 to 2048 [ 157.681771][ T5217] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.045957][ T5238] loop4: detected capacity change from 0 to 256 [ 158.141336][ T5238] exfat: Deprecated parameter 'utf8' [ 158.160536][ T5242] loop1: detected capacity change from 0 to 256 [ 158.210540][ T5238] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 158.679207][ T5225] loop0: detected capacity change from 0 to 40427 [ 158.715485][ T5225] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 158.753777][ T5225] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 158.811059][ T5225] F2FS-fs (loop0): invalid crc value [ 158.888226][ T5225] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.958164][ T5254] input: syz0 as /devices/virtual/input/input15 [ 159.072017][ T26] audit: type=1326 audit(1781304187.762:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.2.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x0 [ 159.144057][ T5225] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.170674][ T5225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.377072][ T5261] loop4: detected capacity change from 0 to 256 [ 160.530904][ T5273] loop2: detected capacity change from 0 to 2048 [ 161.032022][ T5273] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.941087][ T5269] loop0: detected capacity change from 0 to 40427 [ 162.986347][ T5269] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 163.007972][ T5297] netlink: 'syz.1.286': attribute type 16 has an invalid length. [ 163.040508][ T5297] netlink: 'syz.1.286': attribute type 17 has an invalid length. [ 163.050772][ T5269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 163.085709][ T5297] device lo entered promiscuous mode [ 163.100469][ T5297] device tunl0 entered promiscuous mode [ 163.124251][ T5297] device gre0 entered promiscuous mode [ 163.142129][ T5269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.154049][ T5297] device gretap0 entered promiscuous mode [ 163.181874][ T5297] device erspan0 entered promiscuous mode [ 163.201676][ T5297] device ip_vti0 entered promiscuous mode [ 163.250835][ T5297] device ip6_vti0 entered promiscuous mode [ 163.271567][ T5297] device sit0 entered promiscuous mode [ 163.293681][ T5297] device ip6tnl0 entered promiscuous mode [ 163.310337][ T5297] device ip6gre0 entered promiscuous mode [ 163.322842][ T5297] device syz_tun entered promiscuous mode [ 163.335636][ T5297] device ip6gretap0 entered promiscuous mode [ 163.343905][ T5297] device bridge0 entered promiscuous mode [ 163.355549][ T5297] device vcan0 entered promiscuous mode [ 163.363167][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.393814][ T5306] input: syz0 as /devices/virtual/input/input16 [ 163.418938][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.463979][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.471930][ T5297] device bond0 entered promiscuous mode [ 163.477521][ T5297] device bond_slave_0 entered promiscuous mode [ 163.484541][ T5297] device bond_slave_1 entered promiscuous mode [ 163.521659][ T5297] device team0 entered promiscuous mode [ 163.529586][ T5297] device team_slave_0 entered promiscuous mode [ 163.548917][ T5297] device team_slave_1 entered promiscuous mode [ 163.567193][ T26] audit: type=1326 audit(1781304192.296:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x0 [ 163.602686][ T5297] device dummy0 entered promiscuous mode [ 163.637411][ T5297] device nlmon0 entered promiscuous mode [ 163.660151][ T26] audit: type=1326 audit(1781304192.296:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 163.690821][ T5297] device caif0 entered promiscuous mode [ 163.721492][ T5297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.772351][ T26] audit: type=1326 audit(1781304192.296:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 163.892362][ T26] audit: type=1326 audit(1781304192.326:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 163.937668][ T5314] loop3: detected capacity change from 0 to 2048 [ 164.021055][ T26] audit: type=1326 audit(1781304192.326:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.061369][ T5314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.097526][ T26] audit: type=1326 audit(1781304192.326:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.123144][ T26] audit: type=1326 audit(1781304192.326:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.148544][ T26] audit: type=1326 audit(1781304192.326:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.173496][ T26] audit: type=1326 audit(1781304192.326:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.208599][ T26] audit: type=1326 audit(1781304192.326:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.239360][ T5322] loop0: detected capacity change from 0 to 512 [ 164.284418][ T26] audit: type=1326 audit(1781304192.326:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.944353][ T26] audit: type=1326 audit(1781304192.326:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 164.976738][ T5322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.318077][ T26] audit: type=1326 audit(1781304192.326:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 165.343607][ T5322] loop_set_status: loop0 () has still dirty pages (nrpages=5) [ 166.005415][ T26] audit: type=1326 audit(1781304192.326:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 166.260713][ T26] audit: type=1326 audit(1781304192.326:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.3.288" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0895e0ee59 