last executing test programs: 14m45.26622793s ago: executing program 4 (id=1120): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 14m40.41549285s ago: executing program 4 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b000000000", 0x25) sendto(r5, 0x0, 0x0, 0x20000090, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) 14m33.662011466s ago: executing program 4 (id=1138): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) splice(r3, 0x0, r6, 0x0, 0x66, 0xf) shutdown(0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11) 14m32.833549066s ago: executing program 4 (id=1139): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 14m28.475498844s ago: executing program 4 (id=1149): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_complete(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x20008800) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{0xeeee8000, 0x40000, 0x8, 0xad, 0xbb, 0x4, 0x7c, 0x5, 0x0, 0x9d, 0x9}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x8, 0x4, 0xf0, 0x9, 0x80}, {0x60000, 0x5000, 0x8, 0x3, 0x1, 0x3, 0x0, 0xa, 0x0, 0x5, 0xf, 0xff}, {0xdddd0000, 0xffff1000, 0x0, 0xe6, 0x4, 0x2, 0xbd, 0x3c, 0x8, 0x8b, 0x1, 0xad}, {0x8000000, 0x8080000, 0xc, 0x0, 0x5, 0x86, 0x7, 0x2, 0x9, 0x0, 0xf2, 0x43}, {0xc000, 0x25000, 0xb, 0x85, 0x2, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3c}, {0xd000, 0x100000, 0x3, 0x3, 0x48, 0x5, 0x1, 0x3, 0x5, 0x82}, {0x5000, 0x3000, 0xa, 0x5, 0x9, 0xf, 0x3, 0x7, 0x0, 0x89}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x33, 0x0, 0xeeef0000, 0x2104, 0x4, 0x1000, 0x200000, [0x2, 0x7, 0xb, 0x3]}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 14m26.642944209s ago: executing program 4 (id=1151): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getgroups(0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, r3, 0x0, 0x0]) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 14m10.817035839s ago: executing program 32 (id=1151): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getgroups(0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, r3, 0x0, 0x0]) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 16.688775622s ago: executing program 3 (id=2939): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 15.244057705s ago: executing program 3 (id=2944): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000006c0), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 13.897880485s ago: executing program 0 (id=2957): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, 0x0, 0x5e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x14000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0xb911, @empty, 0x5}}}, 0x3a) write$dsp(r6, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xf) 13.519035863s ago: executing program 3 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 12.168871214s ago: executing program 3 (id=2953): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 11.999407368s ago: executing program 2 (id=2954): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11.139644227s ago: executing program 1 (id=2955): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, 0x0, 0x5e) 9.914454165s ago: executing program 3 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) preadv(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) rt_tgsigqueueinfo(r0, r2, 0x28, 0x0) 7.92037668s ago: executing program 0 (id=2959): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 7.874524381s ago: executing program 5 (id=2960): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 7.811750433s ago: executing program 2 (id=2961): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x420008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) write$UHID_INPUT(r1, 0x0, 0x0) 7.294032625s ago: executing program 1 (id=2962): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000006c0), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 6.693680379s ago: executing program 5 (id=2963): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x401, 0x48001051, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) fanotify_mark(r0, 0x80, 0x8, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) 6.558801781s ago: executing program 0 (id=2973): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 6.206282289s ago: executing program 2 (id=2964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 4.83848817s ago: executing program 0 (id=2965): r0 = socket(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @local}, 0x19) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="3030000000000000004b3c6bc5643d", @ANYRESHEX=0x0, @ANYBLOB=',decompose,nobarrier,\x00'], 0xff, 0x6c5, &(0x7f0000000400)="$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") setxattr(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) recvmsg$kcm(r6, &(0x7f0000001940)={0x0, 0xd335cd74c920a61d, &(0x7f0000000900)=[{&(0x7f0000000800)=""/197}], 0x1b}, 0x3062) 4.795715741s ago: executing program 5 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 4.795083521s ago: executing program 2 (id=2967): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 4.773277662s ago: executing program 1 (id=2968): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, 0x0, 0x5e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x14000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0xb911, @empty, 0x5}}}, 0x3a) write$dsp(r6, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) 4.752499172s ago: executing program 3 (id=2969): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6745208e00103aff00000000000100000000000000130000ff0200000000000000000000000000018b009078000700430000000000000000"], 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x50) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000006c0), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x1000003, 0x0, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x3, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x8001, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 3.836858013s ago: executing program 5 (id=2970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 3.772268644s ago: executing program 2 (id=2971): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xf) poll(&(0x7f0000000040)=[{r0, 0x258}], 0x1, 0x2) 2.572728971s ago: executing program 5 (id=2972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 2.500106603s ago: executing program 0 (id=2974): openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x20100, 0x0) clock_adjtime(0x17, &(0x7f0000000100)={0x3, 0x7, 0x0, 0xfffffffffffffff6, 0x4, 0x4, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7d, 0xc000000000000000, 0x0, 0x9, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x717, 0x1fc, 0x5, 0x5, 0x6}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}}, 0x0) 1.686010881s ago: executing program 2 (id=2975): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x420008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) write$UHID_INPUT(r1, 0x0, 0x0) 1.681591701s ago: executing program 1 (id=2976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) fsopen(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) close_range(r5, 0xffffffffffffffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) 1.590818883s ago: executing program 5 (id=2977): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x3e8a, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000015c0)=[0x0]) io_uring_enter(r1, 0x2947, 0x2d1a, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r5, 0x18, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 692.679984ms ago: executing program 0 (id=2978): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 547.971327ms ago: executing program 1 (id=2979): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x4000001) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000000400', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB="bf8170c13088"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x5) 0s ago: executing program 1 (id=2980): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x200000000000000f, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a67c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) kernel console output (not intermixed with test programs): T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.826919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.835966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.842083][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 68.845528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.859124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.874743][ T4276] device veth1_macvtap entered promiscuous mode [ 68.887027][ T4272] device veth0_macvtap entered promiscuous mode [ 68.896723][ T4277] device veth1_macvtap entered promiscuous mode [ 68.921806][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 68.927868][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 68.928263][ T4272] device veth1_macvtap entered promiscuous mode [ 68.934049][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 68.946325][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 68.954293][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.959888][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.974408][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.982633][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.992705][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.004525][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.017476][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.055857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.086226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.116939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.127858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.140096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.150116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.163899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.265141][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.282200][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.293762][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.304751][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.318786][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.384083][ T4355] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 69.484797][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.657208][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.769090][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.831308][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.841242][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.851889][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.861862][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.874987][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.885026][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.897575][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.909346][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.923940][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.934762][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.962379][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.978293][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.996857][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.015843][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.025170][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.034152][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.043672][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.052586][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.062612][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.075656][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.087846][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.102281][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.113048][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.123860][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.134460][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.171383][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.292338][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.314155][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.325596][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.336785][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.348808][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.922048][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 71.022917][ T4365] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 71.111142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.240052][ T4364] slcan: can't register candev [ 71.240690][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.247723][ T4364] Falling back ldisc for ttyS3. [ 71.252575][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 71.262453][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 71.268467][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 71.274600][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 71.281656][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.334228][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.443222][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.466877][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.497574][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.510872][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.527953][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.546440][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.556445][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.590098][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.605606][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.616558][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.671658][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.095180][ T4375] ntfs3: loop3: try to read out of volume at offset 0x0 [ 72.417933][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.438000][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.453674][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.462743][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.612993][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.695296][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.732701][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.408645][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.358972][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.377767][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.388053][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.486562][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.516312][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.653225][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.132970][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.187705][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.222191][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.229043][ T4399] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 76.247233][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.259886][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.269532][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.285478][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.346782][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.410638][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.459655][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.486991][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.494879][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 76.723514][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.571725][ T4420] futex_wake_op: syz.3.15 tries to shift op by 144; fix this program [ 77.609880][ T4420] loop3: detected capacity change from 0 to 256 [ 77.676089][ T4420] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 77.768491][ T27] audit: type=1800 audit(1785566641.338:2): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 78.800111][ T4430] loop4: detected capacity change from 0 to 4096 [ 79.160175][ T4430] ntfs: (device loop4): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 79.172039][ T4430] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 79.221164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.231152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.241147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.251144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.261150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.271144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.281148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.291147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.301148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 80.092796][ T4437] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 81.420786][ T22] cfg80211: failed to load regulatory.db [ 82.229046][ T4457] Zero length message leads to an empty skb [ 82.253013][ T4457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.211695][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 84.733862][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 86.041121][ C0] sched: RT throttling activated [ 89.571282][ T127] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.472453][ T4515] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.533229][ T127] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.681372][ T127] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.811814][ T127] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.820901][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.821353][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.836558][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.858133][ T4518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.897986][ T4511] UBIFS error (pid: 4511): cannot open "/dev/sequencer", error -22 [ 91.912961][ T127] usb 3-1: can't set config #27, error -71 [ 91.949287][ T127] usb 3-1: USB disconnect, device number 2 [ 94.928057][ T4548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 95.104397][ T4549] loop4: detected capacity change from 0 to 512 [ 97.053566][ T4431] Bluetooth: Error in BCSP hdr checksum [ 97.182842][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.522995][ T4564] loop3: detected capacity change from 0 to 8 [ 97.531631][ T4564] ======================================================= [ 97.531631][ T4564] WARNING: The mand mount option has been deprecated and [ 97.531631][ T4564] and is ignored by this kernel. Remove the mand [ 97.531631][ T4564] option from the mount to silence this warning. [ 97.531631][ T4564] ======================================================= [ 97.571866][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 97.578327][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 97.597456][ T4561] loop0: detected capacity change from 0 to 512 [ 97.890249][ T4327] Bluetooth: Error in BCSP hdr checksum [ 97.985880][ T4327] Bluetooth: Error in BCSP hdr checksum [ 98.333488][ T4327] Bluetooth: Error in BCSP hdr checksum [ 98.451699][ T4571] afs: Bad value for 'source' [ 98.483175][ T4431] Bluetooth: Error in BCSP hdr checksum [ 98.492760][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.35'. [ 98.659408][ T4561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.742498][ T4327] Bluetooth: Error in BCSP hdr checksum [ 98.761223][ T4564] unable to read inode lookup table [ 98.762618][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 99.641318][ T4278] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 100.489796][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 102.042004][ T4591] loop2: detected capacity change from 0 to 8 [ 102.219247][ T4591] SQUASHFS error: zlib decompression failed, data probably corrupt [ 102.227789][ T4591] SQUASHFS error: Failed to read block 0x9b: -5 [ 102.234090][ T4591] SQUASHFS error: Unable to read metadata cache entry [99] [ 102.241369][ T4591] SQUASHFS error: Unable to read inode 0x127 [ 103.880869][ T4612] loop0: detected capacity change from 0 to 2048 [ 103.890594][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.903262][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.914100][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.928712][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.939824][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.952443][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.963886][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.976998][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 103.987776][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.000633][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.011765][ T4612] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=385, location=385 [ 104.022972][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.033528][ T4612] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 104.044082][ T4612] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 104.101328][ T4618] netlink: 88 bytes leftover after parsing attributes in process `syz.1.56'. [ 106.214331][ T4624] tty tty2: ldisc open failed (-12), clearing slot 1 [ 108.129582][ T4640] loop2: detected capacity change from 0 to 40427 [ 108.899765][ T4640] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 108.908608][ T4640] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 109.308969][ T4640] F2FS-fs (loop2): invalid crc value [ 109.324926][ T4640] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 109.524029][ T4640] F2FS-fs (loop2): Start checkpoint disabled! [ 109.559328][ T4640] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 109.568095][ T4640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 112.160686][ T956] libceph: connect (1)[c::]:6789 error -101 [ 112.172370][ T4651] ceph: No mds server is up or the cluster is laggy [ 112.182778][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 112.377071][ T4665] 0x000000000007-0x000000020000 : "" [ 112.394210][ T4665] ftl_cs: FTL header corrupt! [ 112.662855][ T27] audit: type=1107 audit(1785566676.238:3): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 116.927973][ T4694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.737073][ T4431] Bluetooth: (null): Invalid header checksum [ 118.744952][ T4431] Bluetooth: (null): Invalid header checksum [ 118.852471][ T4321] Bluetooth: (null): Invalid header checksum [ 119.028419][ T4717] afs: Bad value for 'source' [ 119.079309][ T4321] Bluetooth: (null): Invalid header checksum [ 119.086458][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 119.100896][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'. [ 119.480001][ T4715] loop4: detected capacity change from 0 to 512 [ 119.481310][ T4321] Bluetooth: (null): Invalid header checksum [ 119.500994][ T4321] Bluetooth: (null): Invalid header checksum [ 119.507263][ T4321] Bluetooth: (null): Invalid header checksum [ 119.518189][ T4321] Bluetooth: (null): Invalid header checksum [ 119.662689][ T4389] Bluetooth: (null): Invalid header checksum [ 120.171030][ T4715] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.90: invalid indirect mapped block 256 (level 2) [ 120.243527][ T4389] Bluetooth: (null): Invalid header checksum [ 120.256072][ T4389] Bluetooth: (null): Invalid header checksum [ 120.267249][ T4389] Bluetooth: (null): Invalid header checksum [ 120.268080][ T4715] EXT4-fs (loop4): 2 truncates cleaned up [ 120.274264][ T4389] Bluetooth: (null): Invalid header checksum [ 120.291262][ T4389] Bluetooth: (null): Invalid header checksum [ 120.315136][ T4715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.378210][ T4715] EXT4-fs (loop4): unmounting filesystem. [ 123.521133][ T4740] loop4: detected capacity change from 0 to 8 [ 125.475736][ T4755] 0x000000000007-0x000000020000 : "" [ 125.493244][ T4755] ftl_cs: FTL header corrupt! [ 125.828751][ T4758] loop2: detected capacity change from 0 to 2048 [ 125.837624][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.849141][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.860044][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.874367][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.886427][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.897339][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.909204][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.920353][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.931987][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.943455][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.954274][ T4758] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=385, location=385 [ 125.964308][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.974867][ T4758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.985716][ T4758] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 126.051336][ T4265] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.354016][ T4765] ip6t_srh: unknown srh match flags FF3F [ 131.267177][ T4792] loop3: detected capacity change from 0 to 4096 [ 131.602630][ T4792] ntfs: (device loop3): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 131.614318][ T4792] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 131.822568][ T4791] afs: Bad value for 'source' [ 131.833988][ T4263] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.924306][ T4796] loop0: detected capacity change from 0 to 512 [ 131.966867][ T4796] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.98: invalid indirect mapped block 256 (level 2) [ 132.100627][ T4796] EXT4-fs (loop0): 2 truncates cleaned up [ 132.121264][ T4796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.603750][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 132.610151][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.688012][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.721357][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982097][ T4796] EXT4-fs (loop0): unmounting filesystem. [ 134.524060][ T4817] process 'syz.0.98' launched './file2' with NULL argv: empty string added [ 135.920939][ T4831] 0x000000000007-0x000000020000 : "" [ 135.936244][ T4831] ftl_cs: FTL header corrupt! [ 137.589801][ T4842] loop2: detected capacity change from 0 to 512 [ 137.631430][ T4842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.748886][ T4842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.758191][ T4842] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.784707][ T4842] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.108: iget: bad i_size value: 2533274857506816 [ 137.896302][ T4842] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.108: iget: bad i_size value: 2533274857506816 [ 138.084344][ T4851] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.108: iget: bad i_size value: 2533274857506816 [ 138.106562][ T4850] loop0: detected capacity change from 0 to 8 [ 139.037547][ T4850] unable to read inode lookup table [ 139.416563][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 139.995713][ T4860] loop4: detected capacity change from 0 to 2048 [ 140.004009][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.029452][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.040376][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.053473][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.065881][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.076860][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.088181][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.099571][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.110454][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 141.378371][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 141.389804][ T4860] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=385, location=385 [ 141.399924][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 141.410876][ T4860] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 141.421433][ T4860] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 142.629172][ T4878] loop0: detected capacity change from 0 to 2048 [ 142.676574][ T4878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.529311][ T4898] loop3: detected capacity change from 0 to 2048 [ 144.808894][ T4912] loop0: detected capacity change from 0 to 4096 [ 145.231239][ T4912] ntfs: (device loop0): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 145.242849][ T4912] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 145.745741][ T4263] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.823670][ T4898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.942411][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.950013][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.639140][ T4927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.849839][ T1212] block nbd4: Attempted send on invalid socket [ 148.857467][ T1212] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.869669][ T1212] block nbd4: Attempted send on invalid socket [ 148.876052][ T1212] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.885833][ T4930] Mount JFS Failure: -5 [ 150.953790][ T4948] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 151.995603][ T4957] netlink: 72 bytes leftover after parsing attributes in process `syz.0.129'. [ 152.004918][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 152.873239][ T4961] ip6t_srh: unknown srh match flags FF3F [ 156.053113][ T4978] overlayfs: failed to resolve './file1': -2 [ 156.267835][ T4976] loop3: detected capacity change from 0 to 1024 [ 157.747771][ T4976] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 157.758157][ T4976] EXT4-fs (loop3): invalid journal inode [ 157.763937][ T4976] EXT4-fs (loop3): can't get journal size [ 157.789142][ T4976] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.141: blocks 48-48 from inode overlap system zone [ 157.804333][ T4976] EXT4-fs (loop3): failed to initialize system zone (-117) [ 157.811798][ T4976] EXT4-fs (loop3): mount failed [ 159.235423][ T4999] Bluetooth: MGMT ver 1.22 [ 161.253222][ T5000] syz.3.146 (5000) used greatest stack depth: 18128 bytes left [ 167.870229][ T5066] loop0: detected capacity change from 0 to 2048 [ 167.911240][ T4287] Bluetooth: hci4: command 0x0407 tx timeout [ 168.008545][ T5066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.856339][ T5071] loop2: detected capacity change from 0 to 2048 [ 168.945344][ T5071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.311167][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.319002][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.350842][ T5080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.661109][ T5087] loop4: detected capacity change from 0 to 8 [ 170.768490][ T5087] SQUASHFS error: zlib decompression failed, data probably corrupt [ 170.776596][ T5087] SQUASHFS error: Failed to read block 0x9b: -5 [ 170.782947][ T5087] SQUASHFS error: Unable to read metadata cache entry [99] [ 170.790156][ T5087] SQUASHFS error: Unable to read inode 0x127 [ 171.729065][ T4263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.083863][ T5141] loop4: detected capacity change from 0 to 2048 [ 177.297818][ T5141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.327801][ T5143] loop2: detected capacity change from 0 to 2048 [ 177.357776][ T5143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.683826][ T5161] loop2: detected capacity change from 0 to 2048 [ 178.779701][ T5161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.773255][ T5182] loop2: detected capacity change from 0 to 4096 [ 180.189738][ T5179] loop0: detected capacity change from 0 to 2048 [ 180.202952][ T5182] ntfs: (device loop2): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 180.214734][ T5182] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 180.369800][ T5179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.541630][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 182.365743][ T5200] loop0: detected capacity change from 0 to 2048 [ 182.438267][ T5200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.789656][ T5214] loop4: detected capacity change from 0 to 8 [ 182.813382][ T5214] unable to read inode lookup table [ 184.553827][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.562365][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.583976][ T5234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.965203][ T5245] loop2: detected capacity change from 0 to 2048 [ 186.136194][ T5245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.201450][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 186.207566][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 188.143999][ T5271] loop3: detected capacity change from 0 to 8 [ 188.260697][ T5271] SQUASHFS error: zlib decompression failed, data probably corrupt [ 188.268891][ T5271] SQUASHFS error: Failed to read block 0x9b: -5 [ 188.275258][ T5271] SQUASHFS error: Unable to read metadata cache entry [99] [ 188.282576][ T5271] SQUASHFS error: Unable to read inode 0x127 [ 188.602715][ T5266] loop2: detected capacity change from 0 to 2048 [ 188.619885][ T5266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.679599][ T5275] ip6t_srh: unknown srh match flags FF3F [ 188.683940][ T5270] loop0: detected capacity change from 0 to 2048 [ 188.737599][ T5270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.938592][ T5291] loop2: detected capacity change from 0 to 2048 [ 193.318546][ T5291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.504603][ T5299] loop3: detected capacity change from 0 to 2048 [ 193.626130][ T5299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.254014][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262271][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.178699][ T5318] can0: slcan on ttyS3. [ 196.619065][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 196.631681][ T5313] can0 (unregistered): slcan off ttyS3. [ 200.302138][ T5361] loop3: detected capacity change from 0 to 2048 [ 200.339767][ T5361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.231592][ T5368] loop2: detected capacity change from 0 to 2048 [ 201.270376][ T5368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.785024][ T5397] loop3: detected capacity change from 0 to 4096 [ 203.954641][ T5397] ntfs: (device loop3): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 203.966181][ T5397] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 204.088693][ T5399] can0: slcan on ttyS3. [ 204.960670][ T5403] loop4: detected capacity change from 0 to 2048 [ 205.031965][ T5395] can0 (unregistered): slcan off ttyS3. [ 205.038589][ T5403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.270492][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 207.158634][ T5428] loop2: detected capacity change from 0 to 2048 [ 207.268844][ T5428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.447838][ T5448] loop4: detected capacity change from 0 to 4096 [ 210.472269][ T5448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.759155][ T5455] loop3: detected capacity change from 0 to 4096 [ 211.137486][ T5455] ntfs: (device loop3): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 211.149887][ T5455] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 211.280631][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 212.280243][ T5466] loop3: detected capacity change from 0 to 2048 [ 212.318161][ T5466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.426553][ T5470] can0: slcan on ttyS3. [ 213.021172][ T5461] can0 (unregistered): slcan off ttyS3. [ 217.118796][ T5504] loop4: detected capacity change from 0 to 4096 [ 217.166318][ T5504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.378577][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 217.518740][ T5514] loop2: detected capacity change from 0 to 2048 [ 217.645949][ T5514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.322445][ T5520] loop4: detected capacity change from 0 to 4096 [ 218.341227][ T5520] ntfs: (device loop4): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 218.353353][ T5520] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 219.779870][ T5535] loop2: detected capacity change from 0 to 8 [ 219.797138][ T5535] unable to read inode lookup table [ 221.541698][ T5553] loop2: detected capacity change from 0 to 4096 [ 221.617682][ T5553] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.004088][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 225.685118][ T5602] loop0: detected capacity change from 0 to 8 [ 225.703844][ T5602] unable to read inode lookup table [ 227.996295][ T5612] loop2: detected capacity change from 0 to 4096 [ 228.010458][ T5612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.373482][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 228.443077][ T5629] loop3: detected capacity change from 0 to 4096 [ 228.581393][ T5629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 228.767748][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 230.743674][ T5661] loop2: detected capacity change from 0 to 8 [ 230.897472][ T5661] unable to read inode lookup table [ 233.749299][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 234.650851][ T5695] loop4: detected capacity change from 0 to 4096 [ 234.740971][ T5695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.195858][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 235.524440][ T5709] loop0: detected capacity change from 0 to 2048 [ 235.623304][ T5709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.219470][ T5733] loop0: detected capacity change from 0 to 2048 [ 240.280785][ T5733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.022061][ T5747] loop4: detected capacity change from 0 to 4096 [ 242.153437][ T5754] loop3: detected capacity change from 0 to 4096 [ 242.162123][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 242.178626][ T5754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.006787][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 244.116582][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 244.505238][ T5781] loop0: detected capacity change from 0 to 8 [ 245.310404][ T5781] SQUASHFS error: zlib decompression failed, data probably corrupt [ 245.318432][ T5781] SQUASHFS error: Failed to read block 0x9b: -5 [ 245.324711][ T5781] SQUASHFS error: Unable to read metadata cache entry [99] [ 245.331908][ T5781] SQUASHFS error: Unable to read inode 0x127 [ 246.192726][ T5795] loop3: detected capacity change from 0 to 2048 [ 246.278298][ T5795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.376622][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 250.386750][ T5822] loop4: detected capacity change from 0 to 2048 [ 250.466098][ T5822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.102971][ T5834] can0: slcan on ttyS3. [ 251.944542][ T5833] can0 (unregistered): slcan off ttyS3. [ 252.149235][ T5845] loop0: detected capacity change from 0 to 2048 [ 252.462658][ T5845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.721745][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730591][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.610676][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 256.663197][ T5892] loop0: detected capacity change from 0 to 2048 [ 256.965215][ T5892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.083582][ T5912] loop2: detected capacity change from 0 to 2048 [ 260.098496][ T5912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.636890][ T5928] loop4: detected capacity change from 0 to 2048 [ 260.671721][ T5928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.861513][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 265.235267][ T5966] loop4: detected capacity change from 0 to 2048 [ 265.245569][ T5966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.508543][ T5984] loop4: detected capacity change from 0 to 2048 [ 266.534231][ T5985] loop2: detected capacity change from 0 to 2048 [ 266.574302][ T5984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.602466][ T5985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.566789][ T6010] loop3: detected capacity change from 0 to 2048 [ 269.635812][ T6010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.533152][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 272.037210][ T6038] loop4: detected capacity change from 0 to 2048 [ 272.092538][ T6038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.969485][ T6044] loop0: detected capacity change from 0 to 2048 [ 273.267345][ T6044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.744817][ T6069] loop0: detected capacity change from 0 to 2048 [ 275.830525][ T6069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.888601][ T6094] can0: slcan on ttyS3. [ 277.733703][ T6089] can0 (unregistered): slcan off ttyS3. [ 279.677142][ T6127] loop3: detected capacity change from 0 to 2048 [ 280.713600][ T6127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.569649][ T6158] can0: slcan on ttyS3. [ 282.372448][ T6150] can0 (unregistered): slcan off ttyS3. [ 284.960958][ T6189] loop3: detected capacity change from 0 to 2048 [ 285.226547][ T6189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.551170][ T6207] can0: slcan on ttyS3. [ 286.392081][ T6201] can0 (unregistered): slcan off ttyS3. [ 287.989828][ T6230] loop3: detected capacity change from 0 to 2048 [ 288.334716][ T6230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.745894][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 291.088545][ T6266] loop0: detected capacity change from 0 to 2048 [ 291.120320][ T6266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.388594][ T6273] can0: slcan on ttyS3. [ 293.004738][ T6268] can0 (unregistered): slcan off ttyS3. [ 293.817672][ T6291] can0: slcan on ttyS3. [ 293.942569][ T6290] can0 (unregistered): slcan off ttyS3. [ 298.985912][ T6349] can0: slcan on ttyS3. [ 299.741406][ T6345] can0 (unregistered): slcan off ttyS3. [ 303.803035][ T6399] can0: slcan on ttyS3. [ 303.911643][ T6398] can0 (unregistered): slcan off ttyS3. [ 304.007141][ T6407] loop0: detected capacity change from 0 to 2048 [ 304.378496][ T6407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.353750][ T6422] can0: slcan on ttyS3. [ 305.461683][ T6417] can0 (unregistered): slcan off ttyS3. [ 307.279760][ T6451] loop4: detected capacity change from 0 to 2048 [ 307.305153][ T6451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.548172][ T6458] can0: slcan on ttyS3. [ 308.433214][ T6452] can0 (unregistered): slcan off ttyS3. [ 308.746061][ T6470] loop2: detected capacity change from 0 to 2048 [ 308.790649][ T6466] loop3: detected capacity change from 0 to 2048 [ 308.850850][ T6470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.878201][ T6466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.199080][ T6479] can0: slcan on ttyS3. [ 309.781980][ T6474] can0 (unregistered): slcan off ttyS3. [ 310.380352][ T6492] can0: slcan on ttyS3. [ 311.141201][ T6485] can0 (unregistered): slcan off ttyS3. [ 311.723738][ T6508] can0: slcan on ttyS3. [ 312.401453][ T6500] can0 (unregistered): slcan off ttyS3. [ 312.904816][ T6521] loop4: detected capacity change from 0 to 2048 [ 313.008376][ T6521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.229802][ T6531] loop3: detected capacity change from 0 to 2048 [ 314.392128][ T6531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.557025][ T6543] can0: slcan on ttyS3. [ 315.371480][ T6534] can0 (unregistered): slcan off ttyS3. [ 315.371730][ T6548] loop2: detected capacity change from 0 to 2048 [ 315.496247][ T6548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.588590][ T6552] can0: slcan on ttyS3. [ 316.332053][ T6544] can0 (unregistered): slcan off ttyS3. [ 317.007625][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111174][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.752421][ T6596] loop4: detected capacity change from 0 to 2048 [ 318.773510][ T6596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.262045][ T6608] can0: slcan on ttyS3. [ 319.872463][ T6600] can0 (unregistered): slcan off ttyS3. [ 319.985928][ T6610] loop2: detected capacity change from 0 to 2048 [ 320.379058][ T6618] loop0: detected capacity change from 0 to 8 [ 320.672132][ T6610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.756040][ T6620] loop4: detected capacity change from 0 to 2048 [ 320.962774][ T6620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.717346][ T6646] loop0: detected capacity change from 0 to 2048 [ 322.754503][ T6646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.939682][ T6652] capability: warning: `syz.4.571' uses 32-bit capabilities (legacy support in use) [ 325.022777][ T6667] loop4: detected capacity change from 0 to 2048 [ 325.062987][ T6667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.530424][ T6677] can0: slcan on ttyS3. [ 326.593470][ T6672] can0 (unregistered): slcan off ttyS3. [ 327.635508][ T6698] loop2: detected capacity change from 0 to 2048 [ 328.431643][ T6698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.146164][ T6729] can0: slcan on ttyS3. [ 331.311442][ T6724] can0 (unregistered): slcan off ttyS3. [ 331.564571][ T6735] loop2: detected capacity change from 0 to 2048 [ 331.629799][ T6735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.460589][ T6747] can0: slcan on ttyS3. [ 333.051381][ T6741] can0 (unregistered): slcan off ttyS3. [ 335.864071][ T6777] vivid-007: kernel_thread() failed [ 336.657144][ T6789] can0: slcan on ttyS3. [ 336.921543][ T6764] can0 (unregistered): slcan off ttyS3. [ 337.134641][ T6798] can0: slcan on ttyS3. [ 337.721698][ T6791] can0 (unregistered): slcan off ttyS3. [ 338.151209][ T6804] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 338.542635][ T6799] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 341.882742][ T6831] loop4: detected capacity change from 0 to 2048 [ 341.902115][ T6831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.005466][ T6836] can0: slcan on ttyS3. [ 342.631274][ T6833] can0 (unregistered): slcan off