code=0x7ffc0000 [ 166.356907][ T5348] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.299'. [ 167.626264][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 167.677849][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 168.193586][ T5342] loop2: detected capacity change from 0 to 40427 [ 168.230589][ T5342] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 169.197020][ T5368] loop1: detected capacity change from 0 to 512 [ 169.304130][ T5368] EXT4-fs (loop1): Test dummy encryption mode enabled [ 169.322841][ T5368] EXT4-fs (loop1): Test dummy encryption mode enabled [ 169.363216][ T5368] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.389376][ T5372] loop4: detected capacity change from 0 to 2048 [ 169.439089][ T5368] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 169.544228][ T5372] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.740044][ T5381] loop2: detected capacity change from 0 to 256 [ 169.886704][ T5381] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 171.020063][ T5393] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.312'. [ 172.357951][ T5410] loop2: detected capacity change from 0 to 512 [ 172.480075][ T5410] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.525819][ T5413] loop0: detected capacity change from 0 to 2048 [ 172.582382][ T5410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c018, mo2=0002] [ 172.642322][ T5410] EXT4-fs (loop2): 1 truncate cleaned up [ 172.663165][ T5410] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,grpquota,debug_want_extra_isize=0x000000000000006c,mb_optimize_scan=0x0000000000000001,debug,data=journal,noblock_validity,,errors=continue. Quota mode: writeback. [ 172.700510][ T5413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.876398][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.318158][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.340535][ T1111] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.371906][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.402640][ T1111] usb 5-1: config 0 descriptor?? [ 173.944267][ T1111] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 173.978514][ T1111] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input17 [ 174.105412][ T5445] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.327'. [ 175.832927][ T1111] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 175.887943][ T1111] usb 5-1: USB disconnect, device number 4 [ 176.096704][ T5450] fido_id[5450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 176.495799][ T5457] loop4: detected capacity change from 0 to 2048 [ 176.577144][ T5457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.716903][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 176.716917][ T26] audit: type=1326 audit(1781304204.700:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 176.793533][ T5464] loop1: detected capacity change from 0 to 512 [ 176.867985][ T26] audit: type=1326 audit(1781304204.737:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 176.997334][ T5464] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,nolazytime,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 177.023329][ T26] audit: type=1326 audit(1781304204.737:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 177.149046][ T5464] ext4 filesystem being mounted at /75/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.198811][ T5473] loop4: detected capacity change from 0 to 256 [ 177.216158][ T26] audit: type=1326 audit(1781304204.737:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 177.243997][ T5473] exfat: Deprecated parameter 'utf8' [ 177.267725][ T26] audit: type=1326 audit(1781304204.737:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 177.297526][ T26] audit: type=1326 audit(1781304204.737:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 177.310704][ T5473] exfat: Deprecated parameter 'utf8' [ 177.338097][ T26] audit: type=1326 audit(1781304204.737:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 177.370230][ T26] audit: type=1326 audit(1781304204.737:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.2.332" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 177.399034][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.408519][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.442257][ T5473] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8dfd24ac, utbl_chksum : 0xe619d30d) [ 180.191646][ T5453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.271597][ T5453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.118412][ T5453] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.128055][ T5453] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.139513][ T5453] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.148491][ T5453] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.378813][ T5453] syz.3.329 (5453) used greatest stack depth: 19952 bytes left [ 181.379835][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 181.601759][ T5500] loop1: detected capacity change from 0 to 512 [ 181.663197][ T5500] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 181.676550][ T5500] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.953446][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.960079][ T5505] kvm: pic: non byte write [ 181.961630][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.078816][ T5508] loop1: detected capacity change from 0 to 2048 [ 182.145102][ T5508] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.711810][ T5471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.768115][ T5471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.575869][ T5471] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.585393][ T5471] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.600192][ T5471] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.609130][ T5471] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.826638][ T5488] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.338'. [ 184.135378][ T26] audit: type=1326 audit(1781304211.557:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.247012][ T26] audit: type=1326 audit(1781304211.612:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.364440][ T26] audit: type=1326 audit(1781304211.612:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.395373][ T4189] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.436676][ T26] audit: type=1326 audit(1781304211.612:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.497514][ T26] audit: type=1326 audit(1781304211.612:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.562944][ T26] audit: type=1326 audit(1781304211.612:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.576357][ T5537] loop4: detected capacity change from 0 to 2048 [ 184.617002][ T26] audit: type=1326 audit(1781304211.612:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.671158][ T26] audit: type=1326 audit(1781304211.612:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.682322][ T4176] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 184.725312][ T26] audit: type=1326 audit(1781304211.612:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.790585][ T26] audit: type=1326 audit(1781304211.612:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5528 comm="syz.2.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f169d168e59 code=0x7ffc0000 [ 184.834936][ T5537] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.877195][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.888706][ T4189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.898568][ T4189] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.908124][ T4189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.919430][ T4189] usb 1-1: config 0 descriptor?? [ 184.929348][ T5524] loop3: detected capacity change from 0 to 40427 [ 184.997498][ T5524] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 185.027169][ T5524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 185.050960][ T5524] F2FS-fs (loop3): invalid crc value [ 185.085364][ T5524] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 185.141993][ T5532] loop1: detected capacity change from 0 to 40427 [ 185.148934][ T5542] loop4: detected capacity change from 0 to 256 [ 185.176315][ T5532] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 185.187438][ T5532] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 185.211947][ T5532] F2FS-fs (loop1): invalid crc_offset: 1 [ 185.218151][ T4176] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 185.240659][ T4176] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 185.258004][ T5542] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 185.284211][ T5532] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 185.385034][ T5524] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 185.403428][ T5524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.538647][ T4176] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 185.547771][ T4176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.586572][ T4176] usb 3-1: Product: syz [ 185.597494][ T4176] usb 3-1: Manufacturer: syz [ 185.613314][ T4176] usb 3-1: SerialNumber: syz [ 185.631730][ T5532] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 185.661640][ T5532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 186.150570][ T5555] attempt to access beyond end of device [ 186.150570][ T5555] loop3: rw=2049, want=53256, limit=40427 [ 186.272509][ T5555] attempt to access beyond end of device [ 186.272509][ T5555] loop3: rw=2049, want=45136, limit=40427 [ 186.284681][ T5555] attempt to access beyond end of device [ 186.284681][ T5555] loop3: rw=2049, want=53256, limit=40427 [ 186.316735][ T4187] attempt to access beyond end of device [ 186.316735][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 187.519559][ T4189] usb 1-1: string descriptor 0 read error: -22 [ 187.582108][ T5563] loop2: detected capacity change from 0 to 256 [ 187.604709][ T5564] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.359'. [ 187.718423][ T4189] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 187.727528][ T4176] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 187.847866][ T4189] usb 1-1: USB disconnect, device number 3 [ 187.983915][ T4188] attempt to access beyond end of device [ 187.983915][ T4188] loop3: rw=2049, want=45144, limit=40427 [ 188.100240][ T4176] usb 3-1: USB disconnect, device number 6 [ 188.524063][ T5058] udevd[5058]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.588419][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 188.661164][ T5577] device lo left promiscuous mode [ 188.774333][ T5577] device tunl0 left promiscuous mode [ 188.847297][ T5577] device gre0 left promiscuous mode [ 189.367713][ T5583] loop0: detected capacity change from 0 to 2048 [ 189.495741][ T5583] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.723858][ T5577] device gretap0 left promiscuous mode [ 189.793652][ T5577] device erspan0 left promiscuous mode [ 189.858987][ T5577] device ip_vti0 left promiscuous mode [ 189.923099][ T5577] device ip6_vti0 left promiscuous mode [ 190.027652][ T5577] device sit0 left promiscuous mode [ 190.191466][ T5577] device ip6tnl0 left promiscuous mode [ 190.246498][ T5577] device ip6gre0 left promiscuous mode [ 190.325779][ T5577] device syz_tun left promiscuous mode [ 190.397656][ T5577] device ip6gretap0 left promiscuous mode [ 190.429403][ T5588] loop3: detected capacity change from 0 to 40427 [ 190.481839][ T5588] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 190.485530][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.495795][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.519589][ T5588] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 190.532381][ T5577] device bridge0 left promiscuous mode [ 190.562907][ T5588] F2FS-fs (loop3): invalid crc value [ 190.609968][ T5588] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 190.659090][ T5577] device vcan0 left promiscuous mode [ 190.682268][ T5577] device bond0 left promiscuous mode [ 190.687729][ T5577] device bond_slave_0 left promiscuous mode [ 190.703906][ T5577] device bond_slave_1 left promiscuous mode [ 190.788047][ T5588] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 190.798879][ T5588] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.829356][ T5577] device team0 left promiscuous mode [ 190.840898][ T5577] device team_slave_0 left promiscuous mode [ 190.859917][ T5577] device team_slave_1 left promiscuous mode [ 190.964029][ T5577] device dummy0 left promiscuous mode [ 190.969958][ T4188] attempt to access beyond end of device [ 190.969958][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 191.074524][ T5577] device nlmon0 left promiscuous mode [ 191.081779][ T5577] device caif0 left promiscuous mode [ 191.098786][ T5600] loop4: detected capacity change from 0 to 512 [ 191.289573][ T5600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.317521][ T5600] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.440013][ T5612] loop0: detected capacity change from 0 to 256 [ 192.531172][ T5612] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 194.322588][ T5618] loop0: detected capacity change from 0 to 40427 [ 194.381630][ T5618] F2FS-fs (loop0): invalid crc value [ 194.398213][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.417502][ T5618] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 194.509446][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.567634][ T5618] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.641723][ T4195] attempt to access beyond end of device [ 194.641723][ T4195] loop0: rw=2049, want=45104, limit=40427 [ 194.984438][ T5624] loop0: detected capacity change from 0 to 2048 [ 195.010633][ T5624] EXT4-fs (loop0): Ignoring removed orlov option [ 195.062382][ T5624] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,bsddf,orlov,,errors=continue. Quota mode: none. [ 195.081970][ T5624] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.202008][ T5577] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.211077][ T5577] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.220967][ T5577] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.230056][ T5577] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.404566][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 195.421169][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 195.438263][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 195.444431][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 195.475229][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 195.592087][ T5615] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.372'. [ 197.442042][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 198.089176][ T5636] loop2: detected capacity change from 0 to 2048 [ 198.255072][ T5636] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,acl,,errors=continue. Quota mode: writeback. [ 198.269581][ T5636] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.708009][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.714534][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.411639][ T5671] loop0: detected capacity change from 0 to 512 [ 201.524100][ T5671] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.577957][ T5671] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.443724][ T5688] netlink: 'syz.2.388': attribute type 12 has an invalid length. [ 204.438175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 204.459846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 204.470684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 204.481520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 204.492347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 204.503179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 204.514014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 204.524845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 204.535675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 204.546515][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 205.164729][ T5476] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 205.807290][ T5702] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.390'. [ 206.258275][ T5476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.636631][ T5704] loop4: detected capacity change from 0 to 256 [ 206.758622][ T5704] FAT-fs (loop4): Directory bread(block 64) failed [ 206.765797][ T5704] FAT-fs (loop4): Directory bread(block 65) failed [ 