ttyS3. [ 343.180964][ T6846] can0: slcan on ttyS3. [ 345.097059][ T6841] can0 (unregistered): slcan off ttyS3. [ 350.780465][ T6899] can0: slcan on ttyS3. [ 352.591889][ T6893] can0 (unregistered): slcan off ttyS3. [ 352.591889][ T4278] Bluetooth: hci4: command 0x0405 tx timeout [ 352.815643][ T6901] input: syz0 as /devices/virtual/input/input76 [ 354.054198][ T6923] can0: slcan on ttyS3. [ 357.062853][ T6926] Cannot find set identified by id 0 to match [ 357.521343][ T6916] can0 (unregistered): slcan off ttyS3. [ 358.589459][ T6949] can0: slcan on ttyS3. [ 359.321195][ T6942] can0 (unregistered): slcan off ttyS3. [ 364.028660][ T6979] can0: slcan on ttyS3. [ 364.801325][ T6976] can0 (unregistered): slcan off ttyS3. [ 366.010697][ T6994] loop2: detected capacity change from 0 to 2048 [ 366.151166][ T6994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.265968][ T7037] can0: slcan on ttyS3. [ 370.931345][ T7031] can0 (unregistered): slcan off ttyS3. [ 372.389721][ T7057] can0: slcan on ttyS3. [ 373.721201][ T7050] can0 (unregistered): slcan off ttyS3. [ 374.364781][ T7073] netlink: 72 bytes leftover after parsing attributes in process `syz.3.660'. [ 374.373741][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 377.585417][ T7111] can0: slcan on ttyS3. [ 378.368739][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.375122][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.441718][ T7102] can0 (unregistered): slcan off ttyS3. [ 385.764895][ T7185] can0: slcan on ttyS3. [ 386.451143][ T7182] can0 (unregistered): slcan off ttyS3. [ 387.010620][ T7193] can0: slcan on ttyS3. [ 387.531509][ T7190] can0 (unregistered): slcan off ttyS3. [ 388.953482][ T7202] can0: slcan on ttyS3. [ 390.461904][ T7197] can0 (unregistered): slcan off ttyS3. [ 396.690546][ T7257] can0: slcan on ttyS3. [ 397.952065][ T7249] can0 (unregistered): slcan off ttyS3. [ 398.358438][ T7275] can0: slcan on ttyS3. [ 398.991159][ T7264] can0 (unregistered): slcan off ttyS3. [ 401.160438][ T7304] can0: slcan on ttyS3. [ 404.191811][ T7296] can0 (unregistered): slcan off ttyS3. [ 409.309036][ T7340] NILFS (nullb0): couldn't find nilfs on the device [ 409.774573][ T7346] can0: slcan on ttyS3. [ 410.372789][ T7335] can0 (unregistered): slcan off ttyS3. [ 410.639009][ T7355] Bluetooth: MGMT ver 1.22 [ 410.702310][ T7359] mmap: syz.2.712 (7359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 411.808751][ T7363] can0: slcan on ttyS3. [ 413.351158][ T7356] can0 (unregistered): slcan off ttyS3. [ 413.442899][ T7361] loop3: detected capacity change from 0 to 2048 [ 413.514473][ T7361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.211413][ T7403] can0: slcan on ttyS3. [ 419.981514][ T7397] can0 (unregistered): slcan off ttyS3. [ 420.408197][ T7412] loop4: detected capacity change from 0 to 512 [ 421.057028][ T7414] input: syz0 as /devices/virtual/input/input78 [ 422.055029][ T7419] can0: slcan on ttyS3. [ 422.664371][ T7416] can0 (unregistered): slcan off ttyS3. [ 425.328733][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 425.378913][ T7443] openvswitch: netlink: Flow key attr not present in new flow. [ 427.154087][ T7457] loop3: detected capacity change from 0 to 2048 [ 427.266514][ T7457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.155450][ T7480] loop3: detected capacity change from 0 to 8 [ 431.386917][ T7491] loop3: detected capacity change from 0 to 512 [ 431.571327][ T7495] can0: slcan on ttyS3. [ 433.063694][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 433.795759][ T7507] input: syz0 as /devices/virtual/input/input79 [ 434.549830][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 434.564001][ T7493] can0 (unregistered): slcan off ttyS3. [ 436.212878][ T7524] can0: slcan on ttyS3. [ 436.851116][ T7517] can0 (unregistered): slcan off ttyS3. [ 437.199635][ T7527] loop2: detected capacity change from 0 to 2048 [ 437.904002][ T7527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.878527][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.886765][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.297055][ T7558] loop4: detected capacity change from 0 to 8 [ 441.002319][ T7564] can0: slcan on ttyS3. [ 442.265074][ T7560] can0 (unregistered): slcan off ttyS3. [ 443.071562][ T7581] can0: slcan on ttyS3. [ 443.445975][ T7583] loop4: detected capacity change from 0 to 4096 [ 443.481267][ T7580] can0 (unregistered): slcan off ttyS3. [ 443.894861][ T7583] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 443.903331][ T7583] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 443.911967][ T7583] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 445.532466][ T7615] can0: slcan on ttyS3. [ 445.981295][ T7598] can0 (unregistered): slcan off ttyS3. [ 448.013139][ T7640] can0: slcan on ttyS3. [ 448.695105][ T7636] can0 (unregistered): slcan off ttyS3. [ 450.554759][ T7650] can0: slcan on ttyS3. [ 451.051151][ T7642] can0 (unregistered): slcan off ttyS3. [ 452.034435][ T7663] can0: slcan on ttyS3. [ 452.771183][ T7653] can0 (unregistered): slcan off ttyS3. [ 457.965646][ T7706] can0: slcan on ttyS3. [ 458.961398][ T7699] can0 (unregistered): slcan off ttyS3. [ 459.305216][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 459.719367][ T7729] can0: slcan on ttyS3. [ 460.431767][ T7724] can0 (unregistered): slcan off ttyS3. [ 466.787910][ T7804] can0: slcan on ttyS3. [ 467.501111][ T7794] can0 (unregistered): slcan off ttyS3. [ 467.655643][ T7810] loop3: detected capacity change from 0 to 512 [ 467.706269][ T7810] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 467.750686][ T7810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 467.855344][ T7810] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 467.914679][ T7777] can0: slcan on ttyS3. [ 468.024007][ T7810] EXT4-fs (loop3): 1 truncate cleaned up [ 468.049199][ T7810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 468.161534][ T7776] can0 (unregistered): slcan off ttyS3. [ 468.283603][ T7825] can0: slcan on ttyS3. [ 470.260404][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 470.301128][ T7819] can0 (unregistered): slcan off ttyS3. [ 472.377999][ T7841] loop3: detected capacity change from 0 to 2048 [ 472.544989][ T7841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.900174][ T7860] can0: slcan on ttyS3. [ 474.642824][ T7857] can0 (unregistered): slcan off ttyS3. [ 475.862096][ T7868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 476.063318][ T7886] loop2: detected capacity change from 0 to 512 [ 476.150896][ T7886] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.243072][ T7886] EXT4-fs (loop2): 1 truncate cleaned up [ 476.248776][ T7886] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 477.181381][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 477.991885][ T7913] set match dimension is over the limit! [ 479.183937][ T7924] can0: slcan on ttyS3. [ 480.492825][ T7919] can0 (unregistered): slcan off ttyS3. [ 480.645546][ T7932] can0: slcan on ttyS3. [ 481.261186][ T7927] can0 (unregistered): slcan off ttyS3. [ 485.372719][ T7983] set match dimension is over the limit! [ 485.824094][ T7984] can0: slcan on ttyS3. [ 486.212222][ T7981] can0 (unregistered): slcan off ttyS3. [ 486.932526][ T7995] can0: slcan on ttyS3. [ 488.311123][ T7991] can0 (unregistered): slcan off ttyS3. [ 488.835290][ T8015] can0: slcan on ttyS3. [ 489.531086][ T8008] can0 (unregistered): slcan off ttyS3. [ 494.037332][ T8050] loop2: detected capacity change from 0 to 8 [ 496.203664][ T8068] loop4: detected capacity change from 0 to 2048 [ 496.273567][ T8068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.658580][ T8075] can0: slcan on ttyS3. [ 497.351135][ T8072] can0 (unregistered): slcan off ttyS3. [ 498.841305][ T8092] can0: slcan on ttyS3. [ 499.511446][ T8078] can0 (unregistered): slcan off ttyS3. [ 501.094995][ T8109] can0: slcan on ttyS3. [ 501.322404][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.334522][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.761087][ T8102] can0 (unregistered): slcan off ttyS3. [ 505.413970][ T8132] can0: slcan on ttyS3. [ 505.561498][ T8126] can0 (unregistered): slcan off ttyS3. [ 507.468734][ T8150] can0: slcan on ttyS3. [ 507.671102][ T8143] can0 (unregistered): slcan off ttyS3. [ 508.495934][ T8165] can0: slcan on ttyS3. [ 510.713687][ T8161] can0 (unregistered): slcan off ttyS3. [ 511.024294][ T8177] can0: slcan on ttyS3. [ 511.711351][ T8172] can0 (unregistered): slcan off ttyS3. [ 519.243909][ T8220] can0: slcan on ttyS3. [ 519.791455][ T8214] can0 (unregistered): slcan off ttyS3. [ 520.209861][ T8229] can0: slcan on ttyS3. [ 520.966267][ T8225] can0 (unregistered): slcan off ttyS3. [ 521.451380][ T8240] can0: slcan on ttyS3. [ 522.771368][ T8233] can0 (unregistered): slcan off ttyS3. [ 526.509599][ T8278] can0: slcan on ttyS3. [ 527.141729][ T8274] can0 (unregistered): slcan off ttyS3. [ 531.251354][ T8329] can0: slcan on ttyS3. [ 531.881854][ T8324] can0 (unregistered): slcan off ttyS3. [ 533.346878][ T8347] loop4: detected capacity change from 0 to 2048 [ 533.435965][ T8347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.682725][ T8379] can0: slcan on ttyS3. [ 538.411016][ T8373] can0 (unregistered): slcan off ttyS3. [ 538.514860][ T8385] can0: slcan on ttyS3. [ 539.341095][ T8380] can0 (unregistered): slcan off ttyS3. [ 539.659450][ T8392] can0: slcan on ttyS3. [ 540.101705][ T8386] can0 (unregistered): slcan off ttyS3. [ 543.040724][ T8430] can0: slcan on ttyS3. [ 543.830151][ T8426] can0 (unregistered): slcan off ttyS3. [ 544.280977][ T8438] can0: slcan on ttyS3. [ 545.191105][ T8433] can0 (unregistered): slcan off ttyS3. [ 545.889842][ T8452] can0: slcan on ttyS3. [ 546.841565][ T8441] can0 (unregistered): slcan off ttyS3. [ 548.858425][ T8465] loop4: detected capacity change from 0 to 2048 [ 549.113170][ T8465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 549.732033][ T8479] can0: slcan on ttyS3. [ 550.351297][ T8473] can0 (unregistered): slcan off ttyS3. [ 552.533776][ T8492] can0: slcan on ttyS3. [ 553.222524][ T8484] can0 (unregistered): slcan off ttyS3. [ 553.685269][ T8507] can0: slcan on ttyS3. [ 554.601290][ T8498] can0 (unregistered): slcan off ttyS3. [ 555.465794][ T8518] can0: slcan on ttyS3. [ 555.995268][ T1212] block nbd2: Attempted send on invalid socket [ 556.001758][ T1212] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.038888][ T1212] block nbd2: Attempted send on invalid socket [ 556.045241][ T1212] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.060103][ T8517] Mount JFS Failure: -5 [ 556.101374][ T8512] can0 (unregistered): slcan off ttyS3. [ 557.982901][ T8533] can0: slcan on ttyS3. [ 558.591649][ T8527] can0 (unregistered): slcan off ttyS3. [ 559.044842][ T8538] can0: slcan on ttyS3. [ 559.541105][ T8534] can0 (unregistered): slcan off ttyS3. [ 560.072544][ T8541] loop0: detected capacity change from 0 to 2048 [ 560.311290][ T8541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.621557][ T8558] can0: slcan on ttyS3. [ 561.851236][ T8552] can0 (unregistered): slcan off ttyS3. [ 562.683369][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.689861][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.554854][ T8586] can0: slcan on ttyS3. [ 564.911025][ T8580] can0 (unregistered): slcan off ttyS3. [ 566.765540][ T8608] can0: slcan on ttyS3. [ 569.111239][ T8600] can0 (unregistered): slcan off ttyS3. [ 571.937893][ T8631] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 574.228333][ T8654] can0: slcan on ttyS3. [ 574.801612][ T8648] can0 (unregistered): slcan off ttyS3. [ 575.407848][ T8665] can0: slcan on ttyS3. [ 576.345686][ T8661] can0 (unregistered): slcan off ttyS3. [ 578.502805][ T8677] can0: slcan on ttyS3. [ 578.751110][ T8671] can0 (unregistered): slcan off ttyS3. [ 580.210306][ T8702] can0: slcan on ttyS3. [ 580.851439][ T8699] can0 (unregistered): slcan off ttyS3. [ 583.152324][ T8724] can0: slcan on ttyS3. [ 583.862288][ T8722] can0 (unregistered): slcan off ttyS3. [ 583.980056][ T8738] can0: slcan on ttyS3. [ 584.739104][ T8729] can0 (unregistered): slcan off ttyS3. [ 585.102033][ T8750] can0: slcan on ttyS3. [ 587.191022][ T8741] can0 (unregistered): slcan off ttyS3. [ 589.050048][ T1212] block nbd0: Attempted send on invalid socket [ 589.261716][ T1212] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 589.274770][ T1212] block nbd0: Attempted send on invalid socket [ 589.316733][ T1212] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 589.326534][ T8755] Mount JFS Failure: -5 [ 589.358132][ T8779] can0: slcan on ttyS3. [ 589.981476][ T8772] can0 (unregistered): slcan off ttyS3. [ 590.145377][ T8782] zram0: detected capacity change from 0 to 8 [ 590.718166][ T8786] loop0: detected capacity change from 0 to 4096 [ 590.775444][ T4263] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 595.723828][ T8812] can0: slcan on ttyS3. [ 596.082619][ T8802] can0 (unregistered): slcan off ttyS3. [ 597.288240][ T8821] can0: slcan on ttyS3. [ 597.949446][ T53] block nbd1: Attempted send on invalid socket [ 597.956032][ T53] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.970178][ T53] block nbd1: Attempted send on invalid socket [ 597.976583][ T53] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 597.989095][ T8827] Mount JFS Failure: -5 [ 598.091170][ T8819] can0 (unregistered): slcan off ttyS3. [ 602.758634][ T8864] can0: slcan on ttyS3. [ 603.061092][ T8861] can0 (unregistered): slcan off ttyS3. [ 605.275226][ T8878] can0: slcan on ttyS3. [ 605.670979][ T8870] can0 (unregistered): slcan off ttyS3. [ 611.280259][ T8922] can0: slcan on ttyS3. [ 611.855984][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 613.249812][ T8933] loop2: detected capacity change from 0 to 2048 [ 613.271090][ T8919] can0 (unregistered): slcan off ttyS3. [ 613.344997][ T8933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 619.109204][ T8989] can0: slcan on ttyS3. [ 619.996751][ T8982] can0 (unregistered): slcan off ttyS3. [ 620.362545][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 620.890431][ T8994] can0: slcan on ttyS3. [ 620.955903][ T8993] can0 (unregistered): slcan off ttyS3. [ 621.056931][ T9007] loop3: detected capacity change from 0 to 2048 [ 621.092380][ T9007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.107268][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 624.195956][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.205494][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.275425][ T9046] can0: slcan on ttyS3. [ 627.621307][ T9038] can0 (unregistered): slcan off ttyS3. [ 628.289435][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 628.361668][ T9066] can0: slcan on ttyS3. [ 628.461302][ T9064] can0 (unregistered): slcan off ttyS3. [ 629.892311][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 632.811537][ T9114] can0: slcan on ttyS3. [ 632.911040][ T9110] can0 (unregistered): slcan off ttyS3. [ 633.509081][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 638.373551][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 639.275591][ T9178] can0: slcan on ttyS3. [ 639.477842][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 640.086212][ T9172] can0 (unregistered): slcan off ttyS3. [ 641.924093][ T9205] loop2: detected capacity change from 0 to 2048 [ 641.973572][ T9205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 