206.774474][ T5704] FAT-fs (loop4): Directory bread(block 66) failed [ 206.782584][ T5704] FAT-fs (loop4): Directory bread(block 67) failed [ 206.790678][ T5704] FAT-fs (loop4): Directory bread(block 68) failed [ 206.797755][ T5704] FAT-fs (loop4): Directory bread(block 69) failed [ 206.806444][ T5704] FAT-fs (loop4): Directory bread(block 70) failed [ 206.847296][ T5704] FAT-fs (loop4): Directory bread(block 71) failed [ 206.880001][ T5476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.890206][ T5476] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 206.899590][ T5476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.910930][ T5476] usb 3-1: config 0 descriptor?? [ 206.930204][ T5704] FAT-fs (loop4): Directory bread(block 72) failed [ 206.950920][ T5708] loop1: detected capacity change from 0 to 2048 [ 206.974861][ T5704] FAT-fs (loop4): Directory bread(block 73) failed [ 207.031242][ T5708] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 207.154168][ T5708] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 207.507174][ T5476] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 207.779041][ T5476] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 208.082998][ T5717] loop3: detected capacity change from 0 to 512 [ 208.091722][ T5692] udc-core: couldn't find an available UDC or it's busy [ 208.110368][ T5476] cp2112 0003:10C4:EA90.0007: error requesting version [ 208.146371][ T5476] cp2112: probe of 0003:10C4:EA90.0007 failed with error -32 [ 208.164671][ T5692] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 208.199518][ T5476] usb 3-1: USB disconnect, device number 7 [ 209.210738][ T5717] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,nolazytime,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 209.306681][ T5717] ext4 filesystem being mounted at /70/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.423037][ T5733] loop1: detected capacity change from 0 to 512 [ 209.484837][ T5731] fido_id[5731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 209.695093][ T5733] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.723980][ T5733] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.997146][ T5745] loop3: detected capacity change from 0 to 512 [ 210.401117][ T5745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.540153][ T5745] EXT4-fs (loop3): 1 truncate cleaned up [ 210.563868][ T5745] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 211.269917][ T5742] netlink: 'syz.2.404': attribute type 12 has an invalid length. [ 211.652844][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.712037][ T5757] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.406'. [ 212.305532][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 212.458794][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.491925][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 213.000999][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 213.429085][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 213.450796][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 213.521235][ T5764] loop2: detected capacity change from 0 to 256 [ 213.528488][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 213.535559][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 213.563100][ T5767] loop0: detected capacity change from 0 to 512 [ 213.721324][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 213.728356][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 213.786588][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 213.804748][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 213.850893][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 213.858576][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 215.146421][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 215.162420][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 215.329230][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 215.351717][ T5767] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 215.370358][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 215.401689][ T5767] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.411: corrupted inode contents [ 215.448413][ T5767] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #11: comm syz.0.411: mark_inode_dirty error [ 215.490941][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 215.527091][ T5767] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.411: invalid indirect mapped block 1 (level 1) [ 215.559665][ T5781] loop1: detected capacity change from 0 to 256 [ 215.601555][ T5767] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.411: corrupted inode contents [ 215.694869][ T5781] FAT-fs (loop1): Directory bread(block 64) failed [ 215.701769][ T5783] loop2: detected capacity change from 0 to 512 [ 215.714198][ T5767] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 215.724064][ T5781] FAT-fs (loop1): Directory bread(block 65) failed [ 215.756761][ T5781] FAT-fs (loop1): Directory bread(block 66) failed [ 215.764080][ T5767] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #11: comm syz.0.411: corrupted inode contents [ 215.769194][ T5781] FAT-fs (loop1): Directory bread(block 67) failed [ 215.801755][ T5781] FAT-fs (loop1): Directory bread(block 68) failed [ 215.813934][ T5781] FAT-fs (loop1): Directory bread(block 69) failed [ 215.820731][ T5781] FAT-fs (loop1): Directory bread(block 70) failed [ 215.828186][ T5781] FAT-fs (loop1): Directory bread(block 71) failed [ 215.842414][ T5767] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.411: mark_inode_dirty error [ 215.866082][ T5781] FAT-fs (loop1): Directory bread(block 72) failed [ 215.873154][ T5781] FAT-fs (loop1): Directory bread(block 73) failed [ 215.900801][ T5767] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 215.930241][ T5783] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.953815][ T5783] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.977018][ T5767] EXT4-fs (loop0): 1 truncate cleaned up [ 215.982731][ T5767] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.233362][ T5767] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.411: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 217.359570][ T4188] EXT4-fs error: 184 callbacks suppressed [ 217.359596][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 217.482949][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 217.534648][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 217.669991][ T5797] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.422'. [ 217.717801][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.110043][ T4188] EXT4-fs: 187 callbacks suppressed [ 218.110573][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 218.391183][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.566844][ T5802] loop1: detected capacity change from 0 to 256 [ 218.569870][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 218.569990][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 218.586411][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.617237][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 218.628470][ T4188] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /72/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 218.682154][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 218.693377][ T4188] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 218.740493][ T5802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 218.778829][ T4188] EXT4-fs (loop3): Remounting filesystem read-only [ 219.714817][ T5819] loop1: detected capacity change from 0 to 256 [ 219.868548][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 219.868566][ T26] audit: type=1804 audit(1781304244.544:102): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.426" name="/newroot/100/file4/bus" dev="loop1" ino=1048617 res=1 errno=0 [ 219.980991][ T26] audit: type=1804 audit(1781304244.645:103): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.426" name="/newroot/100/file4/bus" dev="loop1" ino=1048617 res=1 errno=0 [ 220.225249][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.233148][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.196778][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.311468][ T5804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.399207][ T5804] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.408152][ T5804] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.417465][ T5804] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.426547][ T5804] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.606282][ T5840] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.433'. [ 225.621022][ T5850] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 225.628837][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.437'. [ 226.145849][ T5870] netlink: 'syz.0.447': attribute type 29 has an invalid length. [ 226.226548][ T5870] netlink: 'syz.0.447': attribute type 29 has an invalid length. [ 226.251937][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 227.054381][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.061879][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.607970][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.623968][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.386974][ T5877] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.396149][ T5877] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.405605][ T5877] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.414587][ T5877] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.995175][ T5474] Bluetooth: hci1: command 0x0409 tx timeout [ 229.011857][ T5874] netlink: 'syz.0.447': attribute type 29 has an invalid length. [ 229.516124][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'. [ 229.603209][ T5908] netlink: 200 bytes leftover after parsing attributes in process `syz.1.461'. [ 229.626685][ T5908] ------------[ cut here ]------------ [ 229.632838][ T5908] WARNING: CPU: 0 PID: 5908 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 229.642504][ T5908] Modules linked in: [ 229.648004][ T5908] CPU: 0 PID: 5908 Comm: syz.1.461 Not tainted syzkaller #0 [ 229.671054][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.726443][ T5908] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 229.750571][ T5908] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 229.809244][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'. [ 229.819724][ T5908] RSP: 0018:ffffc9000325f8e0 EFLAGS: 00010287 [ 229.827086][ T5908] RAX: ffffffff81b99b97 RBX: 0000200000400000 RCX: 0000000000080000 [ 229.835625][ T5908] RDX: ffffc900055b9000 RSI: 00000000000004c5 RDI: 00000000000004c6 [ 229.843705][ T5908] RBP: 0000000000000000 R08: ffff88807949aabf R09: 1ffff1100f293557 [ 229.852016][ T5908] R10: dffffc0000000000 R11: ffffed100f293558 R12: ffff8880756580a0 [ 229.860062][ T5908] R13: dffffc0000000000 R14: ffff888075658000 R15: ffff888079924bc0 [ 229.868379][ T5908] FS: 00007fc7907846c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 