644.958759][ T9235] can0: slcan on ttyS3. [ 646.728693][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 646.781046][ T9231] can0 (unregistered): slcan off ttyS3. [ 647.670083][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 651.958629][ T9289] loop3: detected capacity change from 0 to 4096 [ 652.158251][ T4263] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 654.642535][ T9313] can0: slcan on ttyS3. [ 655.121557][ T9311] can0 (unregistered): slcan off ttyS3. [ 656.412494][ T9320] loop2: detected capacity change from 0 to 2048 [ 656.442972][ T9320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 656.720280][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 658.671680][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1145'. [ 658.901370][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 661.528944][ T9360] loop0: detected capacity change from 0 to 2048 [ 661.757015][ T9372] can0: slcan on ttyS3. [ 661.987726][ T9360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.108620][ T9370] can0 (unregistered): slcan off ttyS3. [ 664.982915][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 666.277885][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'. [ 666.341710][ T9402] loop2: detected capacity change from 0 to 64 [ 666.354494][ T9402] hfs: unable to parse mount options [ 666.932354][ T4263] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 670.175564][ T9428] can0: slcan on ttyS3. [ 671.144026][ T9427] can0 (unregistered): slcan off ttyS3. [ 671.935368][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 673.700792][ T9457] loop2: detected capacity change from 0 to 2048 [ 673.840584][ T9457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 678.678031][ T9485] can0: slcan on ttyS3. [ 678.741090][ T9484] can0 (unregistered): slcan off ttyS3. [ 679.335734][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.348200][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.366854][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.378206][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.391581][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 679.399859][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.816751][ T9497] Bluetooth: hci5: command 0x0409 tx timeout [ 682.331622][ T9517] can0: slcan on ttyS3. [ 682.620995][ T9514] can0 (unregistered): slcan off ttyS3. [ 682.738172][ T9512] gfs2: gfs2 mount does not exist [ 682.775357][ T9491] chnl_net:caif_netlink_parms(): no params data found [ 683.016159][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 683.978148][ T9533] loop3: detected capacity change from 0 to 2048 [ 684.058483][ T9533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 684.082091][ T9497] Bluetooth: hci5: command 0x041b tx timeout [ 684.170069][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.212658][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.221123][ T9491] device bridge_slave_0 entered promiscuous mode [ 684.231223][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.238381][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.252311][ T9491] device bridge_slave_1 entered promiscuous mode [ 684.363850][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.406902][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.636754][ T9550] can0: slcan on ttyS3. [ 684.674304][ T9491] team0: Port device team_slave_0 added [ 684.726463][ T9491] team0: Port device team_slave_1 added [ 684.726539][ T9549] can0 (unregistered): slcan off ttyS3. [ 685.743506][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.753471][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.121190][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 687.155047][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.194011][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.200901][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 688.520997][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.545197][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.558919][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.106156][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.201003][ T9591] can0: slcan on ttyS3. [ 689.440653][ T9590] can0 (unregistered): slcan off ttyS3. [ 689.602021][ T5697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.176815][ T9491] device hsr_slave_0 entered promiscuous mode [ 690.898279][ T9491] device hsr_slave_1 entered promiscuous mode [ 690.907389][ T9491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.915837][ T9491] Cannot create hsr debugfs directory [ 690.968242][ T5697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.089222][ T9609] loop3: detected capacity change from 0 to 2048 [ 691.139185][ T9609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.241233][ T5697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.674879][ T5697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.781607][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 692.277639][ T9491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 692.321188][ T9491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 692.352606][ T9491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 692.464887][ T9491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 696.001045][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.089031][ T7119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 696.121649][ T7119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 696.218677][ T9491] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.911025][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.949503][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 698.011470][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.018775][ T7038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.090038][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 698.526832][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 698.545894][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.554275][ T7038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.628853][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 698.671438][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 698.708337][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 698.793385][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 698.953158][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 698.995791][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 699.168516][ T9690] loop3: detected capacity change from 0 to 64 [ 699.169456][ T9690] hfs: unable to parse mount options [ 699.446769][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 699.750603][ T9491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.761974][ T9491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.787662][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.797555][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.918484][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.928909][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.945410][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 699.979859][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.057798][ T9692] can0: slcan on ttyS3. [ 700.086694][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 701.101305][ T9691] can0 (unregistered): slcan off ttyS3. [ 704.182446][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 704.257553][ T5697] device hsr_slave_0 left promiscuous mode [ 704.278067][ T5697] device hsr_slave_1 left promiscuous mode [ 704.323132][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.434083][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.467214][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.484775][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.495102][ T5697] device bridge_slave_1 left promiscuous mode [ 704.523155][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.585290][ T9750] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 704.635106][ T5697] device bridge_slave_0 left promiscuous mode [ 704.651035][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.816782][ T5697] device veth1_macvtap left promiscuous mode [ 704.830289][ T5697] device veth0_macvtap left promiscuous mode [ 704.844786][ T5697] device veth1_vlan left promiscuous mode [ 704.858059][ T5697] device veth0_vlan left promiscuous mode [ 706.208062][ T5697] team0 (unregistering): Port device team_slave_1 removed [ 706.247943][ T5697] team0 (unregistering): Port device team_slave_0 removed [ 706.285732][ T5697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.324732][ T5697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.560658][ T5697] bond0 (unregistering): Released all slaves [ 706.647158][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 706.654664][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 706.695072][ T9491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.148221][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 707.158220][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 707.190399][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 707.200751][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 707.213980][ T9491] device veth0_vlan entered promiscuous mode [ 707.223011][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 707.233137][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 707.246256][ T9491] device veth1_vlan entered promiscuous mode [ 707.278746][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 707.293638][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 707.305026][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 707.318239][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 707.335791][ T9491] device veth0_macvtap entered promiscuous mode [ 707.346242][ T9491] device veth1_macvtap entered promiscuous mode [ 707.368590][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.379900][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.396397][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.407085][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.417511][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.428013][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.437845][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.448364][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.459456][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.475860][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 707.487937][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 707.496167][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 707.505442][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 707.518544][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.529591][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.539495][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.552778][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.562911][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.573916][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.583857][ T9491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.594472][ T9491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.605562][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.616679][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 707.625903][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 707.636337][ T9491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.645371][ T9491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.654576][ T9491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.664074][ T9491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.752263][ T4768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.760132][ T4768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.784375][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 707.808202][ T4856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.818372][ T4856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.827567][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 708.106396][ T9808] gfs2: gfs2 mount does not exist [ 715.219454][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 715.236740][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 716.413956][ T9867] can0: slcan on ttyS3. [ 716.691924][ T9858] can0 (unregistered): slcan off ttyS3. [ 720.610981][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1253'. [ 720.635427][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 721.415508][ T9923] loop2: detected capacity change from 0 to 4096 [ 722.057368][ T9925] loop3: detected capacity change from 0 to 4096 [ 722.707144][ T4263] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 722.707480][ T4265] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 728.505307][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1269'. [ 728.520040][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1267'. [ 732.965737][T10007] No such timeout policy "syz1" [ 742.472091][T10094] 9pnet_fd: Insufficient options for proto=fd [ 747.003138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.009541][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.269030][T10139] can0: slcan on ttyS3. [ 749.601121][T10129] can0 (unregistered): slcan off ttyS3. [ 764.935112][T10251] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 764.946149][T10251] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 766.080839][ T4278] Bluetooth: hci5: link tx timeout [ 766.086924][ T4278] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 766.381127][ T9497] Bluetooth: hci5: link tx timeout [ 766.386335][ T9497] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 767.023220][T10267] can0: slcan on ttyS3. [ 767.331602][T10264] can0 (unregistered): slcan off ttyS3. [ 767.474976][T10271] loop0: detected capacity change from 0 to 512 [ 768.121093][ T9497] Bluetooth: hci5: command 0x0406 tx timeout [ 768.682781][T10271] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 768.692200][T10271] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.433432][T10277] loop2: detected capacity change from 0 to 512 [ 770.882218][T10277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 771.536984][T10277] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.922864][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 772.948263][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 777.261236][T10324] tipc: Started in network mode [ 777.268284][T10324] tipc: Node identity ac14140f, cluster identity 4711 [ 777.288360][T10324] tipc: New replicast peer: 172.30.0.4 [ 777.296627][T10324] tipc: Enabled bearer , priority 10 [ 778.313973][ T4404] tipc: Node number set to 2886997007 [ 782.712555][T10362] can0: slcan on ttyS3. [ 782.861008][T10353] can0 (unregistered): slcan off ttyS3. [ 784.493868][T10382] 9pnet_fd: Insufficient options for proto=fd [ 784.708728][T10389] loop3: detected capacity change from 0 to 8 [ 785.131248][T10389] SQUASHFS error: lzo decompression failed, data probably corrupt [ 785.139687][T10389] SQUASHFS error: Failed to read block 0x91: -5 [ 785.146011][T10389] SQUASHFS error: Unable to read metadata cache entry [8f] [ 785.153255][T10389] SQUASHFS error: Unable to read inode 0x11f [ 785.471783][T10348] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 786.381130][T10394] No such timeout policy "syz1" [ 786.517668][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 793.033554][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1366'. [ 795.135058][T10472] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 795.144800][T10472] F2FS-fs (loop2): Unable to read 1th superblock [ 795.151379][T10472] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 795.160625][T10472] F2FS-fs (loop2): Unable to read 2th superblock [ 797.692319][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 800.285193][T10527] loop3: detected capacity change from 0 to 512 [ 801.950229][T10527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 802.112476][T10527] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.699085][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 803.761663][T10542] can0: slcan on ttyS3. [ 804.062534][T10542] can0 (unregistered): slcan off ttyS3. [ 806.596605][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'. [ 808.447712][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.458293][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.824641][T10605] can0: slcan on ttyS3. [ 809.731265][T10605] can0 (unregistered): slcan off ttyS3. [ 809.884775][T10621] loop5: detected capacity change from 0 to 512 [ 811.281259][T10621] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 811.962218][T10621] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.317272][ T9491] EXT4-fs (loop5): unmounting filesystem. [ 817.206347][T10692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.104728][T10708] can0: slcan on ttyS3. [ 819.536502][T10670] can0 (unregistered): slcan off ttyS3. [ 824.220651][T10736] can0: slcan on ttyS3. [ 825.320997][T10716] can0 (unregistered): slcan off ttyS3. [ 831.698889][T10828] can0: slcan on ttyS3. [ 831.901667][T10819] can0 (unregistered): slcan off ttyS3. [ 833.607444][T10856] can0: slcan on ttyS3. [ 833.791119][T10835] can0 (unregistered): slcan off ttyS3. [ 836.437539][T10867] loop3: detected capacity change from 0 to 128 [ 837.954206][T10884] loop0: detected capacity change from 0 to 8192 [ 839.862655][T10902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.450614][ T53] block nbd0: Attempted send on invalid socket [ 842.480132][ T53] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 842.508096][ T53] block nbd0: Attempted send on invalid socket [ 842.515777][ T53] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 842.547088][T10904] Mount JFS Failure: -5 [ 849.852453][T10951] loop0: detected capacity change from 0 to 128 [ 849.929607][T10956] Config c/1 of g_uac2 needs at least one function. [ 849.941289][T10956] udc usbip-vudc.0: failed to start g_uac2: -22 [ 849.947571][T10956] configfs-gadget.g_uac2: probe of gadget.32 failed with error -22 [ 850.571007][T10965] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 850.580189][T10965] F2FS-fs (loop5): Unable to read 1th superblock [ 850.586725][T10965] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 850.596076][T10965] F2FS-fs (loop5): Unable to read 2th superblock [ 850.882387][T10956] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 851.465892][T10975] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 851.475940][T10975] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 851.834571][T10956] udc usbip-vudc.0: soft-connect without a gadget driver [ 852.349516][T10981] netlink: 'syz.0.1484': attribute type 2 has an invalid length. [ 852.357843][T10981] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1484'. [ 853.032100][T10988] loop3: detected capacity change from 0 to 8192 [ 854.641695][T10997] tipc: Started in network mode [ 854.646655][T10997] tipc: Node identity ac14140f, cluster identity 4711 [ 854.658809][T10997] tipc: New replicast peer: 172.30.0.2 [ 854.676545][T10997] tipc: Enabled bearer , priority 10 [ 857.444965][ T14] tipc: Node number set to 2886997007 [ 860.784632][T11040] loop2: detected capacity change from 0 to 128 [ 863.672617][T11064] tipc: Started in network mode [ 863.682199][T11064] tipc: Node identity ac14140f, cluster identity 4711 [ 863.713466][T11064] tipc: New replicast peer: 172.30.0.3 [ 863.744753][T11064] tipc: Enabled bearer , priority 10 [ 864.750837][ T14] tipc: Node number set to 2886997007 [ 869.016666][T11100] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.026104][T11100] F2FS-fs (loop3): Unable to read 1th superblock [ 869.032660][T11100] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 869.043173][T11100] F2FS-fs (loop3): Unable to read 2th superblock [ 869.729921][T11099] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 869.739974][T11099] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 869.756887][T11099] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 869.892871][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.899155][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.059028][T11103] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 872.187000][T11132] loop5: detected capacity change from 0 to 128 [ 873.104528][T11145] loop0: detected capacity change from 0 to 512 [ 873.704451][T11145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 873.714341][T11145] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.893375][T11161] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 875.614525][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 875.645687][T11164] can0: slcan on ttyS3. [ 876.974803][T11149] can0 (unregistered): slcan off ttyS3. [ 877.477823][T11182] can0: slcan on ttyS3. [ 878.190869][T11174] can0 (unregistered): slcan off ttyS3. [ 878.798177][ T53] block nbd5: Attempted send on invalid socket [ 878.804526][ T53] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 878.815070][ T53] block nbd5: Attempted send on invalid socket [ 878.821396][ T53] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 878.831659][T11192] Mount JFS Failure: -5 [ 882.150389][T11219] loop2: detected capacity change from 0 to 8192 [ 883.101620][T11227] tipc: Started in network mode [ 883.106587][T11227] tipc: Node identity ac14140f, cluster identity 4711 [ 883.113644][T11227] tipc: New replicast peer: 172.30.0.1 [ 883.119377][T11227] tipc: Enabled bearer , priority 10 [ 884.206448][ T5009] tipc: Node number set to 2886997007 [ 886.843189][T11278] can0: slcan on ttyS3. [ 889.031507][T11273] can0 (unregistered): slcan off ttyS3. [ 892.520864][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 894.284260][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1545'. [ 894.595887][T11350] can0: slcan on ttyS3. [ 895.251044][T11345] can0 (unregistered): slcan off ttyS3. [ 895.541958][T11356] can0: slcan on ttyS3. [ 897.003206][T11352] can0 (unregistered): slcan off ttyS3. [ 901.432664][T11412] can0: slcan on ttyS3. [ 902.802796][T11406] can0 (unregistered): slcan off ttyS3. [ 903.458587][T11428] 9pnet_fd: Insufficient options for proto=fd [ 905.663598][T11436] can0: slcan on ttyS3. [ 906.001688][T11429] can0 (unregistered): slcan off ttyS3. [ 909.693220][T11482] can0: slcan on ttyS3. [ 910.381031][T11475] can0 (unregistered): slcan off ttyS3. [ 910.544889][T11494] 9pnet_fd: Insufficient options for proto=fd [ 913.626067][T11521] can0: slcan on ttyS3. [ 914.800953][T11528] can0 (unregistered): slcan off ttyS3. [ 915.795197][T11548] can0: slcan on ttyS3. [ 916.382073][T11539] can0 (unregistered): slcan off ttyS3. [ 916.830095][T11562] 9pnet_fd: Insufficient options for proto=fd [ 921.864877][T11610] can0: slcan on ttyS3. [ 922.610963][T11605] can0 (unregistered): slcan off ttyS3. [ 922.711714][T11616] 9pnet_fd: Insufficient options for proto=fd [ 924.144802][T11630] 9pnet_fd: Insufficient options for proto=fd [ 929.516256][T11691] 9pnet_fd: Insufficient options for proto=fd [ 929.993208][T11692] can0: slcan on ttyS3. [ 930.271172][T11667] can0 (unregistered): slcan off ttyS3. [ 931.324497][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.381346][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.678862][T11733] 9pnet_fd: Insufficient options for proto=fd [ 934.398580][T11746] 9pnet_fd: Insufficient options for proto=fd [ 937.399739][T11780] 9pnet_fd: Insufficient options for proto=fd [ 942.166762][T11835] 9pnet_fd: Insufficient options for proto=fd [ 946.329980][T11884] 9pnet_fd: Insufficient options for proto=fd [ 949.940950][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 952.936067][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 957.686392][T12016] 9pnet_fd: Insufficient options for proto=fd [ 958.748252][T12025] can0: slcan on ttyS3. [ 959.741359][T12019] can0 (unregistered): slcan off ttyS3. [ 960.114641][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 964.331222][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'. [ 964.370812][T12104] loop2: detected capacity change from 0 to 512 [ 964.516176][T12104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 964.525708][T12104] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.330601][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 966.189826][T12128] can0: slcan on ttyS3. [ 966.501234][T12110] can0 (unregistered): slcan off ttyS3. [ 969.472204][T12168] 9pnet_fd: Insufficient options for proto=fd [ 971.163065][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1733'. [ 974.167188][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 976.877091][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1751'. [ 979.533781][T12278] can0: slcan on ttyS3. [ 980.520927][T12271] can0 (unregistered): slcan off ttyS3. [ 982.227990][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'. [ 985.238084][T12341] can0: slcan on ttyS3. [ 986.541676][T12331] can0 (unregistered): slcan off ttyS3. [ 986.927700][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'. [ 987.703853][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'. [ 991.119383][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1793'. [ 993.129001][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.145705][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.864848][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 997.424660][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 1001.986428][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1825'. [ 1002.662561][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1829'. [ 1006.144174][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1841'. [ 1009.256731][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 1009.280380][T12615] loop5: detected capacity change from 0 to 1024 [ 1011.147878][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1852'. [ 1014.637895][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 1015.861153][T12678] can0: slcan on ttyS3. [ 1016.181629][T12672] can0 (unregistered): slcan off ttyS3. [ 1017.384252][T12693] can0: slcan on ttyS3. [ 1017.691302][T12666] can0 (unregistered): slcan off ttyS3. [ 1018.946245][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'. [ 1020.853607][T12755] can0: slcan on ttyS3. [ 1021.210895][T12751] can0 (unregistered): slcan off ttyS3. [ 1024.350002][T12787] can0: slcan on ttyS3. [ 1024.878636][T12781] can0 (unregistered): slcan off ttyS3. [ 1025.753501][T12812] can0: slcan on ttyS3. [ 1025.803744][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'. [ 1026.351032][T12808] can0 (unregistered): slcan off ttyS3. [ 1028.830242][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 1029.866671][T12878] can0: slcan on ttyS3. [ 1030.505914][T12874] can0 (unregistered): slcan off ttyS3. [ 1032.672474][T12918] can0: slcan on ttyS3. [ 1032.856153][T12902] can0 (unregistered): slcan off ttyS3. [ 1035.765455][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 1036.142007][T12948] can0: slcan on ttyS3. [ 1036.291161][T12943] can0 (unregistered): slcan off ttyS3. [ 1040.568188][T13018] can0: slcan on ttyS3. [ 1040.574361][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 1041.270992][T13009] can0 (unregistered): slcan off ttyS3. [ 1043.635508][T13072] can0: slcan on ttyS3. [ 1044.271187][T13068] can0 (unregistered): slcan off ttyS3. [ 1046.573945][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'. [ 1049.165593][T13144] can0: slcan on ttyS3. [ 1049.491387][T13140] can0 (unregistered): slcan off ttyS3. [ 1051.000058][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'. [ 1054.014364][T13212] can0: slcan on ttyS3. [ 1054.564820][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.573646][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.583023][ T1280] can0 selects TX queue 0, but real number of TX queues is 0 [ 1054.632346][T13206] can0 (unregistered): slcan off ttyS3. [ 1055.267818][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1976'. [ 1060.255772][T13264] can0: slcan on ttyS3. [ 1060.540821][T13261] can0 (unregistered): slcan off ttyS3. [ 1060.833107][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1991'. [ 1063.362381][T13320] loop2: detected capacity change from 0 to 1024 [ 1064.928354][T13342] can0: slcan on ttyS3. [ 1065.043040][ T8051] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 1065.256335][T13348] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1065.283820][T13348] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1065.316032][T13348] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1066.410902][T13332] can0 (unregistered): slcan off ttyS3. [ 1066.865418][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 1071.342061][T13406] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1071.350866][T13406] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1071.359906][T13406] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1072.608988][T13410] loop3: detected capacity change from 0 to 1024 [ 1075.498921][T13424] can0: slcan on ttyS3. [ 1076.491742][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 1076.591299][T13417] can0 (unregistered): slcan off ttyS3. [ 1076.752712][T13434] 9pnet_fd: Insufficient options for proto=fd [ 1079.729112][T13483] can0: slcan on ttyS3. [ 1080.340815][T13473] can0 (unregistered): slcan off ttyS3. [ 1080.982904][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2039'. [ 1085.499510][ T53] block nbd1: Attempted send on invalid socket [ 1085.505973][ T53] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1085.516798][ T53] block nbd1: Attempted send on invalid socket [ 1085.523382][ T53] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1085.532943][T13515] Mount JFS Failure: -5 [ 1086.910308][T13533] can0: slcan on ttyS3. [ 1087.561243][T13527] can0 (unregistered): slcan off ttyS3. [ 1090.172180][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 1092.884151][ T1212] block nbd2: Attempted send on invalid socket [ 1092.890473][ T1212] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1092.902094][ T1212] block nbd2: Attempted send on invalid socket [ 1092.908455][ T1212] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1092.918932][T13582] Mount JFS Failure: -5 [ 1093.926245][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'. [ 1095.583255][T13609] can0: slcan on ttyS3. [ 1096.170875][T13598] can0 (unregistered): slcan off ttyS3. [ 1097.453361][T13632] can0: slcan on ttyS3. [ 1097.463694][T13633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2069'. [ 1098.071108][T13627] can0 (unregistered): slcan off ttyS3. [ 1099.226221][T13654] can0: slcan on ttyS3. [ 1099.278381][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2074'. [ 