229.877846][ T5908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.886473][ T5908] CR2: 00007fff0b9740f8 CR3: 000000007c42f000 CR4: 00000000003506e0 [ 229.955625][ T5908] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.156160][ T5908] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.303114][ T5908] Call Trace: [ 230.536069][ T5908] [ 230.548762][ T5908] __vma_adjust+0x2b6/0x1c10 [ 230.569078][ T5908] ? rcu_lock_acquire+0x30/0x30 [ 230.596096][ T5908] ? memset+0x1e/0x40 [ 230.637105][ T5908] __split_vma+0x34b/0x410 [ 230.662050][ T5908] userfaultfd_ioctl+0x2fa4/0x4170 [ 230.684412][ T5908] ? userfaultfd_poll+0x1c0/0x1c0 [ 230.705762][ T5908] ? kfree+0xef/0x2a0 [ 230.710010][ T5908] ? tomoyo_path_number_perm+0x5b4/0x660 [ 230.720618][ T5908] ? verify_lock_unused+0x140/0x140 [ 230.727824][ T5908] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 230.733573][ T5908] ? bpf_lsm_file_ioctl+0x5/0x10 [ 230.738841][ T5908] ? security_file_ioctl+0x7c/0xa0 [ 230.744013][ T5908] ? userfaultfd_poll+0x1c0/0x1c0 [ 230.749532][ T5908] __se_sys_ioctl+0xfa/0x170 [ 230.754184][ T5908] do_syscall_64+0x4c/0xa0 [ 230.758647][ T5908] ? clear_bhb_loop+0x30/0x80 [ 230.763792][ T5908] ? clear_bhb_loop+0x30/0x80 [ 230.768528][ T5908] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.771308][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 230.777400][ T5908] RIP: 0033:0x7fc79252ae59 [ 230.787829][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.835716][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 230.846719][ T5908] RSP: 002b:00007fc790784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.855223][ T5908] RAX: ffffffffffffffda RBX: 00007fc7927a3fa0 RCX: 00007fc79252ae59 [ 230.867090][ T5908] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000005 [ 230.875525][ T5908] RBP: 00007fc7925c0d6f R08: 0000000000000000 R09: 0000000000000000 [ 230.889114][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.911331][ T5908] R13: 00007fc7927a4038 R14: 00007fc7927a3fa0 R15: 00007fff74d13738 [ 230.919393][ T5908] [ 230.933829][ T5908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.941167][ T5908] CPU: 1 PID: 5908 Comm: syz.1.461 Not tainted syzkaller #0 [ 230.948499][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.958589][ T5908] Call Trace: [ 230.961906][ T5908] [ 230.964869][ T5908] dump_stack_lvl+0x188/0x250 [ 230.969586][ T5908] ? show_regs_print_info+0x20/0x20 [ 230.974824][ T5908] ? load_image+0x400/0x400 [ 230.979376][ T5908] panic+0x2e5/0x810 [ 230.983319][ T5908] ? bpf_jit_dump+0xd0/0xd0 [ 230.987879][ T5908] ? hugetlb_split+0x237/0x2a0 [ 230.992692][ T5908] __warn+0x248/0x2b0 [ 230.996715][ T5908] ? hugetlb_split+0x237/0x2a0 [ 231.001519][ T5908] report_bug+0x1b7/0x2e0 [ 231.005891][ T5908] handle_bug+0x3a/0x70 [ 231.010085][ T5908] exc_invalid_op+0x16/0x40 [ 231.014670][ T5908] asm_exc_invalid_op+0x16/0x20 [ 231.019575][ T5908] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 231.024992][ T5908] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 231.044633][ T5908] RSP: 0018:ffffc9000325f8e0 EFLAGS: 00010287 [ 231.050748][ T5908] RAX: ffffffff81b99b97 RBX: 0000200000400000 RCX: 0000000000080000 [ 231.058888][ T5908] RDX: ffffc900055b9000 RSI: 00000000000004c5 RDI: 00000000000004c6 [ 231.063467][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 231.066890][ T5908] RBP: 0000000000000000 R08: ffff88807949aabf R09: 1ffff1100f293557 [ 231.066911][ T5908] R10: dffffc0000000000 R11: ffffed100f293558 R12: ffff8880756580a0 [ 231.066929][ T5908] R13: dffffc0000000000 R14: ffff888075658000 R15: ffff888079924bc0 [ 231.066955][ T5908] ? hugetlb_split+0x237/0x2a0 [ 231.100888][ T5908] __vma_adjust+0x2b6/0x1c10 [ 231.105533][ T5908] ? rcu_lock_acquire+0x30/0x30 [ 231.110447][ T5908] ? memset+0x1e/0x40 [ 231.114472][ T5908] __split_vma+0x34b/0x410 [ 231.118934][ T5908] userfaultfd_ioctl+0x2fa4/0x4170 [ 231.124103][ T5908] ? userfaultfd_poll+0x1c0/0x1c0 [ 231.129192][ T5908] ? kfree+0xef/0x2a0 [ 231.133221][ T5908] ? tomoyo_path_number_perm+0x5b4/0x660 [ 231.138899][ T5908] ? verify_lock_unused+0x140/0x140 [ 231.144169][ T5908] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 231.149724][ T5908] ? bpf_lsm_file_ioctl+0x5/0x10 [ 231.154709][ T5908] ? security_file_ioctl+0x7c/0xa0 [ 231.159869][ T5908] ? userfaultfd_poll+0x1c0/0x1c0 [ 231.164939][ T5908] __se_sys_ioctl+0xfa/0x170 [ 231.169573][ T5908] do_syscall_64+0x4c/0xa0 [ 231.174067][ T5908] ? clear_bhb_loop+0x30/0x80 [ 231.178785][ T5908] ? clear_bhb_loop+0x30/0x80 [ 231.183509][ T5908] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.189475][ T5908] RIP: 0033:0x7fc79252ae59 [ 231.193920][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.193928][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.193952][ T5908] RSP: 002b:00007fc790784028 EFLAGS: 00000246 [ 231.208079][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.224429][ T5908] ORIG_RAX: 0000000000000010 [ 231.224443][ T5908] RAX: ffffffffffffffda RBX: 00007fc7927a3fa0 RCX: 00007fc79252ae59 [ 231.224460][ T5908] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000005 [ 231.224474][ T5908] RBP: 00007fc7925c0d6f R08: 0000000000000000 R09: 0000000000000000 [ 231.224488][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.224502][ T5908] R13: 00007fc7927a4038 R14: 00007fc7927a3fa0 R15: 00007fff74d13738 [ 231.224533][ T5908] [ 231.230910][ T5908] Kernel Offset: disabled [ 231.293260][ T5908] Rebooting in 86400 seconds..