1099.881288][T13648] can0 (unregistered): slcan off ttyS3. [ 1100.426705][T13671] loop0: detected capacity change from 0 to 1024 [ 1101.268279][ T1212] block nbd3: Attempted send on invalid socket [ 1101.275070][ T1212] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1101.285614][ T1212] block nbd3: Attempted send on invalid socket [ 1101.291918][ T1212] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1101.301404][T13675] Mount JFS Failure: -5 [ 1102.202123][T13686] can0: slcan on ttyS3. [ 1102.721005][T13677] can0 (unregistered): slcan off ttyS3. [ 1103.645996][T13703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2082'. [ 1108.659524][T13730] can0: slcan on ttyS3. [ 1108.684722][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 1108.940798][T13719] can0 (unregistered): slcan off ttyS3. [ 1113.791651][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2106'. [ 1114.746360][T13788] can0: slcan on ttyS3. [ 1116.172066][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.178412][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.372118][T13783] can0 (unregistered): slcan off ttyS3. [ 1116.678543][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2110'. [ 1117.994917][T13818] can0: slcan on ttyS3. [ 1118.653768][T13815] can0 (unregistered): slcan off ttyS3. [ 1120.680666][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2118'. [ 1121.992691][T13857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1122.000473][T13857] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.007962][T13857] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.015358][T13857] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.635446][T13864] can0: slcan on ttyS3. [ 1122.951819][T13860] can0 (unregistered): slcan off ttyS3. [ 1123.179104][T13869] can0: slcan on ttyS3. [ 1123.711167][T13861] can0 (unregistered): slcan off ttyS3. [ 1124.439998][T13886] can0: slcan on ttyS3. [ 1124.844227][T13880] can0 (unregistered): slcan off ttyS3. [ 1125.131270][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 1125.797252][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 1127.409563][T13924] loop0: detected capacity change from 0 to 256 [ 1127.447421][T13924] exfat: Deprecated parameter 'utf8' [ 1127.524236][T13924] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1128.790217][T13942] can0: slcan on ttyS3. [ 1129.440817][T13937] can0 (unregistered): slcan off ttyS3. [ 1130.570493][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2142'. [ 1134.967993][T14008] can0: slcan on ttyS3. [ 1135.602035][T14001] can0 (unregistered): slcan off ttyS3. [ 1135.918732][T14022] loop0: detected capacity change from 0 to 512 [ 1136.052744][T14022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1136.965239][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 1139.697752][T14058] loop3: detected capacity change from 0 to 1024 [ 1139.835577][T14058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1140.106119][T14058] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.2159: inode #12: comm syz.3.2159: iget: illegal inode # [ 1140.502524][T14058] EXT4-fs (loop3): Remounting filesystem read-only [ 1140.738610][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 1141.236438][T14084] can0: slcan on ttyS3. [ 1143.490840][T14075] can0 (unregistered): slcan off ttyS3. [ 1144.018119][T14096] can0: slcan on ttyS3. [ 1145.621295][T14091] can0 (unregistered): slcan off ttyS3. [ 1148.631507][T14135] loop5: detected capacity change from 0 to 2048 [ 1149.053316][T14135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1149.470376][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'. [ 1150.316973][T14152] tipc: Enabling of bearer rejected, already enabled [ 1151.451553][T14159] can0: slcan on ttyS3. [ 1152.581329][T14154] can0 (unregistered): slcan off ttyS3. [ 1153.019779][T14166] can0: slcan on ttyS3. [ 1153.550753][T14162] can0 (unregistered): slcan off ttyS3. [ 1155.404531][T14205] loop0: detected capacity change from 0 to 8 [ 1155.875391][T14200] SQUASHFS error: Unable to read directory block [631:26] [ 1157.577474][T14225] can0: slcan on ttyS3. [ 1158.227100][T14220] can0 (unregistered): slcan off ttyS3. [ 1158.953565][T14255] can0: slcan on ttyS3. [ 1159.561407][T14245] can0 (unregistered): slcan off ttyS3. [ 1162.683804][T14271] overlayfs: missing 'lowerdir' [ 1164.505188][T14292] can0: slcan on ttyS3. [ 1165.051275][T14286] can0 (unregistered): slcan off ttyS3. [ 1165.708421][T14308] can0: slcan on ttyS3. [ 1166.631326][T14305] can0 (unregistered): slcan off ttyS3. [ 1166.695502][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 1170.721719][T14361] can0: slcan on ttyS3. [ 1171.632336][T14356] can0 (unregistered): slcan off ttyS3. [ 1172.036925][T14381] can0: slcan on ttyS3. [ 1172.711730][T14375] can0 (unregistered): slcan off ttyS3. [ 1175.180789][T14411] loop2: detected capacity change from 0 to 2048 [ 1175.224590][T14411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1177.044511][T14433] can0: slcan on ttyS3. [ 1177.083705][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.090036][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.551812][T14428] can0 (unregistered): slcan off ttyS3. [ 1178.796468][T14444] can0: slcan on ttyS3. [ 1179.391379][T14441] can0 (unregistered): slcan off ttyS3. [ 1182.564347][T14490] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2238'. [ 1183.205286][T14493] can0: slcan on ttyS3. [ 1183.691221][T14491] can0 (unregistered): slcan off ttyS3. [ 1184.504904][T14507] can0: slcan on ttyS3. [ 1185.241263][T14503] can0 (unregistered): slcan off ttyS3. [ 1189.634332][T14536] loop5: detected capacity change from 0 to 4096 [ 1190.002546][T14542] can0: slcan on ttyS3. [ 1191.281096][T14537] can0 (unregistered): slcan off ttyS3. [ 1191.295633][T14559] can0: slcan on ttyS3. [ 1193.898365][T14545] can0 (unregistered): slcan off ttyS3. [ 1198.706250][T14628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2266'. [ 1199.814618][T14633] can0: slcan on ttyS3. [ 1202.050999][T14629] can0 (unregistered): slcan off ttyS3. [ 1202.566741][T14667] can0: slcan on ttyS3. [ 1203.239274][T14656] can0 (unregistered): slcan off ttyS3. [ 1207.203222][T14713] can0: slcan on ttyS3. [ 1207.439277][T14715] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2283'. [ 1209.971496][T14706] can0 (unregistered): slcan off ttyS3. [ 1210.193285][T14728] can0: slcan on ttyS3. [ 1211.180896][T14720] can0 (unregistered): slcan off ttyS3. [ 1211.606385][T14736] loop0: detected capacity change from 0 to 128 [ 1211.819538][T14736] loop0: detected capacity change from 0 to 512 [ 1212.741830][T14736] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1212.760711][T14736] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1213.052387][T14736] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.2290: Invalid block bitmap block 0 in block_group 0 [ 1213.740579][T14766] loop5: detected capacity change from 0 to 512 [ 1215.141578][T14766] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1215.442858][T14736] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1215.520142][T14736] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2290: attempt to clear invalid blocks 983261 len 1 [ 1215.678216][T14736] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.2290: Invalid inode table block 0 in block_group 0 [ 1215.743643][T14736] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1215.839759][T14780] tipc: Enabling of bearer rejected, already enabled [ 1216.420626][T14736] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1218.030711][T14736] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.2290: Invalid inode table block 0 in block_group 0 [ 1218.164886][T14736] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1218.176886][T14736] EXT4-fs error (device loop0): ext4_truncate:4325: inode #11: comm syz.0.2290: mark_inode_dirty error [ 1218.179737][ T9491] EXT4-fs (loop5): unmounting filesystem. [ 1218.292390][T14788] can0: slcan on ttyS3. [ 1218.350798][T14736] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1218.419934][T14736] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.2290: Invalid inode table block 0 in block_group 0 [ 1218.805959][T14736] EXT4-fs (loop0): 1 truncate cleaned up [ 1218.839651][T14736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1218.971530][T14785] can0 (unregistered): slcan off ttyS3. [ 1219.072475][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 1219.227666][T14799] can0: slcan on ttyS3. [ 1220.441237][T14790] can0 (unregistered): slcan off ttyS3. [ 1223.400885][T14827] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1224.519638][T14836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1224.527052][T14836] IPv6: NLM_F_CREATE should be set when creating new route [ 1224.534501][T14836] IPv6: NLM_F_CREATE should be set when creating new route [ 1224.541847][T14836] IPv6: NLM_F_CREATE should be set when creating new route [ 1225.630220][T14847] loop2: detected capacity change from 0 to 4096 [ 1225.847925][T14850] can0: slcan on ttyS3. [ 1226.470691][T14844] can0 (unregistered): slcan off ttyS3. [ 1227.339387][T14861] can0: slcan on ttyS3. [ 1227.990918][T14857] can0 (unregistered): slcan off ttyS3. [ 1228.775476][T14879] 9pnet_fd: Insufficient options for proto=fd [ 1229.231165][T14887] loop2: detected capacity change from 0 to 256 [ 1229.360374][T14887] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1230.716635][ T27] audit: type=1800 audit(1785567795.308:4): pid=14887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2324" name="file2" dev="loop2" ino=1048632 res=0 errno=0 [ 1231.033444][T14897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1231.040733][T14897] IPv6: NLM_F_CREATE should be set when creating new route [ 1231.048017][T14897] IPv6: NLM_F_CREATE should be set when creating new route [ 1231.055302][T14897] IPv6: NLM_F_CREATE should be set when creating new route [ 1231.401951][T14918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2327'. [ 1232.062445][T14919] slcan: can't register candev [ 1232.067387][T14919] Falling back ldisc for ttyS3. [ 1232.274816][ T27] audit: type=1800 audit(1785567795.828:5): pid=14914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2324" name="file2" dev="loop2" ino=1048632 res=0 errno=0 [ 1232.613883][T14928] can0: slcan on ttyS3. [ 1233.220860][T14921] can0 (unregistered): slcan off ttyS3. [ 1236.427742][T14971] can0: slcan on ttyS3. [ 1237.326061][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 1237.338054][T14966] can0 (unregistered): slcan off ttyS3. [ 1238.890036][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.896967][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.108499][T14982] can0: slcan on ttyS3. [ 1240.381519][T14980] can0 (unregistered): slcan off ttyS3. [ 1242.039410][T15032] can0: slcan on ttyS3. [ 1242.790930][T15026] can0 (unregistered): slcan off ttyS3. [ 1245.878843][T15050] can0: slcan on ttyS3. [ 1246.071193][T15039] can0 (unregistered): slcan off ttyS3. [ 1248.478456][T15081] can0: slcan on ttyS3. [ 1249.200838][T15072] can0 (unregistered): slcan off ttyS3. [ 1251.577833][T15122] can0: slcan on ttyS3. [ 1252.072304][T15112] can0 (unregistered): slcan off ttyS3. [ 1257.565187][T15162] 9pnet_fd: Insufficient options for proto=fd [ 1258.909914][T15180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1259.396866][T15182] can0: slcan on ttyS3. [ 1261.768921][T15172] can0 (unregistered): slcan off ttyS3. [ 1265.442806][T15231] 9pnet_fd: Insufficient options for proto=fd [ 1267.560091][T15253] can0: slcan on ttyS3. [ 1268.720843][T15249] can0 (unregistered): slcan off ttyS3. [ 1271.444484][T15296] 9pnet_fd: Insufficient options for proto=fd [ 1275.224971][T15332] can0: slcan on ttyS3. [ 1276.000665][T15320] can0 (unregistered): slcan off ttyS3. [ 1276.968932][T15342] can0: slcan on ttyS3. [ 1277.940777][T15338] can0 (unregistered): slcan off ttyS3. [ 1279.572414][T15361] 9pnet_fd: Insufficient options for proto=fd [ 1284.588285][T15392] loop0: detected capacity change from 0 to 4096 [ 1284.960067][T15409] loop2: detected capacity change from 0 to 256 [ 1285.540241][T15409] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1286.592283][T15427] 9pnet_fd: Insufficient options for proto=fd [ 1287.485013][T15438] 9pnet_fd: Insufficient options for proto=fd [ 1290.792972][T15484] loop5: detected capacity change from 0 to 64 [ 1290.881829][T15484] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1291.094760][T15491] 9pnet_fd: Insufficient options for proto=fd [ 1293.407025][T15506] 9pnet_fd: Insufficient options for proto=fd [ 1297.520756][T15548] 9pnet_fd: Insufficient options for proto=fd [ 1298.942997][T15563] 9pnet_fd: Insufficient options for proto=fd [ 1299.960237][T15567] loop3: detected capacity change from 0 to 4096 [ 1299.969077][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.969122][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.899359][T15614] 9pnet_fd: Insufficient options for proto=fd [ 1305.685395][T15624] 9pnet_fd: Insufficient options for proto=fd [ 1310.541677][T15657] 9pnet_fd: Insufficient options for proto=fd [ 1311.568040][T15665] syz.2.2491 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1311.582628][T15665] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1312.472102][ T9497] Bluetooth: hci4: command 0x1003 tx timeout [ 1312.478631][ T4278] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1312.579341][T15669] 9pnet_fd: Insufficient options for proto=fd [ 1321.319356][T15731] 9pnet_fd: Insufficient options for proto=fd [ 1324.060598][T15753] ip6t_srh: unknown srh match flags FF3F [ 1328.928390][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'. [ 1329.554158][T15795] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1329.589438][T15791] 9pnet_fd: Insufficient options for proto=fd [ 1333.198832][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'. [ 1333.447303][T15838] 9pnet_fd: Insufficient options for proto=fd [ 1335.411028][T15668] Bluetooth: hci0: Malformed LE Event: 0x1d [ 1337.744835][ T4439] Process accounting resumed [ 1339.436495][T15884] 9pnet_fd: Insufficient options for proto=fd [ 1340.059600][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 1342.575412][T15915] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1348.682920][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 1352.190620][ T4385] Bluetooth: Error in BCSP hdr checksum [ 1352.519010][ T5130] Bluetooth: Error in BCSP hdr checksum [ 1353.526422][T15984] loop5: detected capacity change from 0 to 8192 [ 1354.212063][T15655] Bluetooth: hci4: command 0x1003 tx timeout [ 1354.218627][T15668] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1354.678710][ T27] audit: type=1800 audit(1785567922.267:6): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2569" name="bus" dev="loop5" ino=1048634 res=0 errno=0 [ 1355.117569][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 1358.801114][T16038] device wireguard0 entered promiscuous mode [ 1361.403356][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.443659][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.108112][T16130] input: syz0 as /devices/virtual/input/input97 [ 1365.223396][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2595'. [ 1374.860429][T16227] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1375.883916][T16234] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1378.123254][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'. [ 1384.698157][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2631'. [ 1385.793817][T16324] loop3: detected capacity change from 0 to 2048 [ 1385.840355][T16324] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1385.908454][ T27] audit: type=1800 audit(1785567956.503:7): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2634" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 1388.570991][T16348] fuse: Unknown parameter '0x0000000000000009' [ 1391.641532][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1391.803114][T15655] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1391.811907][T15655] Bluetooth: hci2: Injecting HCI hardware error event [ 1391.831564][T15668] Bluetooth: hci2: hardware error 0x00 [ 1393.460721][T15655] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 1394.526040][T16404] loop0: detected capacity change from 0 to 512 [ 1394.550121][T16404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1394.598896][T16404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1394.620787][T16404] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.667844][ T27] audit: type=1800 audit(1785567965.263:8): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2653" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1394.698281][T15668] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1394.956288][T16411] (syz.3.2652,16411,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1394.965479][T16411] (syz.3.2652,16411,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1395.453773][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 1402.251488][T15655] Bluetooth: hci0: command 0x0406 tx timeout [ 1404.479570][T16486] loop2: detected capacity change from 0 to 8 [ 1404.501668][T16486] squashfs: Unknown parameter '' [ 1404.561575][T16199] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1410.697681][T16591] capability: warning: `syz.3.2685' uses deprecated v2 capabilities in a way that may be insecure [ 1410.767526][T16593] futex_wake_op: syz.3.2685 tries to shift op by 144; fix this program [ 1412.534466][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2688'. [ 1414.610812][T16624] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1419.476731][T16676] loop0: detected capacity change from 0 to 2048 [ 1419.544087][T16676] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1419.648098][ T27] audit: type=1800 audit(1785567990.243:9): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2705" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 1423.063729][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.074367][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.085275][T16740] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1428.658588][T16749] Process accounting resumed [ 1433.746493][T16143] Bluetooth: Error in BCSP hdr checksum [ 1434.747468][T16887] UBIFS error (pid: 16887): cannot open "ubifs", error -22 [ 1436.163272][T15655] Bluetooth: hci4: command 0x1003 tx timeout [ 1436.177220][T15668] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1449.826105][T17046] device veth1_macvtap left promiscuous mode [ 1458.288546][T17126] 9pnet_fd: Insufficient options for proto=fd [ 1458.699265][T17133] loop2: detected capacity change from 0 to 512 [ 1458.725877][T17133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1458.921222][ T27] audit: type=1326 audit(1785568029.463:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17127 comm="syz.0.2803" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21e139e019 code=0x0 [ 1459.285512][T17133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1459.418701][T17133] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.458655][ T27] audit: type=1800 audit(1785568030.053:11): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2806" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1461.947687][ T27] audit: type=1326 audit(1785568032.163:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17163 comm="syz.1.2810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76c739e019 code=0x0 [ 1462.674324][T17180] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1464.354838][T17195] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1464.955249][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1467.444065][T15668] Bluetooth: hci1: command 0x0406 tx timeout [ 1468.262928][T17222] Process accounting resumed [ 1469.428915][T17247] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1469.954497][T17254] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1470.522781][T17253] syz.3.2832 uses obsolete (PF_INET,SOCK_PACKET) [ 1472.306515][T17284] loop2: detected capacity change from 0 to 128 [ 1473.562258][T17290] loop0: detected capacity change from 0 to 32768 [ 1473.737131][T17297] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1474.626615][T17290] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1475.816481][ T27] audit: type=1800 audit(1785568046.243:13): pid=17310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2841" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 1476.169267][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 1477.716508][T17351] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1478.756866][T17364] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1479.980479][T17369] loop5: detected capacity change from 0 to 512 [ 1479.992212][T17369] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1480.024849][T17369] EXT4-fs (loop5): 1 truncate cleaned up [ 1480.030621][T17369] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1480.948510][ T9491] EXT4-fs (loop5): unmounting filesystem. [ 1485.032007][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.038554][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.182685][T17434] loop5: detected capacity change from 0 to 512 [ 1485.224989][T17434] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1486.106087][T17434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1486.128385][T17434] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1486.234185][ T27] audit: type=1800 audit(1785568056.833:14): pid=17434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2876" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1487.154170][T17460] device veth1_macvtap left promiscuous mode [ 1487.874501][ T9491] EXT4-fs (loop5): unmounting filesystem. [ 1488.943347][T17482] loop5: detected capacity change from 0 to 1764 [ 1489.282885][T17487] comedi comedi3: rti802: I/O port conflict (0x100,4) [ 1492.285188][T17521] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1492.567372][T17524] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1495.459355][T17557] loop5: detected capacity change from 0 to 40427 [ 1495.492149][T17557] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1495.499926][T17557] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1495.512354][T17557] F2FS-fs (loop5): invalid crc value [ 1495.559669][T17557] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1495.631844][T17557] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1495.638925][T17557] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1496.633192][T17571] syz.5.2899: attempt to access beyond end of device [ 1496.633192][T17571] loop5: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 1496.914643][T17568] device veth1_macvtap left promiscuous mode [ 1497.819616][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2906'. [ 1503.475578][T17641] loop0: detected capacity change from 0 to 16 [ 1503.491241][T17641] erofs: (device loop0): mounted with root inode @ nid 36. [ 1506.432384][T17669] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1508.217260][T17687] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 1512.251907][T17726] device veth1_macvtap left promiscuous mode [ 1523.269951][T17834] loop0: detected capacity change from 0 to 1024 [ 1525.489008][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1525.503668][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1525.509674][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1528.080182][T17880] [ 1528.082555][T17880] ====================================================== [ 1528.089578][T17880] WARNING: possible circular locking dependency detected [ 1528.096616][T17880] syzkaller #0 Not tainted [ 1528.101032][T17880] ------------------------------------------------------ [ 1528.108053][T17880] syz.0.2978/17880 is trying to acquire lock: [ 1528.114121][T17880] ffffffff8d7b2f90 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1528.125527][T17880] [ 1528.125527][T17880] but task is already holding lock: [ 1528.132892][T17880] ffff888054e24660 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 1528.143432][T17880] [ 1528.143432][T17880] which lock already depends on the new lock. [ 1528.143432][T17880] [ 1528.153838][T17880] [ 1528.153838][T17880] the existing dependency chain (in reverse order) is: [ 1528.162859][T17880] [ 1528.162859][T17880] -> #2 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 1528.171570][T17880] down_write+0x36/0x60 [ 1528.176330][T17880] configfs_depend_item_unlocked+0x14f/0x430 [ 1528.182864][T17880] usbg_make_tpg+0x1f3/0x580 [ 1528.187990][T17880] target_fabric_make_tpg+0xa0/0x6d0 [ 1528.193909][T17880] configfs_mkdir+0x511/0x9e0 [ 1528.199123][T17880] vfs_mkdir+0x386/0x570 [ 1528.203962][T17880] do_mkdirat+0x1d8/0x440 [ 1528.208824][T17880] __x64_sys_mkdir+0x6a/0x80 [ 1528.213947][T17880] do_syscall_64+0x4c/0xa0 [ 1528.218933][T17880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1528.225420][T17880] [ 1528.225420][T17880] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 1528.233068][T17880] __mutex_lock+0x12d/0xae0 [ 1528.238082][T17880] tcm_set_name+0x26/0x90 [ 1528.242918][T17880] function_make+0x195/0x350 [ 1528.248076][T17880] configfs_mkdir+0x511/0x9e0 [ 1528.253286][T17880] vfs_mkdir+0x386/0x570 [ 1528.258073][T17880] do_mkdirat+0x1d8/0x440 [ 1528.262921][T17880] __x64_sys_mkdir+0x6a/0x80 [ 1528.268030][T17880] do_syscall_64+0x4c/0xa0 [ 1528.272954][T17880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1528.279354][T17880] [ 1528.279354][T17880] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1528.287583][T17880] __lock_acquire+0x2d18/0x7c40 [ 1528.292965][T17880] lock_acquire+0x1bb/0x4a0 [ 1528.297979][T17880] __mutex_lock+0x12d/0xae0 [ 1528.302988][T17880] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1528.309650][T17880] configfs_symlink+0x5a4/0x13c0 [ 1528.315090][T17880] vfs_symlink+0x245/0x3d0 [ 1528.320021][T17880] do_symlinkat+0x1b6/0x400 [ 1528.325035][T17880] __x64_sys_symlinkat+0x95/0xa0 [ 1528.330482][T17880] do_syscall_64+0x4c/0xa0 [ 1528.335412][T17880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1528.341830][T17880] [ 1528.341830][T17880] other info that might help us debug this: [ 1528.341830][T17880] [ 1528.352043][T17880] Chain exists of: [ 1528.352043][T17880] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#22 [ 1528.352043][T17880] [ 1528.366711][T17880] Possible unsafe locking scenario: [ 1528.366711][T17880] [ 1528.374142][T17880] CPU0 CPU1 [ 1528.379514][T17880] ---- ---- [ 1528.384867][T17880] lock(&sb->s_type->i_mutex_key#22); [ 1528.390323][T17880] lock(&opts->dep_lock); [ 1528.397279][T17880] lock(&sb->s_type->i_mutex_key#22); [ 1528.405425][T17880] lock(gadget_subsys.su_mutex); [ 1528.410435][T17880] [ 1528.410435][T17880] *** DEADLOCK *** [ 1528.410435][T17880] [ 1528.418564][T17880] 2 locks held by syz.0.2978/17880: [ 1528.423740][T17880] #0: ffff8881436c8460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1528.433002][T17880] #1: ffff888054e24660 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 1528.443868][T17880] [ 1528.443868][T17880] stack backtrace: [ 1528.449745][T17880] CPU: 0 PID: 17880 Comm: syz.0.2978 Not tainted syzkaller #0 [ 1528.457181][T17880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1528.467221][T17880] Call Trace: [ 1528.470482][T17880] [ 1528.473395][T17880] dump_stack_lvl+0x188/0x24e [ 1528.478068][T17880] ? load_image+0x410/0x410 [ 1528.482579][T17880] ? show_regs_print_info+0x12/0x12 [ 1528.487764][T17880] ? print_circular_bug+0x12b/0x1a0 [ 1528.492949][T17880] check_noncircular+0x296/0x330 [ 1528.497879][T17880] ? add_chain_block+0x9b0/0x9b0 [ 1528.502808][T17880] ? lockdep_lock+0xf1/0x1f0 [ 1528.507394][T17880] ? _find_first_zero_bit+0xd2/0x100 [ 1528.512763][T17880] __lock_acquire+0x2d18/0x7c40 [ 1528.517601][T17880] ? __kernel_text_address+0x9/0x30 [ 1528.522854][T17880] ? stack_trace_save+0xf0/0xf0 [ 1528.527729][T17880] ? verify_lock_unused+0x140/0x140 [ 1528.532912][T17880] ? mark_lock+0x94/0x320 [ 1528.537225][T17880] ? __lock_acquire+0x1465/0x7c40 [ 1528.542231][T17880] lock_acquire+0x1bb/0x4a0 [ 1528.546719][T17880] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1528.553136][T17880] ? __might_sleep+0xd0/0xd0 [ 1528.557776][T17880] ? read_lock_is_recursive+0x10/0x10 [ 1528.563133][T17880] ? mark_lock+0x94/0x320 [ 1528.567446][T17880] __mutex_lock+0x12d/0xae0 [ 1528.571948][T17880] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1528.578297][T17880] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1528.584622][T17880] ? mutex_lock_nested+0x10/0x10 [ 1528.589552][T17880] ? rwsem_write_trylock+0x135/0x1c0 [ 1528.594823][T17880] ? clear_nonspinnable+0x60/0x60 [ 1528.599836][T17880] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 1528.605984][T17880] ? inode_permission+0xef/0x480 [ 1528.610902][T17880] ? bpf_lsm_inode_permission+0x5/0x10 [ 1528.616473][T17880] ? security_inode_permission+0xac/0xf0 [ 1528.622125][T17880] configfs_symlink+0x5a4/0x13c0 [ 1528.627055][T17880] ? end_current_label_crit_section+0x14b/0x170 [ 1528.633398][T17880] ? common_perm+0x15d/0x1b0 [ 1528.637998][T17880] ? from_kgid+0x14f/0x6a0 [ 1528.642466][T17880] ? make_kgid+0x650/0x650 [ 1528.646864][T17880] ? apparmor_path_symlink+0x1ac/0x230 [ 1528.652306][T17880] ? lookup_one_qstr_excl+0x11c/0x240 [ 1528.657665][T17880] ? detach_groups+0x370/0x370 [ 1528.662415][T17880] ? inode_permission+0xef/0x480 [ 1528.667337][T17880] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1528.672534][T17880] ? security_inode_symlink+0xb2/0x100 [ 1528.677998][T17880] vfs_symlink+0x245/0x3d0 [ 1528.682414][T17880] do_symlinkat+0x1b6/0x400 [ 1528.686900][T17880] ? vfs_symlink+0x3d0/0x3d0 [ 1528.691475][T17880] __x64_sys_symlinkat+0x95/0xa0 [ 1528.696400][T17880] do_syscall_64+0x4c/0xa0 [ 1528.700804][T17880] ? clear_bhb_loop+0x60/0xb0 [ 1528.705466][T17880] ? clear_bhb_loop+0x60/0xb0 [ 1528.710141][T17880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1528.716026][T17880] RIP: 0033:0x7f21e139e019 [ 1528.720427][T17880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.740016][T17880] RSP: 002b:00007f21e227f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1528.748427][T17880] RAX: ffffffffffffffda RBX: 00007f21e1625fa0 RCX: 00007f21e139e019 [ 1528.756383][T17880] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 1528.764339][T17880] RBP: 00007f21e143500c R08: 0000000000000000 R09: 0000000000000000 [ 1528.772298][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.780252][T17880] R13: 00007f21e1626038 R14: 00007f21e1625fa0 R15: 00007ffc817a8988 [ 1528.788215][T17880]